Chat InspectorLast updated: 28 September 2026
This privacy policy explains which personal data the Chat Inspector app (formerly "ChatAnalysisAI") and the website chatinspector.app process, why, on what legal basis and for how long. If this English version and the German version differ, the German version applies.
In short
- The free stats are computed on your phone. Imported chats don't leave your device for them.
- A chat is only sent to our server and our AI provider (OpenAI) when you start an AI feature, and only that chat. We don't keep the chat afterwards.
- No chat syncing, no ads, no tracking, no selling of data. The website sets no cookies.
1. Controller
Sascha BinderIntelliChat
Mauerweg 1
71554 Weissach im Tal
Germany
Email: support@chatinspector.app
We have not appointed a data protection officer because we are not legally required to. For any privacy question, reach us at the address above.
2. Data on your device
Imported chats, the stats computed from them, saved analysis results, your quiz progress and your settings are stored only locally in the app. We have no access to them. You can delete them in the app; uninstalling the app removes them completely.
The app's reminders (e.g. "New quiz questions are ready") are scheduled on your device. No push service is used and nothing is sent to us for them.
You can use the app without an account (guest mode). You only need an account for AI features, purchases and sharing quizzes.
3. Account and sign-in
Sign-in runs through Microsoft Azure Active Directory B2C. If you sign in with a Google or Apple account, that provider sends us your email address and, if you allow it, your name. With "Sign in with Apple" this can be an anonymous relay address from Apple.
With your account we store: email address, name (if available), an account identifier, your token balance, your referral code, who referred you (if anyone), whether you have used your free first analysis, and the identifiers of purchases already credited.
Legal basis: Art. 6(1)(b) GDPR (contract: providing your account and the services you bought). Retention: until you delete your account (how).
4. AI features
The AI analysis, "Ask Pip", the pattern report ("Do I have a type?") and creating a quiz week only start when you choose and confirm them. The app then sends to our server, encrypted:
- for an analysis, Ask Pip and quiz creation, the text of the chosen chat (messages, the senders' names as they appear in the export, timestamps), stats computed from it and, where relevant, your question;
- for the pattern report, stats and individual messages from chats you have already analysed.
Our server passes this data to our AI provider OpenAI for processing (see sections 10 and 11). According to OpenAI, data sent through its programming interface (API) is not used to train its models and is kept for up to 30 days for abuse monitoring, then deleted.
What we store: not the chat itself. We keep the AI's result (which can contain quotes from the chat) on our server for up to 24 hours, so the app can collect it if the connection drops during the analysis. After that it is deleted automatically. On your device the result stays until you delete it.
Other people's data: a chat also contains your chat partners' messages and names. You decide which chat you send. Please don't send a chat if you think the people in it would object. Chats can also contain specially protected data (for example about health). We don't evaluate such data specifically; it is processed only for the feature you asked for and not stored afterwards.
Legal basis: for your own data Art. 6(1)(b) GDPR (you request the feature); for your chat partners' data Art. 6(1)(f) GDPR (our and your legitimate interest in carrying out the analysis of your own conversations that you asked for, with short processing and without storing the chat). In the iOS app you explicitly confirm before the first upload that a chat will be sent to the AI.
5. Sharing and playing quizzes
Sharing: when you share a quiz, we store it under a code on our server: the questions and answers, the messages it quotes, the names that appear in the questions, and the quiz title. The app shows you how many real messages it quotes before you share. Anyone who has the code and is signed in to the app can load the quiz. The link page on our website shows no quiz content, only the code.
Playing: when you play a shared quiz, we store for each quiz and day your player name (which you set in the app), your answers, your score and the time, linked to your account. Other players of that quiz see your name and score on the scoreboard.
Legal basis: Art. 6(1)(b) GDPR; for quoted messages of other people Art. 6(1)(f) GDPR. Retention: until you delete your account or ask us to delete it.
