Privacy Notice

Account data (email address, name, hashed password, Google sign-in details) — to create and operate your account. Legal basis: performance of a contract.

Content you submit (questions and conversations with WhisperAI, K3P questionnaire answers) — to provide and improve the service. Legal basis: contract and legitimate interests.

Usage and technical data (IP address, device and browser type, error logs) — for security, abuse prevention and service improvement. Legal basis: legitimate interests.

Support messages — to answer your enquiries. Legal basis: legitimate interests.

Payment data is collected and processed by Paddle; we do not store card numbers.

Service providers (hosting and database, email, AI providers powering WhisperAI, support tooling) acting as processors.

Paddle.com as Merchant of Record for the sale, subscription management, payments, tax compliance and invoicing.

Professional advisers (legal, accounting) and authorities where required by law.

We do not sell personal data.

Our providers may process data outside Switzerland and the EEA. Such transfers rely on adequacy decisions or standard contractual clauses.

Account data is kept while the account is active and up to 12 months after deletion. Transaction records are kept as required by tax law (up to 10 years). Other data is deleted or anonymised once no longer needed.

You have the right to access, rectification, erasure, restriction, portability, objection and withdrawal of consent. Write to ridewithtomch@gmail.com; we respond within one month. You may also complain to a supervisory authority (in Switzerland: the FDPIC).

We apply appropriate technical and organisational measures: encryption in transit, access controls and database-level access rules.

We use essential cookies for sign-in and to remember your language choice (rwt_locale). We do not use marketing cookies. You can delete or block cookies in your browser settings, but sign-in may then not work.