Privacy & terms

What we collect, and why

• Your voice conversation — the audio and a transcript, with AI-generated summaries. This is the service itself: you talk, Verda listens and reflects back. It is processed live to power your session and is not stored afterwards.
• Session details — time, language, the topic you chose, completion or error state, and a coarse device type (like “mobile / iOS”). Used to run the pilot and find where the product flow needs improvement.
• Your result and an internal profile — the summary Verda shows you is kept, together with an internal, non-clinical profile derived from your conversation before the recording is deleted. The profile is not a diagnosis or score, is never shown to you, and both are used only, in de-identified form, to evaluate and improve this pilot.
• Your email, only if you choose to leave it — stored together with a reference to your session so we can write to you about the pilot. Leaving it is always optional.
• A click identifier, only if you arrived from one of our adverts — used to measure whether the advert worked.

Nothing else. No cookies, no trackers, nothing running in your browser. Your session is tied to an anonymous session code — we do not know who you are unless you leave your email.

Authorised members of the Adalyon team may review de-identified session details and results for this pilot's design analysis. Findings recorded in design documents are minimised and de-identified. Your conversation itself is not part of that review — it is deleted as promised above.

Legal basis: your consent, given when you start a conversation or submit your email. Advert measurement rests on our legitimate interest in knowing whether our advertising reaches people. You can withdraw consent, or object to advert measurement, at any time by writing to privacy@adalyon.com.

Who processes it

• Microsoft Ireland Operations Ltd — hosting and storage in EU data centres (Azure, SharePoint).
• Google Ireland Ltd — real-time speech AI that powers the conversation; processing may involve Google data centres inside and outside the EU under standard contractual clauses — and, for UK users, the UK Addendum to those clauses.
• Meta Platforms Ireland Ltd — advert measurement only, as joint controller; see "If you came from an advert".

No one else. We never sell your data, and the only advertising use is the one below.

If you came from an advert

Our servers tell Meta that your click led to a visit and how far you got — there is no Meta pixel or cookie in your browser. We share only the advert's click identifier and the IP address and browser type our server saw — never your email, never anything you told Verda. For this we are joint controllers with Meta: its own terms also apply, and the data may go outside the EU and the UK under approved transfer safeguards. You can object at any time: privacy@adalyon.com.

How long we keep it

Your conversation is not stored — it is discarded once your session ends. Session details, and your email if you leave it, are kept until the pilot's analysis is complete, and at most 12 months after collection — then they are deleted.

Your rights

You can ask to see, correct, or delete your data, withdraw your consent, or object to advert measurement, at any time: privacy@adalyon.com. You can also complain to your local data protection authority — in Finland, the Office of the Data Protection Ombudsman (tietosuoja.fi); in the UK, the Information Commissioner's Office (ico.org.uk).