Privacy Policy

Last updated: September 22, 2026

This explains what data we collect when you use brutalgpt.com (the "Service") and what we do with it. Questions: hi@brutalgpt.com.

What we collect

• Account — email, name, and date of birth (used only to apply age rules).
• Chats — messages you send and the responses generated.
• Image uploads — the Service no longer accepts images. Images uploaded before 22 September 2026 are deleted 30 days after upload.
• Contact form — your name, email and message if you write to us. Deleted after 12 months, or with your account.
• Service usage — message and upload counts (used to enforce per-day limits), and basic technical logs needed to run the Service.

Don't submit sensitive personal data (health, biometric, government IDs, etc.). We don't ask for it.

How we use it

To run the Service, prevent abuse, keep it safe, and understand how the Service is used so we can improve it.

To do the last of those we analyse chats in aggregate — grouping messages by topic to see what people actually come here for. That analysis produces group-level results, not profiles we act on individually, and it disappears with your account when you delete it.

Who we share it with

We use third-party service providers to host the application and database, authenticate accounts, store images, and generate AI replies. Each provider has its own terms governing how it handles data.

Moderation and safety

We may review content to enforce these rules and respond to abuse, safety, or legal issues.

We automatically check chats for signs that someone is under 18 or in crisis, so we can enforce the age rule and respond safely. This uses what you write — for example, an age you mention.

Children

The Service is for adults only. It isn't for anyone under 18. If we learn an account belongs to someone under 18, we close it. If we learn we hold data from someone under 13, we delete it.

Retention

We keep your data while your account is active. Delete your account or a chat and the associated records are removed. Uploaded images are automatically deleted about 30 days after upload, regardless of account status. We don't keep operational records longer than we need to. Safety records — for example that a crisis resource was shown or that an account was closed because of age — are kept for up to 3 years, without the content of any message. If data is needed for a legal claim, we may keep it until that is resolved.

Your rights

You can:

• Access / export — request a copy of your data.
• Correct — update your name or email through your sign-in.
• Delete — delete your account at any time.

For anything else, email hi@brutalgpt.com.

Cookies

Session cookies for login, and a cookie recording your region and your analytics choice. These are necessary to run the Service and are always set.

First-party cookies for product analytics. In the EEA, UK and Switzerland these are only set if you accept them, and declining costs you nothing. Everywhere else they're on by default; turning on your browser's Global Privacy Control switches them off, or email hi@brutalgpt.com to opt out.

Security

We use standard security practices. No system is perfect — use a strong password.

Changes

We'll communicate material changes before they take effect.

hi@brutalgpt.com