Privacy

Last updated 14 October 2026

Mostly this is about what happens once you’re using the app. There’s also a short section on the waiting list, because that is where an address goes first.

If you joined the waiting list

Pezmu is in a closed beta, so the waiting list is how you get in. Addresses left on it before, while the beta was briefly open to everyone, are still held — and everything below applies to all of them equally.

Your email address and the date you joined. Nothing else — no name, no IP address, no browser fingerprint. It sits in our own database (Supabase), and the one thing it is for is telling you when a place opens. No newsletter, no drip sequence.

Two services touch it. Supabase stores it, and Resend sends the notification that you joined, so your address passes through Resend’s servers on the way to one inbox. Nobody else sees it, and it is never sold, rented or shared for anyone’s marketing.

We hold it on your consent, given when you submit the form. Want it gone? Email pezmuapp@gmail.com and it’s deleted — you don’t have to explain why. And if you go on to make an account with that same address, Delete your account in the app removes the waiting-list row along with everything else, without you having to ask anyone.

Counting visits

On your first visit to this site a cookie notice asks whether you accept analytics cookies. It's the only thing we ask, and your answer is remembered so you're not asked again.

Decline and nothing loads. No Google Analytics, no request to Google, no analytics cookie. The only thing kept is the refusal itself — one line in your browser's own storage, which never leaves your browser. Ignoring the notice has the same effect: no answer is treated as a decline.

Accept and Google Analytics runs. It sets its own cookies (named _ga and _ga_…, kept up to two years) and tells us how many people came, which pages got read, roughly which country you're in, which search or link sent you, and whether a visit ended in joining the waiting list — a count, with no email attached and nothing that ties it back to you. We've switched off the two settings that let Google fold a visit into its cross-site advertising audiences, so this can't be used to target ads at you. It never sees your email address, and there is nothing in it that names you.

Why we want it at all: to find out which writing is worth doing more of. That's the whole use. The legal basis is your consent, and you can take it back here, any time, in one click:

If your browser sends a Global Privacy Control signal, we treat that as a decline and don't ask.

None of this applies to the app itself at chat.pezmu.app. There is no analytics there at all — the only cookie is the one that keeps you signed in.

Once you're using the app

The app lives at chat.pezmu.app, and it keeps a record — that record is the product, because whether a word has become yours is worked out from what you wrote weeks ago.

Stored in our database:

• your email address — that's the whole account, and there's no password: you either sign in with Google or with a link we email you
• if you use Google to sign in, Google also passes on the name and profile picture on your Google account. Our sign-in provider stores those; the app itself doesn't use or display them.
• every message, yours and the tutor's
• the paragraph you write about yourself when you start
• the facts the tutor infers about you as you talk — your job, the people in your life, your city, what's coming up
• every word you save, tap, use or get wrong, every correction, and the written feedback the app generates about your progress

Sent to Google, not stored by us:

• your messages, to Google's Gemini models, which write the tutor's reply and work out which words you used and where you slipped
• the tutor's replies, to Google Cloud Text-to-Speech, if you have something read aloud. The audio is held in memory briefly and never written to disk.

We use Google's paid API tier, where what we send isn't used to improve Google's models. Google holds it briefly to check for abuse, then deletes it.

Why we're allowed to hold it

Plain version of the legal bit. Running the app — storing your conversations, tracking which words have become yours, letting the tutor remember your life so it can talk to you rather than at you — is us doing the thing you signed up for. In GDPR terms that's performance of a contract: the personalisation isn't a bonus bolted on the side, it's the product, and the app can't do its job without it.

Keeping Pezmu working and affordable — seeing how many messages have been sent, what the AI is costing, whether something is broken — is our legitimate interest. That's counts and costs, never the content of what you wrote.

Your address on the waiting list is held on consent, which you can withdraw any time by emailing us. Analytics cookies on this site run on consent too — that one you withdraw yourself, with the button above.

Nothing here makes automated decisions with legal or similarly significant effects about you. The app judges your language, not you.

Who else is involved

• Google — Gemini for the tutor and the word analysis, Cloud Text-to-Speech for read-aloud, and Google Analytics for counting visits to this marketing site if you agreed to it
• Supabase — the database, and sign-in
• Vercel — hosting for the site and the app. Its server logs record ordinary request data, which can include your IP address.
• Resend — waiting-list notification emails only

Each of them processes this on our instructions under a data processing agreement, and none of them may use it for their own purposes. These are US-based companies, so your data is transferred outside the EU; those transfers rely on the European Commission's standard contractual clauses or the EU–US Data Privacy Framework, depending on the provider.

How long it's kept

Your record is kept for as long as you have an account. Nothing expires on its own, and that's deliberate — whether a word has become yours is worked out from what you wrote weeks or months ago, so a log that quietly forgot last month would break the one thing the app is for.

When you use Start over or Delete your account, the record goes immediately. Deleting the account also removes your email address, so nothing identifying you is left behind. Backups held by our providers roll off on their own schedule, within about 30 days. One exception, and it's a narrow one: the per-request log of what our model calls cost us is kept, with your account id stripped out of it, because that's a record of our own bill rather than a record of you.

Who reads your conversations

Nobody. We can see how much you've used it — messages sent, words saved, when you last showed up — because that's how we tell whether the thing works. Not what you said.

What you can do about it

Three of these are buttons in the app, on the page that shows what your tutor remembers. The rest, email us and we'll do it — within a month, and free.

• See it — Download everything gives you the whole record as a file. That's also your right of access and of portability.
• Delete it — Start over wipes your whole record: every message, every saved word, every fact. Delete your account does that and removes the account too, including your email address and your place on any list we hold it on; you won't be able to sign back in. Both are immediate, both are buttons, and neither can be undone.
• Fix it — every fact the tutor remembers is listed on one page, and you can edit or delete any line of it; the tutor then stops referring to it.
• Object, or ask us to pause — you can object to how we use it, or ask us to restrict processing while something's in dispute.
• Complain — if we've got this wrong, tell us first if you're willing, but you have every right to go straight to your data protection authority. Ours is the Cypriot Office of the Commissioner for Personal Data Protection; you can also complain to the one where you live.

Things you probably shouldn't type

The tutor picks up on what you tell it, and it doesn't know what's sensitive. We're not asking for anything about your health, your politics, your religion or your sex life — please don't volunteer it. If something's private, invent it: say you're a chef when you're an accountant. The practice still counts, because the shape of the conversation is yours.

Age

Pezmu is for people aged 16 and over. It isn't designed for children, and we don't knowingly hold data about them. If you think a child has an account, email us and we'll remove it.

What we don't do

Nothing is sold. Nothing goes to advertisers. Nobody buys an audience built out of you: the one analytics tool we run, on this marketing site and only with your agreement, has its advertising features switched off, and it never receives your email address or anything you wrote to the tutor. Inside the app there is no analytics at all — the only cookie it sets is the one that keeps you signed in.

If this page changes

The date at the top moves, and if the change is substantive — new data, a new company involved, a new reason for holding it — the app asks you to read it again before your next message rather than hoping you noticed.

Asking us anything

Pezmu is built by one person. Questions, corrections, or a request to see or delete what we hold: pezmuapp@gmail.com.