Privacy Policy

Last updated: 22 May 2026

This Privacy Policy explains what personal information Council ("Council", "we", "us") collects when you use the Council mobile application and related services (the "Service"), how we use it, and the choices you have. By using the Service you agree to the practices described here.

1. Information we collect

We collect only the information needed to operate the Service:

• Account information: your email address and display name.
• Sign-in identifier: the account identifier returned by your sign-in provider (Google or Apple) when you sign in with that provider. We do not receive your password.
• User content: the messages and chat content you send to and receive from advisors within the Service.
• Basic technical data: diagnostic information (such as device type, operating system version, and error logs) needed to keep the Service running. We do not use third-party analytics or advertising trackers.

2. How we use your information

We use the information above to:

• provide, maintain, and improve the Service;
• authenticate you and secure your account;
• generate AI advisor responses to the messages you send;
• respond to support requests and communicate important service notices;
• comply with legal obligations and enforce our Terms of Service.

3. Third-party processors

We use the following service providers to operate the Service. They process personal data on our behalf under their own privacy and security commitments:

• Anthropic — generates AI advisor responses from the chat content you send.
• Supabase — database and storage for your account and chat content.
• ElevenLabs — generates synthesised voice audio from advisor responses.
• Google and Apple — sign-in providers for "Sign in with Google" and "Sign in with Apple".
• Railway — hosting infrastructure for the Council backend.

4. Sharing and sale of personal information

We do not sell your personal information, and we do not share it with third parties for their own marketing purposes. We share information only with the processors listed above, when required by law, or to protect the rights, safety, and property of Council or its users.

5. Data retention

We keep your account information and chat content for as long as your account is active. If you delete your account, we delete or anonymise this data within a reasonable period, except where we are required to retain it to comply with legal obligations or resolve disputes.

6. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete the personal information we hold about you, and to object to or restrict certain processing. You can exercise these rights — including requesting account and data deletion — by emailing us at the address below. We will respond within the time required by applicable law.

7. Children

Council is not directed to children under 13 (or the equivalent minimum age in your country), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us so we can remove it.

8. International transfers

Council operates internationally, and the processors listed above may store and process data in countries other than the one you live in. Where required, we rely on lawful transfer mechanisms to protect your information.

9. Security

We take reasonable technical and organisational measures to protect your information, but no system is perfectly secure. We cannot guarantee absolute security and you use the Service at your own risk.

10. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date above. Material changes will be communicated through the Service or by email where appropriate.

11. Contact

For privacy questions, data subject requests, or account deletion, contact us at hello@getcouncil.app.