Privacy policy

The short version

Your conversations are private. We don't sell your data. We don't share it with advertisers. You can delete everything at any time. Mental health conversations are the most sensitive kind of personal data there is — we treat them that way.

The full policy is below. If any of it isn't clear, email us at privacy@heydave.co and we'll explain it in plain English.

Last updated: 20 June 2026

Who we are

Heydave is a men's mental wellbeing chat service operated by Marc Keating (“we”, “us”). We are the data controller for the personal data described in this policy. You can reach us at privacy@heydave.co.

What we collect

• —Account details — your email address, and a password (stored only as a secure hash) if you create an account.
• —Conversations — the messages you exchange with Dave, and the mood scores you choose, when you have an account.
• —A short memory summary — a few sentences distilled from past chats so Dave can remember context between sessions.
• —Basic technical data — limited information needed to keep the service running and secure, such as your approximate request origin for rate limiting.

If you use Heydave as a guest, your conversation is held only in your browser for that session and is not stored on our servers.

How we use it

• —To provide the service — to let you sign in, hold a conversation with Dave, and pick up where you left off.
• —To give Dave memory — your summary and recent messages are used to make replies feel continuous and relevant.
• —To keep things safe and working — to detect crisis language and surface support, and to prevent abuse of the service.

Our lawful basis for processing is your consent (which you give when you create an account or continue as a guest) and our legitimate interest in running a secure, functioning service.

Where it's stored and who processes it

Account data and conversations are stored in our database, hosted by Supabase, with access restricted so that only your account can read your own rows. Your messages are sent to Anthropic to generate Dave's replies. Anthropic processes them to return a response and, under their terms, does not use them to train their models. We use a small number of carefully chosen processors and no one else.

What we never do

• —We never sell your data.
• —We never share it with advertisers or data brokers.
• —We never use your conversations to train AI.
• —No one at Heydave reads your chats, except in the rare case we are legally required to, or you ask us to for support.

Your rights

You can access, correct, export, or delete your data at any time. You can delete individual conversations or your entire account from your settings, or by emailing privacy@heydave.co. Deleting your account removes your conversations and memory summary. Under UK GDPR you also have the right to complain to the Information Commissioner's Office (ico.org.uk).

Retention

We keep your data for as long as your account is active. When you delete your account, we delete your associated data. Guest conversations are never persisted.

Who can use Heydave

You must be 18 or over to use Heydave. We collect your date of birth at sign-up to verify this. If the date you enter indicates you are under 18, you will not be able to create an account and your date of birth will not be stored. For signed-in users, date of birth is stored securely and used only for age verification purposes.

Changes

If we update this policy we'll change the date above and, for significant changes, let you know. Questions? Email privacy@heydave.co.