Skip to content

Privacy Policy – ReiCover (Beta)

As of: June 2026 · Version 1.3

The legally binding version of this policy is in German. This English translation is provided for convenience.

1. Controller

Responsible for data processing in connection with the “Rei” / “ReiCover” app (the “App”):

Christoph Spanagel and Sascha Dietz Lindenstraße 5B, 68723 Schwetzingen, Germany Email: reicover.info@gmail.com

For any privacy questions, contact us at the email address above.

2. Our Principles

Rei is an AI-supported coach for self-reflection and mental wellbeing. Because you share very personal things with Rei, the following principles apply:

  • Data minimisation: We collect only what is needed to operate and improve the App.
  • No third-party tracking: We do not use any third-party analytics or advertising services, and we use no cookies or comparable tracking technologies. We collect usage statistics ourselves, in minimal scope (see section 3 d).
  • No analysis of your conversations: Your chat content is not analysed for statistics or product analytics.
  • No selling: Your data is never sold or shared for advertising purposes.
  • Your control: You can delete your account and all data yourself, at any time, from within the App.

3. Data we process

a) Account data

When you register, we collect your email address and a password (stored encrypted as a hash) along with the creation date of your account.

  • Purpose: Providing your user account, login, password reset.
  • Legal basis: Art. 6(1)(b) GDPR (performance of a contract).

b) Chat content and check-in answers (health data)

When you chat with Rei or fill in check-ins or self-assessments, the content may contain information about your mental health. This constitutes special categories of personal data (health data) within the meaning of Art. 9 GDPR.

  • Purpose: Providing the core function of the App – personalised conversations and reflective companionship by Rei. Your conversation history is stored in our database so that you can continue conversations and refer back to earlier content.
  • Legal basis: Your explicit consent under Art. 9(2)(a) in conjunction with Art. 6(1)(a) GDPR, given at registration.
  • Withdrawal: You can withdraw this consent at any time with effect for the future, by deleting your account in the App or by emailing us. Without this consent the App cannot be used, since processing your messages is its core function.
  • Proof of consent: To meet our accountability obligation under Art. 7(1) GDPR, we additionally store the timestamp of your consent, the version of this privacy policy, the IP address used at the time of consent, and the user agent (technical identifier of your browser or device). This information is used exclusively to demonstrate consent and is deleted together with your account.

c) Technical data (server logs)

When you access our servers, technical data is automatically processed (IP address, access timestamp, technical error information).

  • Purpose: Ensuring secure and stable operation, error analysis.
  • Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation).
  • Retention: Server logs are deleted after 14 days at the latest.

d) Usage statistics (first-party analytics)

To improve the App we collect, in minimal scope, how the App is used:

  • timestamps and frequency of your sign-ins
  • timestamps of your interactions with the App (chat requests, completed check-ins)
  • which Rei character is selected
  • count of created results (without their contents)

What we do not do: the contents of your conversations and check-ins are not analysed. Severity scores from self-assessments are not stored in the usage statistics. No third-party analytics services or SDKs are used; the data stays in our own database (EU). The analysis is performed in aggregated form; we do not perform individual behavioural analyses.

  • Purpose: Product improvement and steering of the beta phase.
  • Legal basis: Art. 6(1)(f) GDPR (legitimate interest in developing the App).
  • Retention: No later than 12 months after collection, this data is deleted or fully anonymised.
  • Right to object: You can object to this processing at any time in the App’s settings or by emailing reicover.info@gmail.com (Art. 21 GDPR). An objection stops the recording of new events with immediate effect; data already collected is anonymised within the retention period above.

We do not use third-party analytics SDKs, third-party crash tracking, or advertising IDs.

4. Emails

We send only technically necessary emails (e.g. password reset). There is no newsletter and no advertising email.

  • Legal basis: Art. 6(1)(b) GDPR.

5. Processors and recipients

To operate the App we use the following service providers as processors (Art. 28 GDPR):

  • Supabase – database and authentication – server location EU
  • Render – backend hosting – server location EU
  • Anthropic – processing of your chat messages to generate AI responses – processing in the USA possible (see below)

Data processing agreements are in place with all providers.

Note on AI processing (Anthropic): To generate Rei’s responses, your chat messages are transmitted to the Anthropic API. This may involve a transfer to the USA, carried out on the basis of the EU Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR and the data processing agreement with Anthropic. Anthropic does not use content submitted via the API to train its AI models.

Business transfers: Should our offering be contributed to a company or transferred as part of a restructuring, sale, or acquisition, your data may be part of that transfer. In such a case we will inform you before your data becomes subject to a different privacy policy, and you can delete your data beforehand.

Beyond this, your data is not shared with third parties unless we are required to do so by law.

6. Retention and deletion

  • Your data is stored for as long as your account exists.
  • If you delete your account in the App, all data – including all chat histories, check-in results, and usage statistics attributed to you – is immediately and irreversibly deleted. Aggregated reports already computed no longer reference an individual user and are preserved.
  • Server logs are deleted after 14 days at the latest.
  • Usage statistics are deleted or anonymised after 12 months at the latest.
  • Request data stored at Anthropic is subject to the limited retention periods agreed in the data processing agreement.

7. Your rights

You have the right to:

  • Access your stored data (Art. 15 GDPR)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure of your data (Art. 17 GDPR) – directly in the App or by email
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR) – on request we provide your data in a structured, machine-readable format
  • Object to processing based on legitimate interests (Art. 21 GDPR), in particular against the usage statistics under section 3 d – directly in the App’s settings or by email
  • Withdraw any given consent with effect for the future (Art. 7(3) GDPR)

To exercise your rights, an email to reicover.info@gmail.com is sufficient. To protect your data we may require confirmation of your identity (e.g. via the email address on file) before processing the request. We respond within one month of receiving your request at the latest.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Baden-Württemberg (www.baden-wuerttemberg.datenschutz.de). In Austria, the Datenschutzbehörde is responsible (www.dsb.gv.at). You may also contact the supervisory authority where you reside.

8. Data security

We protect your data with technical and organisational measures, in particular:

  • Encrypted transmission of all data (TLS)
  • Encrypted storage in the database
  • Strict access controls – we do not read your chats either, unless you explicitly ask us to as part of a support request

9. Minimum age

Use of the App is permitted from age 18. By registering, you confirm that you are at least 18 years old.

10. No automated decision-making

Rei generates AI-supported conversational responses. There is no automated decision-making that produces legal effects concerning you or similarly significantly affects you (Art. 22 GDPR).

11. Important notice

Rei is a coach for self-reflection and mental wellbeing – not a therapist, not a doctor, and not a medical device. The App is not a substitute for psychotherapeutic or medical treatment and is not suitable for emergencies. In acute crises, please contact the Telefonseelsorge (Germany: 0800 111 0 111 · Austria: 142) or the emergency number 112. Further details are set out in our Terms of Use.

12. Changes to this Privacy Policy

We may update this Privacy Policy, e.g. when App features change or the legal situation changes. We will inform you of material changes within the App. The current version is always available in the settings.

13. Severability

Should individual provisions of this Privacy Policy be invalid, the validity of the remaining provisions shall remain unaffected.