Freud Privacy Policy

1. Who is responsible

Individual Entrepreneur Daniel Tcytkin, identification number 343575410, registered in Georgia, is the Operator and controller for Freud processing described here. For privacy questions, rights requests or suspected incidents, contact support@tinycrew.app. Mention Freud, but do not include more session content than necessary.

This policy covers freud.tinycrew.app, its installed PWA and the public interactive example. The shared account, sign-in, devices, account emails, balance and purchases are described in the Tiny Crew Privacy Policy. The product page on tinycrew.app also uses that website's cookie preferences. Shared sign-in does not mean shared access to the contents of every app.

2. Information processed in Freud

Account-linked information includes an internal identifier, information needed for access and communication, supported name, language and timezone preferences, role and permissions. An account is not a public therapy profile.

Materials may include session titles and dates, audio, transcripts and speaker corrections, personal session notes, reflections, questions, definitions, analysis comments, AI outputs, The bigger picture, AI conversations and their selected context. An analysis can contain information or inferences about a person even when the output is wrong.

Relationships and preferences include invitations, connected professionals, sharing categories, necessary permission history and consent versions, practices, reminders and device preferences. Operational and usage records may include action time, status, identifiers, source revision, usage, cost, errors and security events. These support requested actions, protection against duplicate processing and charge investigations.

Infrastructure logs may include IP addresses, browser and request information under the relevant provider's arrangements. Therapy content is not intended for website analytics logs. An internal identifier or encrypted content is not automatically anonymous: information remains personal data when it can be linked to a person.

3. Sensitive information and other participants

Therapy materials may reveal mental or physical health, intimate life, beliefs or other sensitive information. Include only what is needed, and avoid unnecessary names, contact details and third-party documents.

For the sensitive therapy materials you choose to keep in your personal workspace, explicit consent is the basis for the requested sensitive-content processing where applicable data-protection law requires it. Consent covers the stated purpose and can be withdrawn. Accepting Terms, registering, accepting cookies or enabling a microphone does not replace that consent. AI, transcription and sharing each have their own permissions. A professional is responsible for the lawful basis and sensitive-data condition for professional records; their request cannot supply another participant's missing permission. Obtain the necessary agreement of all participants before recording.

Information supplied by a connected participant is used within the lawful shared workflow and applicable access permissions. A person without an account may contact us about their information; we assess requests with proportionate identity checks and regard for the rights of others.

4. Purposes and legal bases

Providing the account and requested software functions relies on performance of the agreement where applicable. Sensitive content requires an additional lawful basis: where explicit consent is required, a contract is not a substitute.

Optional AI, transcription and sharing use the permissions required for the relevant purpose. Security and abuse prevention may rely on legitimate interests where that basis is available and the required balancing is met. Mandatory accounting and similar records may rely on legal obligations. Complaints and disputes may require proportionate processing to establish, exercise or defend legal claims.

We do not use therapy content to sell data, build advertising profiles or train our own models. Using Freud does not subscribe you to marketing. An incompatible new purpose is not introduced retrospectively merely by changing this policy.

5. Sharing with a psychologist and other participants

Personal materials are accessible to their owner and recipients with the relevant authorisation. Connected participants in a shared session can access its shared recording and transcript. Session notes, The bigger picture and other notes have the categories and sharing rules shown in the app.

Access to personal session notes and The bigger picture is controlled separately from other notes. Check the selected professional and categories. Disconnecting limits further in-app access where applicable; it does not erase downloaded copies or the professional's independent records.

An independent psychologist controls the purposes and lawful use of their own professional client records, including the notices, authority and retention duties that apply to their work. When we handle those client materials solely on that professional's documented instructions, we act as processor under Section 18 of the Freud Terms. We remain controller for our own account access, service security, usage, support and legal obligations. A client's separate personal workspace and the shared participant permissions are not overridden by professional instructions. Freud does not control a professional's external records.