6. Purchases
You buy tokens through the Apple App Store or Google Play. We never receive payment details. We receive a purchase confirmation from the store, verify it with the store and store its identifier so every purchase is credited exactly once. Apple and Google process your purchase data under their own responsibility.
Legal basis: Art. 6(1)(b) GDPR; retention under Art. 6(1)(c) GDPR where tax and commercial law require it.
7. Crash reports
If the app crashes or hits an error, it sends a report to Sentry (stored in the EU, Frankfurt): device model, operating system and app version, technical error details, the last steps before the error (without on-screen text) and a random installation identifier. We send no name, no email address, no screenshots and no chat content; file names are removed from error messages.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a stable app). Retention: at most 90 days.
8. Usage statistics and server logs
Our server records events such as "analysis requested", "analysis finished" and "purchase credited", with numbers (e.g. duration, token cost), in Microsoft Azure Application Insights. Your account appears there only as a pseudonymous identifier (a hash), not as an email address, and never with chat content. The server also logs technical errors; these logs can contain your email address as the account identifier.
Legal basis: Art. 6(1)(f) GDPR (operation, troubleshooting, abuse prevention, improving the app). Retention: 90 days.
9. Website and email
Website: chatinspector.app is delivered through Cloudflare. When you visit, Cloudflare processes technically necessary data (IP address, time, requested address, browser identifier) to deliver the page and protect it against attacks. The website sets no cookies, uses no tracking and loads nothing from other providers (not even fonts). Legal basis: Art. 6(1)(f) GDPR.
Email: Cloudflare forwards messages sent to addresses at @chatinspector.app to our mailbox at Google (Gmail). We use your message and address to reply to you. Legal basis: Art. 6(1)(b) or (f) GDPR. We delete the correspondence once it is settled and no retention obligation applies.
10. Recipients
We use these service providers:
| Provider | Purpose | Location |
|---|---|---|
| Microsoft Ireland Operations Ltd. (Microsoft Azure) | Server, database, sign-in, usage statistics | EU |
| OpenAI | AI processing (section 4) | USA |
| Functional Software, Inc. (Sentry) | Crash reports | Stored in the EU; company in the USA |
| Cloudflare, Inc. | Website, email forwarding | Worldwide, company in the USA |
| Google Ireland Ltd. (Gmail) | Email mailbox | EU/USA |
Apple and Google (as app stores and as sign-in providers) process data under their own responsibility and their own privacy policies. Other users only see what you share yourself (section 5).
11. Transfers outside the EU
Some providers are based in the USA or may process data there. Where they are certified under the EU-US Data Privacy Framework, transfers rely on the European Commission's adequacy decision (Art. 45 GDPR); otherwise on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).
12. Retention at a glance
| Data | How long |
|---|---|
| Chats, stats, results on your device | until you delete them or uninstall the app |
| Account, balance, referral code | until account deletion |
| Chat text for an AI feature | not stored by us; up to 30 days at OpenAI |
| AI result on our server | 24 hours |
| Shared quizzes, scoreboards | until account deletion or on request |
| Crash reports, usage statistics, server logs | at most 90 days |
| Purchase records | as long as tax and commercial law require (up to 10 years) |
13. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Where we process data on the basis of legitimate interests, you can object at any time (Art. 21). You can withdraw any consent you gave at any time, with effect for the future (Art. 7(3)). Write to us at support@chatinspector.app. You can also delete your account directly in the app.
You can also complain to a data protection supervisory authority, for example the one responsible for us: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.
14. Other information
No obligation: you are not required to give us any data. Without an account you can use every feature that runs on your device; AI features, purchases and shared quizzes need an account.
No automated decisions: the AI results are interpretations for fun and self-reflection. There is no automated decision with legal or similarly significant effect on you (Art. 22 GDPR).
Minimum age: the app is intended for people aged 16 and over.
Security: all connections between the app, the website and our server are encrypted (TLS).
Changes: we update this privacy policy when the app or the law changes. The current version is always at chatinspector.app/privacy.