Your privacy.

Step by step

1. Your browser. The conversation is held in the page while it’s open. We don’t automatically save chat in cookies or local storage. Closing the tab or refreshing clears the conversation. You can separately choose to save an edited note, comfort preferences, or a check-in recovery key on your device. The page will still be in your browser history, which is something you control and we can’t.
2. Our server. It passes your message along and passes the answer back. It doesn’t write your chat into a database. The optional check-in service stores its own setup separately; it never receives your chat history.
3. The AI service. They generate the reply. Retention depends on the provider and account settings. Confide supports Groq and Anthropic; both describe exceptions for safety or legal requirements. Read the Groq data policy or Anthropic API retention policy. Requests come from our server, so we do not forward your IP address to the chat provider. Any personal details you type are part of the message.

Things we won’t claim

We won’t say this is “100% private” or “completely anonymous”, because your message does leave this website in order to be answered, and saying otherwise would be a lie you couldn’t check.

What’s true is narrower and, we think, more useful: you can chat without an account or contact details. If you type identifying details into chat, they are part of the message sent to the AI service. Check-in setups contain a contact number and may contain identifying details in the message you choose.

If something goes wrong

When reporting is enabled, a link under a completed answer lets you share that one exchange to report something harmful or wrong. It sends only the message and the reply you flagged, only when you tap it, and it’s the way an exchange can be shared with us for review. We need it, because a tool that stores nothing otherwise has no way of finding out it made a mistake.

Optional tools and saving

• Web search. Off by default. Turning it on for a message allows the AI provider to send search terms to its search service. Use a city or general area instead of an address. Search providers have their own retention practices.
• Local service lookup. A ZIP entered in a tool is matched in your browser. Loading a map shares your IP and the map area with OpenStreetMap. Opening directions or a provider website opens an external service with its own privacy practices.
• Location. Requested only when you tap the location button. Your browser may use a device location service. Confide keeps the result in the page unless you explicitly share it or include it in a check-in text. It is a dated snapshot, not live tracking.
• Comfort preferences. Appearance, spoken voice, and follow-up choices last for this visit unless you explicitly choose to remember them on this device. That option uses browser local storage and never includes chat. Turn it off in conversation preferences to remove the saved choices.
• Conversation intent and craving support. The optional conversation style goes with your chat request so the AI can respond accordingly. It isn’t saved with your preferences or usage counts. Choices in the craving exercise stay in the page and are cleared on refresh. The exercise does not send those choices to the AI.
• Reply corrections. Choosing “Too much advice,” “You misunderstood,” or “Keep it shorter” sends a new chat request with the current conversation and your correction. It does not file a report or save a personal feedback profile. Like other chat requests, it contributes only to aggregate query and reply counts.
• Your notes. Continuation notes, appointment worksheets, and “what helped” reminders stay in the page unless you explicitly save or copy them. You can select chat excerpts for a continuation note and edit them. Save buttons keep only the note text and a local entry key in this browser’s local storage. These notes are not uploaded to our server, analytics, or the AI. Anyone using the same browser can read them; this is not an encrypted vault. Browser settings, private mode, or clearing site data may remove them.
• Using or deleting saved notes. Open Your notes in chat to review, edit, or delete your continuation note and reminders. Appointment notes have their own controls in the appointment worksheet. Edits require another Save. New conversation and Quick exit leave saved notes in place. Deleting a saved note does not erase text you already copied or sent. Putting a continuation note in the message box does not send it; pressing Send then shares that text with our server and the AI service like any other message.
• Spoken voices. Audio is off by default and online voices are currently unavailable. You can choose a voice marked as on-device by your browser, which sends no text for speech generation. Confide does not save audio. Nothing plays automatically. Audio stops when the page loses focus, you leave, or you stop it. Previously saved online voice choices are reset to audio off.
• Check-in texts. When enabled and chosen by you, Confide stores the contact number, chosen message, deadlines and delivery references encrypted in its check-in database. Setup awaiting verification expires after 30 minutes; an activated setup expires 24 hours after its final deadline. Twilio receives the number and message to verify the contact and schedule delivery, and may retain its own records. This exception allows a text attempt even after the tab closes. It does not save chat.
• Save access on this device. This optional button saves a private check-in recovery key in browser local storage. Anyone using that browser, or anyone with the private link, can view and cancel the plan. Removing saved access does not cancel texts. Use “Cancel all remaining texts” first if that is what you want. Exit and closing chat do not cancel them.

Counting usage

Confide keeps daily and lifetime totals for submitted questions, completed, failed or stopped replies, and visits. The separate analytics database contains only metric names, dates, and numbers. It contains no conversation text, names, phone numbers, IP addresses, visitor IDs, page histories, or individual activity records. Check-in storage is separate.

A visit normally contributes only to an unclassified visit total. If you choose the option below, your browser remembers a “visited before” flag and last counted day. It sends only new/returning and first-visit-today flags, never an identifying code or the saved date. Those flags immediately become aggregate counts. Turn the option off to remove the marker. Aggregate totals cannot be traced back to you to remove an individual contribution.

Visit measurement respects Do Not Track and Global Privacy Control. Overall question and reply counts still measure whether the service is working. Our hosting infrastructure receives normal connection information to serve requests; that information is not copied into the analytics database.