6. AI analysis and conversations

When you request an AI action with the required permission, the selected materials and necessary context are sent through the configured AI route. Freud routes built-in AI requests through Vercel AI Gateway to a Google Gemini model, with a restriction against prompt training; the model and permitted routing depend on the feature. Material changes to recipients or purpose require updated information and any necessary permission before the new processing.

No training is different from no retention. A gateway or model provider may process or retain information for technical, security or mandatory purposes under the applicable arrangement. Freud does not promise zero retention for every AI request. Outputs are stored separately in Freud where the feature saves them.

AI can produce incorrect information about a person. You can correct source materials, add context, remove outputs or request a review. Editing a source does not necessarily regenerate an existing analysis. Freud does not use these insights to make legally significant automated decisions about treatment, employment, insurance or access to care.

7. Audio transcription

For requested transcription, saved audio is sent to Deepgram. Freud opts out of Deepgram's model-improvement programme for these requests. Audio submitted under that arrangement is not used for model training. Content needed to complete transcription and technical usage records are handled under Deepgram's applicable service and privacy terms. This feature's rules do not automatically apply to another AI provider.

Agreement to record and permission to send audio for transcription are separate. Recognition can mishear words or assign them to the wrong person. You can review and correct a saved transcript. The transcript is stored separately from the recording.

8. Service providers and international processing

Our service providers include Vercel for app delivery and AI Gateway, Neon for the database, Amazon Web Services for private storage, media processing and service email, Deepgram for requested transcription, and Google for Gemini AI processing. Each receives the information needed for its task. The database, file storage and external AI are separate systems.

Tiny Crew handles the shared account and purchases. Paddle processes applicable purchases as Merchant of Record under its own terms. As described in the platform policy, support may use Resend and a private Telegram channel for authorised staff. Do not send a full therapy archive to support unless the specific request requires it.

Processing may take place outside your country. A server region does not establish the location of every provider, log or support system. We limit international transfers to those permitted by applicable law. Where a transfer needs additional safeguards, these include the applicable contractual transfer mechanism and supplementary protections required for that transfer. You may request information about applicable recipients and safeguards, subject to lawful security limits. Blanket consent is not a substitute for a required transfer mechanism.

Where disclosure is necessary for a valid legal requirement, an incident investigation or protection of rights, we check its basis and limit its scope. A business transfer does not remove existing purpose limitations and responsibilities. Material changes are communicated as required.

9. Encryption, security and technical access

Private content is protected in transit and at rest. Freud encrypts private materials in their owner, record and purpose context and checks access on the server. Relationship, usage and accounting identifiers must not be treated as anonymous simply because a note's body is encrypted.

This is not end-to-end encryption with a key held only by you. The server must process content for authorised features. Limited access by authorised people may be necessary for security, support you request or legal compliance. We do not promise that the Operator is technically incapable of access, or that every device and external provider is absolutely secure.

We notify affected people and authorities of qualifying security incidents within the periods required by applicable law. Report suspected incidents to support@tinycrew.app. Never send a password or sign-in code to prove your identity.

10. Retention

Audio is available in Freud for 24 hours after saving. Access ends at the original deadline. We schedule physical deletion for the next daily cleanup after access expires, normally within a further 24 hours. If a technical failure delays cleanup, expired recordings remain inaccessible and we address the deletion failure. Residual technical copies follow their separate retention and deletion processes. This does not mean every copy held by every provider is erased at the same second. A transcript exists only if created. Notes, transcripts and analysis outputs are stored separately from audio.

Primary materials are kept to provide the selected service until you delete them, the relevant basis ends or a deletion request is completed, subject to applicable exceptions. Revisions or source snapshots supporting an existing result may have a separate lifecycle. Removing an item from a list is not proof of immediate physical destruction of every version.

Operational, accounting, security and legal records are retained only as needed for their purpose, obligations, incident investigations or claims. Backup retention and restoration must respect applicable deletion and restriction obligations. Contact us for the applicable retention information and exceptions for the category concerned. Backups do not authorise continued ordinary use of deleted therapy content.

You may request the applicable period and any exception for a particular category. There is no single physical-erasure deadline covering all categories and providers. This does not remove our duty to respond and take necessary action within the periods required by law.

