Privacy Policy

Relationship Detective · Last updated: 2026-09-02

1. Controller

Kevin Pfistner
Amtfeldstr. 27
76316 Malsch
Germany
E-mail: kevin.pfistner@web.de

No data protection officer has been appointed (not required for a sole proprietorship).

2. In short

3. What we process, why, and on what legal basis

3.1 Chat content for the analysis

Data: chat text (WhatsApp export) and, depending on the chosen version, screenshots, a screen recording and voice messages; your description of the situation; the names of the participants (so the app can tell who you are).

Purpose: the analysis of the conversation that you request.

Legal basis: your consent (Art. 6(1)(a) GDPR), given in the app before the upload. Because a chat may contain special categories of data – for example about sex life, health, religion or beliefs – we ask for your explicit consent for those as well (Art. 9(2)(a) GDPR). Providing the analysis is also performance of a contract (Art. 6(1)(b) GDPR).

What exactly happens: The content is sent to our server (Google Cloud, Frankfurt region). In chat text the server replaces names and phone numbers with placeholders where it can detect them; e-mail addresses and links are masked. The AI language model provided by Anthropic then analyses the text. Screenshots and video frames are read by the same model unchanged – including visible names and profile pictures (the model is instructed not to describe images, only to transcribe text). Voice messages are sent unchanged to OpenAI (Whisper), which converts them to text – including the other person's voice. Your description of the situation is sent unchanged to the language model. Cut out beforehand whatever does not belong in the analysis.

3.2 Balance and purchases

Data: a random key (32 characters, generated on your device – your “wallet key”), your bottle-cap balance, vouchers for analyses in progress, checksums of your purchase receipts.

Purpose: keeping your balance, paying for analyses, preventing double credits, refunding a failed analysis.

Legal basis: contract (Art. 6(1)(b) GDPR).

The purchase itself is handled by Google Play or the Apple App Store under their own privacy policies; we receive neither your name nor payment details, only the receipt, which we verify with the store and then keep only as a checksum.

3.3 Feedback

Data: your optional rating (helpful / not helpful), your free text, your key, the platform (Android/iOS).

Purpose: improving the app; following up on a problem with your balance.

Legal basis: legitimate interest (Art. 6(1)(f) GDPR); feedback is voluntary.

3.4 Technical logs

Data: the hosting provider's request logs (IP address, time, path, status code, browser/app identifier), our own event logs without content (for example “analysis completed”, “bottle cap spent”, “consent version X” – with a truncated IP address), and a rate limiter that counts per connection (IP address only as a time-limited hash).

Purpose: operation, troubleshooting, protection against abuse and overload.

Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in secure operation.

3.5 Resume cache

If the connection drops during an analysis, the server keeps the finished result for up to two hours so your device can collect it without paying again. The entry is encrypted with a key derived from your own material – without the original nobody can read it, not even we. Legal basis: contract (Art. 6(1)(b) GDPR).

3.6 Status request

On start-up the app requests a status (maintenance notice, whether the shop is open). This produces no data beyond the logs described in 3.4.

4. Consent: when, how, withdrawal

Before every upload – right after you choose the version – the app asks you for three confirmations: the processing for this analysis including possible sensitive content, the notice that an AI model produces the analysis and may be wrong, and that you are at least 18 years old. The app stores the time and the text version of your consent on your device; with the analysis it transmits to us only the identifier of the text version (currently 2026-09-02), not your name and not your chat.

You can withdraw your consent at any time with effect for the future – simply by not starting another analysis, or by e-mailing us. Processing that has already taken place remains lawful. After an analysis nothing remains on the server that could be withdrawn; you delete your local history in the app.

5. Use of artificial intelligence

The report is produced by an AI language model (Claude, Anthropic). The same model reads screenshots and video frames; the Whisper model (OpenAI) converts voice messages to text. An AI report may contain errors, misread context or miss something important. It is not a substitute for psychological, medical or legal advice. The app makes no decision with legal effect about you or anyone else (Art. 22 GDPR); it provides an assessment that you evaluate yourself. Report and PDF are labelled as AI-generated.

6. Recipients and processors

We do not sell data, show no ads and use no third-party analytics or tracking services.

7. Transfers to third countries

Anthropic and OpenAI process data in the USA. The basis is the European Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR), which form part of the respective data processing agreements. In addition we assessed what arrives there (pseudonymised for the text path), that it is not used for training and is only stored briefly. A copy of the safeguards is available on request.

8. How long we keep data

WhatWhereHow long
Chat text, screenshots, video, voice messages, situation descriptionserver (memory), Anthropic, OpenAIonly during the analysis; at the providers up to 30 days
Finished result in the resume cache (encrypted)server databaseup to 2 hours
Your report including quoted messagesyour device and its backupuntil you delete it in the app
Key, balanceserver databaseuntil deleted at your request
Vouchers for analyses in progressserver database90 days
Checksums of purchase receiptsserver database3 years (protection against double credits, disputes)
Feedbackserver database12 months
Rate limiting (IP hash)server databaseup to 2 hours
Request and event logsGoogle Cloud Logging30 days
Consent (time, text version)your deviceuntil you delete all app data

9. If the other person in your chat used this app

This section is for you if someone uploaded a chat with you to Relationship Detective. We cannot notify you individually: we do not know who you are, and after the analysis we hold no data about you (Art. 14(5)(b) GDPR – which is why we inform you publicly here).

What was processed: your messages in that chat and, where applicable, your name, your voice in voice messages or your picture in screenshots – for a single analysis that the other participant requested for themselves.

Why and on what basis: The user wants to understand a conversation they took part in. That is a legitimate interest (Art. 6(1)(f) GDPR). We limit the consequences for you: in chat text your name and phone number are replaced with placeholders before the language model reads it; the model must not describe your appearance or judge your character; nothing is stored permanently; disclosure is limited to the processors named in section 6; the terms of use oblige the user to use the analysis only for their own reflection and not to confront you with it.

Your rights: You can object to the processing and request access. Because we store no data about you, we can usually only confirm that nothing is held. Write to kevin.pfistner@web.de; you may also contact a data protection authority (section 10).

10. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to withdraw consent at any time with effect for the future (Art. 7(3) GDPR).

Right to object (Art. 21 GDPR): Where we process data on the basis of legitimate interests (feedback, logs, the other person's data), you may object at any time on grounds relating to your particular situation. We will then stop processing unless compelling legitimate grounds prevail.

For requests write to kevin.pfistner@web.de. Because we know no names, please quote your wallet key (in the app: Bottle Cap Shop → “Transfer balance to another device”) – it is the only way we can find your balance and feedback.

You may also lodge a complaint with a data protection authority, for example the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany, www.baden-wuerttemberg.datenschutz.de.

11. Deletion

12. Security

Encrypted transport (TLS), pseudonymisation before the language model, encrypted resume cache, storage in the EU, access only by the controller, no plain-text purchase receipts, truncated IP addresses in logs.

13. Age

The app is intended for adults aged 18 and over and not for minors. You confirm your age before the first analysis.

14. If you are struggling

This app is not a substitute for counselling. Please reach out to someone you trust or to a crisis helpline in your country – you can find one at findahelpline.com. In immediate danger, call your local emergency number. In Germany, Telefonseelsorge is available around the clock, free and anonymous: 0800 111 0 111 or 0800 111 0 222.

15. Changes

We update this policy when the app or the law changes. The version published here applies; the app shows a short version before each analysis and links here.