🔒 Privacy Policy

sanemos.ai is a digital emotional support platform operated by an independent team based in the Republic of Chile. Data Controller contact: Email: contacto@sanemos.ai For inquiries related to your personal data, you can contact us directly through the ARCO rights form available on the platform or by email.

The processing of your personal data is governed by Law No. 19,628 on the Protection of Private Life of the Republic of Chile, as well as any applicable complementary regulations. By registering on sanemos.ai, you grant your free, informed, and specific consent for the processing of your personal data as described in this Privacy Policy.

We collect only the information necessary to provide the service: • Registration data: display name, email address, password (stored in encrypted form). • Optional profile data: type of loss experienced, worldview or spiritual perspective. • Usage data: conversations with AI companions, community messages, published letters, personal journal entries, resources viewed, therapist profiles viewed. • Technical data: IP address, browser type, operating system, session timestamps. • Moderation data: records of reports, sanctions applied, and moderation reasons.

We use your data exclusively to: • Provide the emotional support service and manage your account. • Personalize your experience (e.g., showing letters or resources related to your type of loss). • Moderate content to protect community safety. • Improve the system through aggregated and anonymized analysis (never individually identifiable data). • Send you service communications (term changes, security alerts). We do not send third-party commercial advertising. • Comply with legal obligations as required by Chilean law.

To operate the platform, we share data with the following providers acting as data sub-processors. All of them have appropriate privacy policies and security measures in place: • Supabase, Inc. (United States): database storage, authentication, and file storage. Privacy policy: supabase.com/privacy • Google LLC / Google DeepMind (United States): natural language processing for AI companions via the Gemini API. Privacy policy: policies.google.com/privacy • OpenAI, L.P. (United States): alternative natural language processing. Privacy policy: openai.com/privacy • Vercel, Inc. (United States): web application hosting. We do not sell or transfer your personal data to third parties for commercial or advertising purposes.

The providers mentioned above are located outside Chile (primarily in the United States). By accepting this Privacy Policy, you acknowledge and consent that your personal data may be transferred to and processed in countries with different data protection legal frameworks than Chile. In all cases, we require our providers to apply technical and organizational security measures equivalent to those required by Chilean law, including encryption in transit and at rest, access control, and confidentiality obligations.

We retain your data while your account is active. Specific periods are: • Account and profile data: for the duration of the account; deleted within 30 days of cancellation. • AI conversations and personal journal: for the duration of the account; deleted upon cancellation. • Community content (letters, comments): may be retained in anonymized form after account cancellation to maintain community thread coherence, unless an explicit deletion request is made. • Moderation records: 24 months for security and audit purposes. • Technical data (logs): 90 days. You may request deletion of your account at any time from your profile settings or by exercising your right of cancellation via the ARCO form.

In accordance with Law No. 19,628, you have the following rights over your personal data: • Access: find out what data we hold about you and how we use it. • Rectification: correct inaccurate or incomplete data. • Cancellation: request deletion of your data when it is no longer necessary for the purpose for which it was collected. • Opposition: object to the processing of your data for specific purposes. To exercise any of these rights, use the ARCO form available at sanemos.ai or write to contacto@sanemos.ai. We will respond within a maximum of 15 business days.

We apply technical and organizational security measures to protect your personal data, including: • SSL/TLS encryption in transit. • Password encryption via bcrypt (managed by Supabase Auth). • Role-based access control (Row Level Security in the database). • Restricted access to sensitive data only to authorized personnel. However, no internet transmission or storage system is completely secure. In the event of a security breach affecting your data, we will notify you as required by applicable law.

sanemos.ai is intended for people aged 16 and over. We do not knowingly collect data from children under 16. If a legal guardian is aware that a child under 16 has provided personal data without authorization, they may request its deletion by writing to contacto@sanemos.ai. Users between 16 and 18 years old declare that their legal guardian is aware of their registration.

We use only strictly necessary technical cookies for service operation (session management, authentication). We do not use advertising tracking cookies or share browsing data with advertising networks. You may configure your browser to reject cookies, but this may affect platform functionality.

We may update this Privacy Policy periodically. When we do, we will publish the new version on the platform and notify you at least 15 days in advance if the changes are significant. Continued use of sanemos.ai after the new version takes effect constitutes acceptance of the changes.

For privacy inquiries, exercise of ARCO rights, or any other matter related to the processing of your personal data: Email: contacto@sanemos.ai ARCO Form: available on the platform We are committed to responding within 15 business days.