Privacy Policy

Brother David Bot (app.brotherdavid.bot)

Last Updated: June 5, 2026

This Privacy Policy describes how Wolfgang Pree GmbH ("Company," "we," "us," or "our") collects, uses, and shares information when you use the Brother David Bot via app.brotherdavid.bot and our mobile applications (the "Service"). By using the Service, you agree to the collection and use of information as described in this Privacy Policy.

1. Information We Collect

1.1 Information You Provide

(a) Account Information: When you create an account or sign in, we collect your email address and password. Passwords are stored only in hashed form and are never accessible to us in plain text.

(b) Conversation Messages: We store the messages you send to the Brother David Bot and the AI-generated responses. These messages are stored to maintain conversation continuity across sessions.

(c) Voice Input: If you speak to the Brother David Bot, your audio is transcribed into text so the Service can respond. The audio is processed for transcription only and is not stored; see Section 3.1.

(d) Feedback: If you submit feedback through the Service, we collect the content of your feedback together with the contact details you provide.

1.2 Information We Derive

(a) Conversation Summaries: We may generate AI-produced summaries of your conversations to maintain context efficiently across sessions without retaining the full history in active memory.

(b) Personalization Data: We analyze your conversations to extract and store information about your interests and preferences ("memories"), which we use to make the Brother David Bot's responses more relevant and contextual over time. This personalization is based on automated analysis of your conversations and does not involve decisions that produce legal or similarly significant effects on you.

1.3 Information Collected Automatically

(a) Session Data: We track session duration, device type, and user agent for analytics purposes.

(b) Activity Data: We record events such as messages sent, voice usage, and feature interactions.

(c) Usage Data: We collect information about how you interact with the Service, including timestamps, message counts, and feature-usage patterns.

(d) Approximate Location: We may determine the general area (such as city and country) from which you access the Service based on your IP address, to provide time-zone-aware features and contextual responses. We do not store your IP address for tracking purposes beyond standard web-server logs.

We do not use cookies for advertising or third-party tracking.

2. How We Use Your Information

We use the information we collect to:

  • Operate the Service: generate AI responses to your messages, maintain conversation continuity, and deliver voice responses.
  • Personalize your experience: make the Brother David Bot's responses more relevant and contextual.
  • Communicate with you: send essential, transactional emails such as password-reset and account or security notices. We do not send marketing or promotional emails.
  • Improve the Service: analyze usage patterns and session data to understand how the Service is used and identify areas for improvement.
  • Ensure safety: monitor for abuse, enforce our Terms and Policies, and maintain the security of the Service.

EU/UK GDPR Lawful Bases

Where the EU GDPR or the UK GDPR applies to our processing of personal information, our lawful bases may include performance of a contract, legitimate interests, consent, and/or compliance with legal obligations. We may rely on legitimate interests for purposes such as network and information security, fraud prevention, analytics, and research and development; on consent where required (for example, for certain marketing); and on legal obligations where the law requires processing.

3. How Your Data Flows to Third Parties

Your conversation data is processed by third-party AI and technology providers as part of delivering the Service. We select providers who commit to appropriate data-handling practices. Current providers include, but are not limited to, the following:

3.1 AI and Voice Providers

(a) OpenAI (ChatGPT API): Your conversation messages are sent to OpenAI's API to generate the Brother David Bot's responses. OpenAI's API terms prohibit the use of API-submitted data for model training. See OpenAI's Privacy Policy.

(b) ElevenLabs (Text-to-Speech): AI-generated text (not your messages directly) is sent to ElevenLabs to produce the Brother David Bot's voice responses. See ElevenLabs' Privacy Policy.

(c) Whisper (Speech-to-Text): If you use voice input, your audio is sent to OpenAI's Whisper API for real-time speech-to-text conversion. The audio is processed in real time and is not retained; only the resulting text is kept as part of your conversation. See OpenAI's Privacy Policy.

3.2 Infrastructure Providers

(a) Amazon Web Services (AWS): Our application and database are hosted on AWS in the Frankfurt, Germany (eu-central-1) region. Your account information, conversation messages, and memories are stored within the European Union. See AWS's Privacy Notice.

