Privacy and cookies

Last updated: 11 October 2026.

Who operates GiriChat

Toni Molina, Jersey, Channel Islands. Business licence 006521. JOIC registration 104148. Contacto / Contact.

What we process and why

We process your username, display name, preferred language, hashed PIN, hashed recovery code, the date of your adult declaration and terms acceptance, contact relationships, conversations, original messages, translations and generated voice audio to provide the chat service. We also process session identifiers, IP addresses for abuse prevention and optional push notification subscriptions. Use a nickname and avoid sharing sensitive information.

Account and message processing is necessary to provide the service you request. Security and abuse prevention support our legitimate interests in protecting the service and its users. Microphone and notification permissions are optional and can be withdrawn in your browser.

Translation and hosting

Replit hosts the application and database. Text is sent to OpenAI, through the configured Replit integration or API, for language detection and translation. Voice recordings are sent to ElevenLabs for transcription, and translated text is sent to ElevenLabs to generate synthetic speech. OpenAI speech processing remains available as an explicitly configured alternative. These providers may process data outside Jersey, including the United States. GiriChat messages are not end-to-end encrypted: the server and the processing providers need access to content to translate it. Automated translation and generated speech can contain errors.

Safety and reports

Blocking records the two account identifiers to prevent unwanted contact. If you report someone, we receive the account identifiers and the explanation you choose to submit, for safety review and our legitimate interest in preventing abuse. Reports remain for up to 90 days; deleting an account removes its identifier from reports. The report text may still contain details you supplied. Contact us to request review or appeal a restriction.

Retention and deletion

The application removes messages, translations and generated audio older than 30 days during its periodic cleanup. Accounts and contacts remain until deletion. Sessions last up to 30 days. Settings lets you download your data and delete your account, contacts and sent messages from the active database. Copies already received or saved by others cannot be recalled. Contact us for information about provider retention or backups; deletion from the active database does not certify immediate deletion from provider backups.

Your choices and rights

Under the Data Protection (Jersey) Law 2018, applicable rights include access, correction, erasure, restriction, portability and objection. Contact us to exercise them or raise a concern. We may request proportionate proof of account ownership. You may complain to the Jersey Office of the Information Commissioner.

Cookies and local storage

The session cookie keeps you signed in. Local browser storage retains app preferences and public assets for installation. This version does not include advertising or analytics cookies. Private chat API responses are not stored in the service-worker cache. Browser settings let you remove stored data and permissions.

Young users

GiriChat is exclusively for people aged 18 or older. If we discover an account belonging to a minor, we will review its closure and deletion of their data. Do not share personal information with strangers. Parents and guardians can contact us about a child's information or account.