The data controller responsible for processing personal data is:
Name: Matteo Pellizzari / Nicola Simionato
Contact email: privacy@existentialanalyst.com
1. Data Controller
For any request related to your personal data, you can write to the address above.
2. What the Existential Analyst is
The Existential Analyst is an existential exploration platform assisted by artificial intelligence, developed from the Escuela Omega methodology. During sessions, the user engages in dialogue with the assistant, receives practices and materials, and the platform builds over time a synthesis of their journey (recurring themes, open questions, existential structure).
Nature of the content. The content you share during sessions may relate to your psychological, emotional, and existential state. This information may constitute sensitive data under Mexico’s Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP), and may qualify as health-related data under the European GDPR. For this reason, where applicable, we request your express consent and adopt the specific measures described in this notice.
The platform does not provide medical or psychotherapeutic diagnoses or treatments and does not replace the relationship with a health professional.
3. Data we collect
3.1 Data you provide directly
-
- Account data: first name, last name, email address, password (managed in encrypted form by our authentication provider).
- Onboarding data: age range, gender, purpose of the journey, profession, country, how you heard about us.
- Session content: the messages you write to the assistant.
- Voice messages (optional): if you use voice input, the audio is transcribed to text; see §6 (providers).
- Personal notes and uploaded files for practices (for example, documents you choose to attach).
3.2 Data generated by the platform from your content
-
- Conversation memory / existential structure: synthesis of recurring themes, the user’s position, open questions, detected language, and summary indicators of the journey.
- Assigned practices and their status.
- Session summaries and symbolic images shown.
- Service usage data: number of sessions, duration, remaining sessions.
3.3 Technical data
Minimal technical data necessary for operation and security (for example, application logs, error reports via our monitoring tool).
3.4 Payment data (when active)
When payments are activated, card data does not pass through or get stored on our servers: it is managed directly by the payment provider (see §6).
4. Purposes of processing and legal bases
Purpose |
Data |
Legal basis |
|---|---|---|
| Account creation and management | account | Contract performance / consent |
| Service provision (sessions, AI assistant, practices, memory) | session content, generated data | Contract performance and express consent for sensitive data |
| Voice message transcription | audio | Contract performance; use of audio is optional |
| Journey personalization and suggestions | onboarding data, memory | Contract performance / legitimate interest |
| Sharing the Diary and Memory with the therapist (see §5) | sensitive data | Express consent |
| Service emails (data retention notices, therapist link/revocation notifications) | account | Contract performance / duty to inform |
| Marketing emails (if any) | account | Consent (revocable at any time) |
| Security, abuse prevention, error diagnostics | technical data | Legitimate interest |
| Tax compliance on payments (when active) | billing data | Legal obligation |
Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
5. Linking with the therapist (link function)
The platform allows a professional (an account designated as “therapist”) to download exclusively your Existential Diary and your Existential Memory, and only if you authorize it. It works as follows:
- External written consent. Consent to share your data with the therapist is an act you express outside the platform, in writing, within the context of your relationship with the professional. This is the act that authorizes the sharing.
- Technical activation on the platform. The therapist generates a linking code (valid for 48 hours, single use) which you enter in your Privacy area, expressly confirming via a checkbox that you have given written consent. Only then is the link activated.
- What the therapist can see. Exclusively the Existential Diary and the Existential Memory, downloadable as documents. The therapist does not access individual chat messages, personal notes, payment data, or any other data.
- Transparency. In your Privacy area you can see the list of linked therapists and the access history (date and type of document downloaded).
- Revocation. You can revoke the link at any time (as can the therapist). After revocation, the therapist can no longer download your documents.
- Notifications. You receive an email when a link is activated and when it is revoked.
Legal basis: express consent for the processing of sensitive data.
6. Recipients and data processors (providers)
To provide the service, we rely on external providers who process data on our behalf. The main ones are:
Provider |
Purpose |
Note |
|---|---|---|
| Supabase | Database, authentication, file storage | Retention of account data and content |
| Railway | Backend infrastructure hosting | — |
| Vercel | Web application hosting (frontend) | — |
| Anthropic (Claude) | AI processing of sessions | Receives conversation content to generate responses |
| OpenAI | Voice message transcription | Receives audio when you use voice input |
| ElevenLabs | Voice synthesis (reading responses aloud) | Receives text to be spoken |
| Pinecone | Semantic indexing for retrieval of relevant content | — |
| Resend | Sending of service emails | Receives email address and message content |
| Sentry | Error and reliability monitoring | Technical/diagnostic data |
| Stripe (when payments are activated) | Payment management | Card data is processed directly by Stripe |
| Amazon | Link to suggested books (affiliate program) | Possible redirect to Amazon sites |
We do not sell your personal data to third parties.
7. International data transfers
Some providers (in particular Anthropic, OpenAI, Pinecone, Resend, Stripe, Amazon) may process data outside Mexico and the European Union, generally in the United States. In such cases, the transfer is carried out on the basis of appropriate safeguards, including the European Commission’s Standard Contractual Clauses and/or the provider’s adherence to applicable adequacy frameworks.
8. Data retention
-
- Account and profile data: retained while the account remains active.
- Session messages: automatically deleted after 90 days; we send email notices before deletion (at 30 and 7 days). The memory/synthesis of the journey may be retained separately in aggregate form.
- Therapist access log: retained to ensure transparency regarding accesses.
- Billing data (when active): retained for the period required by applicable tax obligations.
- Following account deletion, associated personal data is removed, except where retention is required by legal obligation.
9. Your rights (ARCO)
Under the LFPDPPP and, where applicable, the European GDPR, you have the right to:
-
- Access to your personal data;
- Rectification of inaccurate or incomplete data;
- Cancellation of your data;
- Objection to processing;
- Portability of data (the platform allows you to export your data in readable format, as well as the Diary, Memory, and Notes in PDF/DOCX);
- Withdrawal of consent at any time (including the therapist link and marketing communications).
You can exercise these rights from the platform’s Privacy area (export, reset, account deletion, revocation of links) or by writing to privacy@existentialanalyst.com.
10. Security
We adopt appropriate technical and organizational measures to protect data (encryption in transit, access controls for each operation, secrets management, monitoring). No system is completely secure: in the event of a security incident involving a risk to your rights, we will act in accordance with applicable notification obligations.
11. Minors
The service is not directed at persons under 18 years of age. We do not knowingly collect data from minors of that age.
12. Changes to this privacy notice
We may update this notice when necessary. In the event of substantial changes, we will notify you through the platform or by email. The date of the last update appears at the beginning of the document.
13. Contact
For any questions about this notice or about the processing of your data: hello@existentialanalyst.com
The Existential Analyst · Escuela Omega
© 2026 Analista Existencial