Privacy policy

Last updated 12 August 2026

People bring tender things to SPOKEN. This page is maintained by SPOKEN and says plainly what is kept, who can reach it, and how to remove it.

Using SPOKEN without an account

You can use SPOKEN Freemium without signing up. A guest chat is not saved to our servers, it is not added to a journal, and it is gone once you leave the page. If you want to keep what you read, use the copy link and save it somewhere outside of SPOKEN.

The one-chat-a-day allowance is kept track of on your own device, not on our servers. We do not build a record of guest visits.

What is stored

Your account: the email address you sign in with, held by our authentication provider. If you sign in with Google, we receive only your email address and nothing else from your Google account. If you sign in with a password, it is stored only as a one-way hash and is never visible to us.

Your profile: the answers you gave during onboarding — your preferred name, the season you are in, and how you would like to be addressed — so you are not asked twice.

Only you can see those answers. They are locked to your account at the database level, so no other SPOKEN user can reach them, and our owner insight view shows totals only — never your answers and never your conversations. They are used for one purpose: they travel with your message so the reply fits your situation. You can review, change, or clear them at any time on your account page.

Your journal: the personal journal is a SPOKEN Premium feature. If you are on a Premium plan, the conversations you have in the SPOKEN chat are saved to your account so they are there on any device you sign in on. Freemium chats are never stored.

Your usage: a simple count of the messages sent on your account. It helps us keep the service healthy and see overall activity in our own insight view. It is not used to limit you — chat is unlimited on every Premium plan — and it is a number, never a copy of what you wrote.

Your subscription: the plan you are on, its status, and the customer and subscription identifiers Stripe gives us. Card numbers are never sent to or held by SPOKEN.

Who can see your journal

Your entries are locked to your account by the database itself. Every request for a journal entry carries your identity, and the database refuses any row that is not yours before the app ever sees it. This is not a rule the app follows — it is a rule the app cannot get around.

There is no screen in SPOKEN that displays anyone else's conversations. Not for support, not for moderation, not for the owner. The owner insight view exists, and it holds numbers and account email addresses: how many accounts exist, how many are on a plan, how many people used SPOKEN today, how many messages were sent, how many conversations are stored. It counts. It does not open anything.

Nothing in SPOKEN reads the inside of your conversations. Entries are not scanned for keywords, not scored, not categorized, not sampled for quality, and not used to train any model. The short title on a saved conversation is written by the same AI that answers you, from the words of that conversation alone, and is seen by no one but you.

Nothing you write here is measured. Public pages — the home, about, pricing, and legal pages, and the free sample — carry one advertising measurement pixel, from Vibe, that counts anonymous visits and whether a visit ended in a purchase, so we can tell whether an ad was worth running. It reads no message, no journal entry, and no profile answer, and it builds no profile of you. Nothing about your session is sold, shared, or brokered.

Deletion is real deletion. The trash icon beside an entry removes it. "Delete my account" removes the account, the journal, your profile answers, and your subscription record at once, and cancels any active billing. There is no soft-delete flag, no archive, no thirty-day shadow copy waiting to be restored. Once it is gone it is gone, including from us.

Two honest limits, because a policy that claims none is a policy to distrust. First, the database is operated by people, and a lawful order — a subpoena, a warrant — is something we would be legally required to obey; that is true of every service that stores your words on a server. Second, the message you send in the moment has to reach the AI in order to be answered; it is processed to write the reply and is not used for training. Everything above is what we control. These two are what nobody storing plain text on a server can honestly promise away.

If it matters to you that even a lawful order could return nothing at all, that requires encrypting entries on your own device with a key we never hold. It is not how SPOKEN works today, and this page will say so plainly for as long as that is true.

Where your words go

When you send a message, it is passed to the AI service that writes the response, along with your profile answers so the reply fits your situation. That provider processes it to generate the reply and does not use it to train its models. Nothing else is done with it.

Email we send you

SPOKEN sends only account and service email: a welcome message with a link to set your password, password resets, and reminders if a plan ends. These are delivered by Resend, our email provider, from noreply@spokenmail.app. You are not added to a marketing list, and your address is never sold or shared.

Who else is involved

SPOKEN is built on Lovable Cloud, which provides the database, sign-in, and hosting; Stripe, which handles all payments; Resend, which delivers our email; an AI provider, which generates the responses; and Vibe, whose pixel counts anonymous visits and purchases so we can measure our advertising. These are the only third parties involved. No profile of you is built, and none of them is given your conversations.

Kept in your browser

Your device keeps your sign-in session and your light or dark theme choice. For a guest chat it also keeps your onboarding answers and the conversation you are in, so the page can hold its place while you read.

It also keeps a small marker recording the date your free daily chat was used, so the Freemium allowance stays fair. It is a date on your own device, not a profile of you. The Vibe advertising pixel sets one cookie of its own, a random visit id with no name, email, or content attached to it, used only to avoid counting the same visit twice.

If your plan ends

When a Premium plan lapses, your journal is held for 30 days so you have time to return or save what matters to you. We email reminders during that window. If the plan is not renewed, the account and everything in it are permanently deleted at the end of the 30 days and cannot be recovered.

Deleting things

You can delete a single journal entry with the trash icon beside it. To delete your account, use "Delete my account" on your account page. It is yours to do — no email, no waiting period, no one to ask. It removes your account, your journal, your profile answers, and your subscription record immediately, and cancels any active plan so it will not bill again.

Deletion is permanent; once entries are gone they cannot be recovered. Records we must keep for tax and accounting — payment records held by Stripe — remain for as long as the law requires. If you have a question about any of this, write to knock@thespokenapp.com.

Children and families

SPOKEN was made for honest reflection, and that is something a family can do together. If your child is under 16, we would rather you sit beside them than send them in alone — read the replies with them, talk about what comes up, and let it be a conversation in your home rather than one on a screen.

Accounts are created and paid for by an adult, and SPOKEN is not designed for young children using it on their own. What a child brings here is innocent and vulnerable; a parent's presence is the best protection we can point to.

Changes

If this policy changes in a way that matters, we will say so in the app before the change takes effect.