Privacy

Account.Your email address, your sign-in credentials, the date of birth you attest to at sign-up, and the country or region you tell us you’re in — the last of these decides which crisis helplines you’re shown.

Conversations. Every message you send and every message a resident sends you, with its timestamp. Voice notes are stored as audio for as long as the message exists.

Memories.Short facts a model extracts from your conversations — that your sister’s recitals are on Thursdays, that you hate being late — stored with the date and the message they came from, and with a numeric embedding used to find them again. This is derived from what you wrote, and deleting your account deletes it.

The relationship.Which resident you know, how long you’ve known them, the stage you’ve reached, and the events in their life your conversations have touched.

Usage and product events. Message counts, voice seconds and image counts against your plan; which screens you opened and when. We use this to bill correctly and to work out what’s broken.

Safety flags. When a screen fires on a message, we store the message, the rule that fired, the text that matched, and what we did about it.

Devices.Push notification tokens for the devices you’ve allowed notifications on, plus the technical basics any server records: IP address, browser or app version, and timestamps.

Billing.When payments open, Stripe will process your card. We’ll hold the subscription state and a customer reference — never the card number.

Waitlist.If you only left an email on the waitlist, that address is all we have, and it’s used for one email.

To run the service — your account, your conversations, memories, the relationship, voice and images. Performance of our contract with you (UK GDPR Art. 6(1)(b)).

To keep people safe — the screens, safety flags, age checks, and human review of flagged conversations. Our legitimate interests in preventing harm, and compliance with our legal obligations (Art. 6(1)(c) and (f)). Where a crisis message reveals something about your health, we handle it under Art. 9(2)(g), substantial public interest in safeguarding.

To bill you — plan state, usage, invoices. Contract, and our legal obligation to keep financial records (Art. 6(1)(b) and (c)).

To fix and improve Parallel — product events and error logs. Legitimate interests (Art. 6(1)(f)). You can object; write to us.

Push notifications and marketing email — consent (Art. 6(1)(a)), withdrawable at any time in Settings or by unsubscribing.

Model providers.To produce a reply, we send the relevant part of your conversation — the recent messages, the memories retrieved for that turn, and the resident’s bible — to a third-party large language model provider. Parallel is provider-abstracted and we route between Anthropic, OpenAI and Google depending on the task; the current set is named here and updated when it changes. They process this content to return a response, under contracts that forbid using it to train their models. Voice notes are transcribed and synthesised by a speech provider on the same terms.

Infrastructure. Supabase hosts the database, authentication and file storage. Vercel serves the web app. Stripe will process payments when they open. Apple and Google deliver push notifications.

Everyone above is a processor acting on our instructions under a data processing agreement. Nobody buys this data from us, because we don’t sell it. Where a processor is outside the UK, transfers are covered by UK adequacy regulations or the International Data Transfer Addendum to the EU Standard Contractual Clauses.

We disclose data to police or regulators only where the law requires it, or where we believe disclosure is necessary to prevent an imminent risk to someone’s life — including content indicating harm to a child.

Conversations are private by default and nobody reads them for entertainment. A small number are read by a member of our team in three cases: a safety screen flagged the message; you contacted support about something and we need the context; or the law compelled us. Reviews are logged, and the log records who looked and why.

Conversations, memories and relationship history are kept for as long as your account is open, because that history is the product. Voice audio is kept with the message it belongs to. Usage and product events are kept for 24 months. Safety flags are kept for 24 months after they are closed, so a pattern is still visible across a year. Financial records are kept for six years, because HMRC requires it. Waitlist addresses are deleted once you have an account, or on request.

Delete from Settings and two things happen at once: every push token is destroyed and every pending message from your resident is cancelled, so nothing reaches you from an account you asked us to close. The account itself is then held for 30 days. Sign in during those 30 days and everything comes back exactly as it was. After 30 days the account and everything attached to it — conversations, memories, voice, timeline — is destroyed and cannot be recovered.

Two things survive: financial records we’re legally required to keep, and safety flags, which are stripped of their link to you and kept only as a record that a screen fired.

Under UK GDPR you can ask us for a copy of your data, correct it, have it deleted, restrict or object to how we use it, and receive it in a portable format. Export is built in — Settings gives you a full machine- readable download of your account, conversations and memories, once an hour.

For anything else, write to hello@parallel.you. We answer within one month. If you’re unhappy with the answer you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113 — though we’d rather you gave us the chance to fix it first.

Parallel is 18+. We don’t knowingly collect anything from anyone under 18, and the screens look for signals that the person writing is a minor. If we find one, the account is closed and the data deleted. If you believe a child has an account, tell us at hello@parallel.you.

If this notice changes in a way that affects you, we’ll email you before it takes effect and change the date at the top. Older versions are available on request.