Your privacy and data security are fundamental to Chomsky. We use local-first storage, explicit consent, and industry-standard security to protect your therapeutic journey.
Core Privacy Principles
Local-First Storage: Your conversations stay on your device by default
Explicit Consent: Nothing is shared without your clear choice
Minimal Data: We collect only what's necessary
No Training Data: Your conversations never train our AI
Professional Standards: We follow therapeutic privacy guidelines
What We Collect
Essential: Email, display name, user role, preferences
Optional: Therapeutic conversations (stored locally)
Never: Health records, financial details, location data
Data Storage & Security
Your conversations are stored locally on your device. Only when you choose to share with a therapist does any conversation data reach our servers. We use end-to-end encryption, industry-standard SSL/TLS protocols, and regular security audits.
Your Rights & Control
You can access, delete, or export your data anytime. You control sharing preferences and can revoke permissions instantly. Account deletion removes all your data from our systems. We provide full transparency about data handling and use.
Professional Standards
We maintain HIPAA-aligned practices, GDPR compliance, and regular privacy audits. Our team follows strict therapeutic ethical guidelines and mental health privacy standards. We clearly separate AI assistance from human therapy.
Contact & Updates
For privacy questions, contact therapy@chomsky.app. We respond within 48 hours. We notify you of privacy policy changes and maintain version history. Major updates include a grace period.
Children's Privacy
Chomsky is designed for use by children under 13 only when invited by a parent, guardian, or authorized institution. We do not knowingly collect personal information from children without verifiable parental consent. If we discover that we have inadvertently collected a child’s data without consent, we will delete the information immediately.
Parental Consent and Child Accounts
Children under 13 may only access Chomsky via a verified invitation. A parent, guardian, or authorized institution must actively approve the child’s account before use. Parents retain full control over their child’s account, data, and interactions. The system adjusts interactions based on the child’s developmental stage.
What Information We Collect from Children
If parental consent is granted, Chomsky may collect:
-Basic account details (email, display name, age category for appropriate AI responses).
-Interaction history (only stored locally unless explicitly shared).
Therapeutic preferences (e.g. warmth settings to personalize AI guidance).
We do not collect sensitive data such as health records, financial details, precise location data, or device tracking.
How We Use Children's Information
Chomsky uses child-specific information only to provide developmentally appropriate therapy. We do not:
-Share children's personal data with advertisers or third parties.
-Use children's data for AI training.
-Store conversations beyond what is necessary for therapeutic engagement.
Parental Rights
Parents have the right to:
-Review, modify, or delete their child’s data.
-Withdraw consent and delete their child’s account at any time.
-Request an export of their child’s stored interactions.
-Control AI interaction levels to ensure safety.
To exercise these rights, parents can contact us at therapy@chomsky.app, and we will process the request within 30 days.
AI Safety and Child Interaction Standards
Chomsky adjusts responses based on a child’s age and cognitive ability. AI prompts are explicitly designed for safe, developmentally appropriate interactions. The system prioritizes short, clear, and constructive therapeutic guidance for young users. Crisis detection safeguards ensure the AI remains supportive without engaging in sensitive topics.
Compliance and Enforcement
We comply with COPPA (Children’s Online Privacy Protection Act) and ensure that children’s data is handled with the highest privacy standards. If you believe we have collected personal information from a child under 13 without consent, please contact us immediately for investigation and removal.