Privacy policy

Draft for the test phase. Have this reviewed, and fill in the operator details, before real users arrive.

Who we are

Kept Civil is run by [operator name, address, contact email]. We are the data controller for the information described here.

What we collect and why

Your name and email, and your ex's name and email, so we can relay messages between you. Our lawful basis is providing the service you asked for.
The emails you and your ex send through Kept Civil, the rewritten versions and any attachments, so we can rewrite them, show them to the author for approval and deliver them.
Whether you have children together, so messages are rewritten with the right context.

Your ex receives a notice in the footer of every message telling them it was mediated.

Who processes your data

Messages that need rewriting are sent to OpenAI's GPT-6 Luna API. This includes the author's and recipient's names, the subject, the email text and whether you have children together. Attachments are not sent to OpenAI. We use:

OpenAI, to rewrite messages. API inputs and outputs are not used to train its models by default. We disable application-state storage, but this does not disable abuse-monitoring logs: these may retain content for up to 30 days, with exceptions for legal and safety needs. See OpenAI's data controls. Data may be processed outside the UK; review the applicable data-processing agreement and international-transfer safeguards before launch.
Postmark, to receive and send email.
Stripe, to take payments. Your card details go straight to Stripe; we never see or store them. We keep your Stripe customer ID and whether your subscription is active.
Fly.io, where the app and its database run.

How long we keep it

Message content stored by Kept Civil is encrypted at rest and deleted after 30 days. Attachments are deleted as soon as a message is sent, discarded or held. We keep minimal records (dates and message status) after that. Email and AI providers have their own retention policies.

Your rights

You can ask for a copy of your data, ask us to correct it, or ask us to delete your account and everything linked to it by emailing [contact email]. You can also complain to the ICO.

Not legal advice

Kept Civil is a communication tool. It isn't legal advice, a solicitor or a mediation service.