Last updated 31 August 2026

Privacy Policy

The short version: we store the messages you send, the replies we send back, and one random cookie that ties the two together. We never ask for your name or email, we run no analytics, and nothing is sold or shared with advertisers. Ever.

01Who is responsible

Natural Intelligence (“we”, “us”) is operated by [Operator legal name], [Registered postal address]. We are the data controller for the information described here. For anything in this policy, write to hello@natural-intelligence.app.

02What we collect

We hold only what the service needs to work:

  • Your messages. The full text of everything you send, with the time you sent it. If you type personal information into a message, we hold that too — which is why we ask you not to.
  • Our replies and the time they were sent.
  • A session identifier. A random string with no meaning outside our database, stored in the ni_session cookie and against your conversation. It is how we know which conversation to show you when you return.
  • A notification address — only if you ask for it. If you choose “Notify me” to be told when a reply arrives, your browser gives us a delivery address for that one signal, which we store against your conversation. The notification itself never contains your messages or our replies — it only says a reply exists. Withdraw it any time by blocking notifications for this site in your browser; it is deleted with your conversation.

We do not collect your name, email address, phone number, or payment details. We do not create a profile of you, and we do not attempt to identify you across other sites or devices.

03What we deliberately do not do

  • No IP address logging in our records. Your IP address is handled transiently by our hosting infrastructure to deliver the page to you, as it must be for any website. We do not write it into our own database, and it is never linked to your conversation.
  • No analytics or tracking pixels. No third-party measurement scripts of any kind run on this site.
  • No advertising cookies, no data sale, no data sharing with brokers, advertisers, or partners.

04Why we may use it and on what basis

  • To run the conversation — reading what you sent and replying to it. Under the UK/EU GDPR this is necessary to perform the service you asked us for (Art. 6(1)(b)).
  • To keep the service usable and safe — for example the per-conversation rate limit that stops the service being flooded. This rests on our legitimate interests (Art. 6(1)(f)).
  • Remembering your appearance choice — light or dark, kept in this browser and nowhere else. Like the session identifier, this is what you asked the service to do (Art. 6(1)(b)); clearing this site’s data removes it.

05Who reads your messages

Your messages are read by the small team that operates this service, so that they can be answered. We tell you this plainly because it is your data: real people at this organisation see what you write.

Nobody else has access. We do not pass conversations to third parties for processing, analysis, training, or any other purpose, except where the law compels us to (see section 8).

06Cookies and local storage

ni_session — strictly necessary, one year. A random identifier. Without it the service cannot tell which conversation is yours, so it is set as soon as you open the site and cannot be turned off while you use the chat. It is HttpOnly, so page scripts cannot read it, and marked SameSite=Lax and Secure in production.

ni_admin — strictly necessary, twelve hours. Set only for our own team on the private administration pages. It is never set on your browser as a visitor.

Appearance preference — local storage, not a cookie. If you switch between light and dark, that choice is kept in this browser’s local storage. It never reaches our server.

We set no analytics, tracking, or advertising cookies of any kind. That is why the short notice above the message box only tells you about the cookie and then goes away: there is no optional cookie to consent to, and nothing for you to switch off. To clear everything, clear this site’s data in your browser settings — that also detaches you from your conversation, so you will start a fresh one.

07How long we keep it

Conversations are stored on our own server. We delete a conversation, and every message in it, after 365 days with no activity. You can ask us to delete it sooner at any time — see section 9.

Nothing outlives the conversation: everything we hold about it is removed with it.

08Where it is stored and when we would disclose it

Conversations are held in a database on a server we control. Access is limited to the operating team and protected by a password. We use no third-party message-processing services.

We would disclose message content only where we are legally required to — for example a valid court order — or where it is necessary to protect someone from serious harm.

09Your rights

Depending on where you live you have the right to access a copy of your data, to have it corrected, to have it erased, to restrict or object to our use of it, and to receive it in a portable form. To exercise any of these, email hello@natural-intelligence.app.

An important practical note. Because we hold no name or email for you, we cannot look you up. To identify your conversation, send your request from the same browser and quote the two-word conversation name shown in the sidebar, or paste a distinctive line you wrote. If we cannot connect a request to a conversation with reasonable confidence, we have to decline it — which also protects you from someone else claiming your conversation.

The fastest erasure of all is in your own hands: clearing this site’s cookies immediately and permanently detaches your browser from the conversation. Email us if you also want the stored copy deleted.

If you are in the UK or EU and think we have handled your data badly, you may complain to your national data protection authority.

10Children

This service is not intended for people under 16, and we do not knowingly hold data about them. If you believe a child has sent us messages, email hello@natural-intelligence.app and we will delete the conversation.

11Security

Traffic is encrypted in transit. The session identifier is generated from a cryptographically secure random source and is long enough that it cannot be guessed. Administration pages sit behind a signed, expiring session and a password. No system is perfectly secure, so please continue to keep passwords, financial details, and sensitive personal matters out of your messages.

12Changes to this policy

If we make a material change we will update the date at the top of this page, and ask you to agree again before you continue chatting. The companion document is the Terms of Use.