Privacy Policy

Last updated: 14 November 2026 · Consent version 2026-11-14

ReadMyEx ("we", "us") lets you paste a chat and receive an AI-generated, entertainment-only analysis. Chats are extremely personal, so we built the service to collect as little as possible. This policy explains what we process, why, and your rights under the EU/UK GDPR and the Israeli Protection of Privacy Law, 5741-1981 (including Amendment 13).

1. Who is responsible

The data controller is the operator of ReadMyEx. Contact: privacy@readmyex.com

2. What happens to your chat

• Anonymized on your device first. Before anything is uploaded, your browser replaces participant names with labels (ME / THEM), and removes phone numbers, email addresses, links, @handles and long numbers. You can add extra names to hide and preview exactly what will be sent. Our server repeats the number/email/link removal as a safety net. Automatic anonymization isn't perfect: names of other people or places mentioned in passing may remain unless you add them to the "names to hide" field.
• We never store the raw chat. Only the anonymized version reaches our server.
• Temporary encrypted copy. To let you buy the full report later, the anonymized chat is stored encrypted (AES-256) for up to 24 hours. After your full report is generated, the copy is kept for up to 7 more days so you can open extra chapters about the same chat, and then it is deleted automatically. If you don't buy the full report, it is deleted when the 24 hours expire (48 hours after a payment, so a failed generation can be retried). You can delete it immediately at any time with "Delete the chat copy now".
• No chat content in logs. Our server logs never contain chat text.

3. Third-party AI processing

The anonymized chat is sent to a third-party AI provider to generate your analysis. Currently this is Google Gemini API (Google LLC). Important: when we use Google's free tier, Google may use submitted content to improve its products, and human reviewers may read it (see Google's Gemini API Additional Terms of Service). This is why we anonymize before sending. If we switch providers (for example to a paid tier that doesn't train on data, or another AI provider), we will update this section. Data may be processed outside Israel and the EEA, including in the United States.

4. What we store

• Your reports: the AI results (verdict, scores, full report if purchased) and simple texting statistics (message counts, reply times). These contain no chat text beyond any short quotes the AI included.
• Account (optional): email address and a securely hashed password.
• Payments: handled by Lemon Squeezy (Lemon Squeezy LLC), which acts as the reseller/merchant of record and processes your payment under its own privacy policy. We never see your card details. We keep a record of the payment (amount, date, order ID) as required for accounting/tax law.
• Cookies: strictly necessary cookies only: a random device ID (so you can see reports you made without an account), a login session cookie, and your language choice in local storage. No advertising or third-party tracking cookies.
• Traffic stats: we count visits with a daily-rotating salted hash of IP address + browser. The IP address is never stored, and the salt is destroyed after 2 days, so visits can't be linked across days or back to you.

5. Legal bases (GDPR)

• Analyzing your chat: your explicit consent (Art. 6(1)(a) and, where the chat reveals sensitive data such as sex life or health, Art. 9(2)(a)). You give it with the checkbox before upload and can withdraw it any time by deleting your data.
• Accounts, reports and payments: performance of a contract (Art. 6(1)(b)).
• Payment records: legal obligation (Art. 6(1)(c)).
• Security and anonymous traffic statistics: legitimate interests (Art. 6(1)(f)).

6. Other people in your chat

Chats contain other people's messages. Only upload chats you are a participant in, use the analysis only for your own reflection, and don't share results in a way that identifies someone else. Anonymization exists partly to protect them.

7. How long we keep things

• Anonymized chat copy: max 24h before the full report (48h after payment), and max 7 days after the full report is generated, then deleted.
• Reports without an account: deleted after 30 days.
• Reports with an account: until you delete them or your account.
• Payment records: as long as accounting law requires (in Israel generally 7 years), unlinked from you if you delete your account.

8. Your rights

You can access, export, correct and delete your data, withdraw consent, object, and complain to a supervisory authority (in Israel: the Privacy Protection Authority; in the EU: your local data protection authority). Self-service: on the Account page use Download my data and Delete ALL my data. Each report also has its own delete button. Or email us.

9. Security

HTTPS everywhere, encrypted temporary chat storage, hashed passwords (bcrypt), secrets kept outside the code, and access to the admin panel restricted and password-protected.

10. Age

ReadMyEx is for people aged 18 and over.

11. Not therapy

Analyses are AI-generated entertainment and may be wrong. They are not psychological, medical, legal or relationship advice. If you are in distress or in danger, contact local emergency services, ERAN (1201, Israel) or find a helpline at findahelpline.com.