11. Deletion and withdrawing permission

You can withdraw permission for future AI and transcription actions separately from changing psychologist access. Withdrawal does not invalidate earlier lawful processing, recall information already transferred or automatically erase a saved analysis, an export or a professional's own records.

Deleting an item, disconnecting a professional and deleting the shared account are different requests. Tiny Crew's account process includes confirmation, a stated date and a 30-day cancellation window. Completing deletion of Freud content also requires the product's deletion process and lawful dependencies to be resolved. Mandatory financial, security, legal and limited backup records may remain for their separate purposes; that is not permission to continue ordinary use of therapy content.

If self-service deletion is unavailable or the scope needs clarification, contact support@tinycrew.app. We clarify the request, explain a relevant obstacle or exception and handle it within the applicable legal period. A technical queue does not remove the right to a timely response and necessary action.

12. Exports and your own external AI

PDF and JSON exports are saved on your device. They may contain sensitive information and are no longer controlled by Freud's sharing permissions after you transfer them to another program. Check both their content and recipient before sharing.

When you copy a prompt or use another AI service yourself, you send information to that service. Its training, retention and onward-sharing rules may differ from Freud's built-in feature. Freud cannot recall that request, erase another account's history or guarantee the service's promises.

13. Devices, notifications, cookies and local storage

Microphone, notification and installation permissions are separate browser or device controls. Declining notifications does not opt out of necessary service email. Installing the PWA does not grant additional rights over therapy content.

Necessary cookies and local storage support sign-in, security, preferences and interface operation. Optional public-site analytics and cookie choices are described in Tiny Crew's policy and can be changed through Cookie settings. These controls do not replace AI, transcription, marketing or psychologist-sharing permissions. Therapy content must not be sent to public-site analytics.

Push notifications can appear on a locked screen. Their permissions and preferences can be changed in the app and device settings. Even a short notification may reveal app use to someone with access to your device.

14. Guest access and the public interactive example

A guest workspace uses encrypted server custody, not storage of the full archive only in the browser. A browser cookie identifies the guest workspace for 90 days and is renewed on use. Clearing it, changing browsers or using another device can lose access. Anyone able to use the same browser may be able to open that workspace. Do not use it on a shared device for sensitive material.

After verified sign-in, the product's verified claim process can attach the guest workspace to your account. Merely entering a matching name or email does not establish ownership. Paid AI requires sign-in and the relevant permission. Cookie expiry is an access limitation, not a physical-erasure deadline for the server's materials.

The public interactive example

Daniel and the example materials are fictional. The example runs in a separate, isolated browser area without access to your live account, payments, microphone or external AI. Changes remain in memory until you close or reload it. An export creates a local file on your device.

Do not enter real therapy records into the example. Delivering the page and its assets still creates normal hosting requests; isolation does not mean that no technical visit logs exist. Open the app and Install the app lead to the real Freud service in a separate tab, with its usual access rules.

15. Your rights and how to contact us

Depending on applicable law, you may request access, correction, erasure, portability or restriction; object where the relevant basis permits; and withdraw consent. You can decline optional AI, transcription and sharing features. We cannot keep processing necessary content for a feature once its lawful basis has ended merely for convenience.

Send requests to support@tinycrew.app. We respond without undue delay and within the applicable legal period. For requests governed by EU or UK GDPR, the usual period is one month; if a lawful extension is necessary, we explain it and its reason within that first month. To protect records, we verify identity proportionately. Knowing a name or matching an email address alone does not grant access to someone else's session. If another participant's rights, professional records or mandatory retention limit a request, we explain the applicable restriction. You may complain to the competent data-protection authority or apply to a court without first contacting us.

16. Age, versions and changes

Freud is for adults. Contact us if you discover improperly stored information about a child or another person's sensitive information. We assess and restrict further processing as necessary.

The current version and date appear here. Material changes to purposes, recipients or rights are communicated as required; new consent is requested separately where necessary. Changes to this Policy do not replace a required consent or authorise a new purpose automatically.