Privacy
Plain-language summary Version:
This is a simplified summary, not the full legal text. The full legal text is currently under legal review; once published, it is the reference if anything differs.
Much of what you write in BAYNNA is about your mental health. So we design everything to collect as little as possible, and to protect what's sensitive even from our own team.
What we collect, and what we don't
- For your account: your email and birth year only (to confirm you're 18 or older).
- We don't collect your real name, phone number, address, contacts, precise location or advertising identifiers.
- We don't store your IP address as-is, only a one-way hashed form, for security purposes.
- Details like age range or country are optional and hidden from others by default.
Your identity stays separate
Your account (email) and your public pseudonym are stored separately, and others only see your pseudonym. When you post with “no name”, no author is shown, and even moderators can't see who wrote it except in very narrow, defined cases (such as a risk to someone's life), with two people's approval and a full audit record.
Encryption, and who can see what
- Your journal, AI conversations and AI memory, safety plan, thought dumps and delayed messages are encrypted by the service with a key specific to you before they are stored.
- All data is encrypted in storage and in transit.
- No staff role at BAYNNA can read your journal, mood, AI conversations or safety plan.
- Moderators only see content that has been reported.
- Private messages are encrypted per conversation, but they are not end-to-end encrypted. Moderators only see them if one of the participants reports them, and then only the reported message and up to 10 before it.
Your consent, item by item
- AI is off by default and only works after we explain what is sent and to which kind of provider. AI memory is a separate consent.
- Analytics and marketing emails are off by default.
- You can withdraw any optional consent as easily as you gave it, and saying no doesn't disable unrelated features.
- We don't train AI models on your content. That would need a separate, explicit opt-in, and none exists today.
No selling, no targeted ads
We don't sell your data or share it for advertising, and we don't use your health or personal data for targeting or marketing.
Notifications
By default notifications read “You have a new notification”, and nothing sensitive is put inside the notification itself.
Export and deletion
- You can request a copy of your data from inside the app, and download it only from the app.
- You can deactivate your account temporarily, or delete it permanently.
- Deletion becomes final after 7 days, and you can cancel it during that time. Encrypted backups remain for at most 35 days and are then erased automatically; they are only used to restore the service after a failure.
Limits we're honest about
- Temporary content is deleted after its time is up, but we can't stop others from taking screenshots.
- Content that gets reported is reviewed by moderators.
The summary you share with a professional
You choose which sections go in. It contains no username or email, and never includes your journal text, AI chats or safety plan. It lasts 7 days at most, and the share link has limited views and can be cancelled at any time.
This website
This website uses no cookies, no analytics or tracking tools, and no third-party scripts. The crisis resources page needs no account.
BAYNNA is not an emergency service or a substitute for a professional. If you are in danger right now, call local emergency services immediately. Crisis resources