Privacy Policy

1. Who to contact

This policy describes processing by the operator of Pandachan. Our contact for support and privacy requests is contact@sinjed.net. It covers the features described below; it does not replace Apple's own privacy information.

2. What stays on your device

Your onboarding answers, chosen name, journal, feelings, unsent letters, counter, progress, settings and conversation history are stored on your device. Your journal, letters and quiz answers are not automatically sent to the AI service or to an analytics tool.

Photos and voice notes you add to your journal are stored only on your device. The app asks for camera or microphone access only when you choose to take a photo or record a voice note, and photos from your library are chosen with the system picker. These files are not sent to Pandachan, Mistral, RevenueCat or PostHog, and they are not included in a data export. Deleting the entry or your local data removes them. You can withdraw camera or microphone access at any time in your device settings.

The version described here does not provide a Pandachan account, automatic cloud sync or an active server-backup service. You can export local data yourself. An export can contain private writing; protect the file and any copies you choose to keep. Device backups, where enabled, are governed by your operating-system settings.

3. When you use the AI chat

When you send a message in Discussion, your message, recent messages from that same conversation, the chosen language and conversation mode are sent through our server to Mistral AI to generate a reply. Other conversations and your journal or letters are not automatically included. Do not send unnecessary sensitive information or private information about another person.

Our chat API processes the conversation in memory and does not write its contents to a database or application logs. The Mistral API used for these replies is configured with Zero Data Retention: inputs and replies are not retained beyond processing. The conversation history shown in the app stays on your device.

An AI reply is automated and may be inaccurate. It is not a diagnosis or a decision determining your legal rights. The illustrative onboarding indicator is calculated on your device; it is not a psychological assessment.

Before the first AI exchange, the app asks for your explicit permission to share the data described above with Mistral AI. You can decline and use the other tools, or withdraw permission in Settings → Privacy and information. Withdrawing permission blocks future AI requests without deleting your local history.

Exception for reports you choose to send: after showing the selected AI reply and asking for confirmation, Pandachan stores that reply, the language, a random report reference and the receipt date on its server for 30 days so the issue can be reviewed. Other messages, your journal and letters are not included. Reports are not sent to Mistral or analytics services. You can contact contact@sinjed.net with the reference for a privacy request. Deleting local app data does not delete a report already sent. Reporting is not an emergency service.

• Mistral: Zero Data Retention

4. Subscriptions and RevenueCat

Apple processes App Store payments. RevenueCat helps us display subscription offers, check Premium access and restore purchases. This involves a pseudonymous app identifier, technical app/device information, purchase and transaction information, subscription status, and interactions with the subscription screen. A pseudonymous identifier is not the same as anonymous data.

We do not receive your full payment-card details. Your private journal, unsent letters and chat contents are not sent to RevenueCat by the app. Deleting local app data does not cancel an Apple subscription or erase Apple's transaction records.

• Apple privacy information
• RevenueCat data processing information

5. Usage measurement and this website

Versions with usage analytics send explicit events to PostHog: screens visited, tools used and subscription actions, with a pseudonymous identifier, language, platform, app version and timings. Quiz answers, names, messages, journal entries and letters are excluded. No screen or session recordings are collected.

These web pages include no analytics or advertising scripts, cookies, browser storage, remote fonts or contact form. Serving the site and online app features still involves technical connection data, such as an IP address, requested path, time and browser information, handled by hosting and network providers for delivery and security. App conversation contents are not application access logs.

6. Purposes and legal grounds

Where the GDPR applies, providing requested app features and managing subscriptions rely on performing the service contract. Necessary security and fraud prevention rely on legitimate interests in protecting the service. Handling a support request relies on that contract or our legitimate interest in answering you; mandatory records rely on legal obligations.

Where a particular use of data, including sensitive data or optional tracking, requires consent, that consent must be requested separately. This policy is information, not consent. Not sending a chat message prevents that AI request; declining an optional feature does not itself authorize a different use of your information.

7. How long information is kept

Local information stays until you delete the relevant entry or local app data. Uninstalling the app can remove it; exported files and operating-system backups must be managed separately. Our chat API keeps message contents only for the time needed to process the request.

Purchase records are kept for subscription administration, restoration, required record-keeping and resolving disputes, under the applicable Apple and RevenueCat arrangements. Support emails are kept while dealing with your request, and afterwards only where required for a legal obligation or a dispute. Technical connection logs are retained according to the hosting provider’s operational and security rules, for service delivery, incident investigation and applicable legal duties.

8. Providers and international processing

Recipients are limited to the providers needed for the features concerned: Mistral for AI replies, Apple and RevenueCat for subscriptions, PostHog for usage measurement, hosting/network providers, and the email provider when you contact us. We do not sell your private writing or use it for advertising.

Apple and RevenueCat operate internationally, so processing can take place outside your country, including in the United States. Where GDPR transfer rules apply, appropriate safeguards are required, such as an applicable adequacy decision or standard contractual clauses. Contact us for details of the providers and safeguards relevant to your request.

9. Your choices and rights

You can edit or delete available local content in the app, delete its local data, export your data and disable notifications through the app or device settings. Local deletion does not automatically remove purchase records held by Apple or RevenueCat; contact us about information processed on our behalf.

Depending on applicable law, you may request access, correction, erasure, restriction or portability, object to certain processing, and withdraw consent where processing relies on it. Send requests to contact@sinjed.net. We may ask for information reasonably needed to locate your records and verify the request. We cannot retrieve writing held only on your phone.

You can complain to your local data-protection authority; in France, this is the CNIL. Nothing in this policy limits your statutory rights.

• CNIL: personal-data rights

10. Young users and changes

Follow the age requirements that apply to the app, your country and your Apple account. Where a parent or guardian's permission is required, it must be obtained. A parent or guardian can contact us with a privacy concern.

We update this policy when the service or its data practices change. The date above identifies this version. Important changes will be brought to your attention where required, and any necessary consent must be obtained before the new processing begins.