Privacy Policy

Say It Kinder · Updated October 18, 2026

Counsel helps two partners communicate, with AI assistance. Your conversations can be sensitive. This page explains how the app handles them and which choices you control.

What the service stores

We store the names you choose, your pairing code and access credentials, original and delivered messages, questions and AI replies, and a memory summary of shared conversations. These records are held in Cloudflare D1. Names do not need to be your full legal names.

The service also stores usage counters and a hash derived from your IP address for rate limiting. If you enable iPhone notifications, it stores a device push token. Counsel Plus uses subscription entitlement and transaction records to apply access to the pairing. These records, your messages, chosen names, and device tokens are linked to your pairing or seat.

The browser saves your pairing access token, names, and AI-processing consent choice in local storage to keep you signed in. Drafts stay in the current tab's memory until you send or leave. The native app stores credentials on your device. Anyone who can access your unlocked device or private recovery link may be able to access your conversations.

How AI processing works

When you ask for a rewrite or an AI reply, the relevant message, chosen names, recent context, and shared memory are sent through OpenRouter to a model provider. The configured primary model is Google Gemini; the service may use another configured model when needed. The service and its providers must process this text to produce a response.

Counsel does not enable web search for shared or private conversations. Provider processing and retention are governed by their policies and the service's provider settings; this app does not promise that every provider retains no data.

What your partner can see

Both partners can read delivered messages and AI replies in Together, plus the shared memory. Your original wording is returned to you only. Private messages and replies are filtered out of your partner's API responses and are excluded from shared memory and shared AI context.

Private conversations are still processed by the service and its AI providers. Counsel is not end-to-end encrypted. Private here means not shared with your partner through the app.

Private messages do not trigger partner push notifications. Shared notifications do not contain the text of a message.

Infrastructure and data use

Counsel uses Cloudflare to host the service and store application records, OpenRouter and configured model providers for AI processing, and Apple for iPhone purchases and push delivery. These services receive the information needed to perform those functions and may maintain their own operational records. This web app does not include advertising trackers or analytics scripts.

Counsel does not sell message content or use it for advertising. Do not include information you do not want processed by these services.

Your recovery link

Your private recovery link is a credential, not an invitation. Anyone with it can access your seat, including your Private journal. Keep it in a password manager or another place you trust. Share only the couple code or invitation link with your partner. New recovery links carry the credential after the # character so it is not sent as part of the page request.

Deleting your data

On iPhone, use Settings → Delete all data. On the web, open Settings → Delete my data. This deletes shared messages and memory for both partners, your own Private journal, your name and device records, and revokes your access credential. Your partner's Private journal remains theirs. The pairing is removed after both seats have been deleted.

This action cannot be undone in Counsel. It removes your active conversation and account records. It does not recall messages someone already copied or control the retention of infrastructure logs or previously processed data held by providers.

After deletion, we keep a hashed subscription identifier and its latest product, expiry and refund status so an active purchase can be restored to a new pairing and an older receipt cannot undo a refund. This record no longer contains your pairing, seat, name, messages, recovery credential or original Apple transaction ID. Deleting Counsel data does not cancel an Apple subscription.

Contact

For privacy questions, email adamc@mocalalliance.com. Do not include your recovery link or sensitive conversation text in a support email.