3.3 Business Partners

We may share your personal information with business partners we work with to provide a product or service you have requested, or with whom we jointly offer products or services. Once shared, that information is also subject to the business partner's privacy policy.

3.4 Affiliates

We may share your personal information with our corporate affiliates.

3.5 Disclosures to Protect Us or Others

We may share your personal information with external parties if we, in good faith, believe doing so is required or appropriate to comply with law-enforcement or other government requests; comply with legal process such as a court order or subpoena; protect the rights, property, or safety of you, us, or others; enforce our policies or contracts; or assist with an investigation of suspected or actual unauthorized or illegal activity.

4. Data Retention

  • Conversation Messages: Retained until you delete the conversation they belong to or delete your account. Deleting a conversation permanently removes its messages; messages are not otherwise automatically deleted.
  • Conversation Summaries / Personalization Data: Updated as you use the Service; deleted when you delete your account.
  • Session and Analytics Data: Retained for service-improvement purposes; deleted when you delete your account.
  • Voice Input: Audio is processed in real time for transcription and is not stored; only the resulting text is retained as part of your conversation.

To determine appropriate retention periods, we consider applicable legal requirements; the amount, nature, and sensitivity of the information; the purposes for which we process it; and whether we can achieve those purposes through other means.

5. Your Rights and Choices

5.1 Account Deletion

You may delete your account at any time. Account deletion permanently and irreversibly removes your data, including your profile and account information, all conversation messages, any personalization data, and analytics and session data.

5.2 Data Export

You may request an export of your data by contacting us at bdbot@chrona.com. We will provide a copy of your data in a machine-readable format within 30 days.

5.3 Email Communications

We only send essential, transactional emails (such as password-reset and account or security notices). We do not send marketing or promotional emails, so there is nothing to unsubscribe from.

5.4 Your Rights Under the EU/UK GDPR

If you are in the EEA, Switzerland, or the UK, you have the right to access, rectify, erase, restrict, or object to the processing of your personal information, to data portability, and to withdraw consent at any time where processing is based on consent. You also have the right to lodge a complaint with a supervisory authority — in Austria, the Datenschutzbehörde (www.dsb.gv.at).

5.5 Additional Rights for California Residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect, use, and disclose; to request deletion of your personal information; to opt out of the sale of personal information (we do not sell your personal information); and to non-discrimination for exercising your privacy rights. To exercise these rights, contact us at bdbot@chrona.com.

6. Model Training

We do not use your conversations, messages, or derived data to train AI models. The third-party AI providers we currently use operate under API terms that prohibit the use of API-submitted data for model training.

7. Security

We implement reasonable security measures to protect your information, including encrypted data transmission (HTTPS), encrypted database connections, and secure authentication. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Children's Privacy

The Service is not intended for children under 14. We do not knowingly collect personal information from children under that age. If we learn that we have collected such information, we will take steps to delete it promptly. If you are a parent or guardian and believe your child has provided personal information to the Service, please contact us as described in "Contact Us" below.

9. International Data Transfers

Your account information, conversation messages, and memories are stored within the European Union (AWS, Frankfurt). However, some of the AI and voice providers we use to process your data (such as OpenAI and ElevenLabs) are located in the United States, so processing your messages or voice input may involve a transfer of personal information to the United States. Where we transfer personal information from the EEA, Switzerland, or the UK to a country that does not provide an adequate level of protection under applicable data-protection laws, we rely on safeguards such as the EU Standard Contractual Clauses. For more information about these safeguards, please contact us as set out below.

10. Supplemental Notice for EU/UK GDPR

In some cases, providing personal information may be required by law or under a contract, or may be necessary to enter into a contract. If you choose not to provide personal information where it is required, we will inform you of the consequences at that time. Our processing may be supported by one or more of the following lawful bases: performance of a contract, legitimate interests, consent, and compliance with legal obligations.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the Service or by email. The "Last Updated" date at the top indicates when this Privacy Policy was last revised.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Wolfgang Pree GmbH Karl-Roll-Straße 16 5020 Salzburg, Austria Company registration number: FN 247177x Email: bdbot@chrona.com