Privacy policy

• On talktogigi.ai we collect only what you type into the waiting list form. There are no cookies, no analytics, no advertising and no tracking pixels.
• We never sell your data, and we never use it for advertising.
• If you tell us anything about your health, we treat it as sensitive data and use it only with your explicit consent, for the reason you gave it.
• Gigi is an AI. To reply to you, your messages are processed by an AI model provider, which does not use them to train its models.
• Our hosting, database, email and AI providers are in the United States. Every transfer there is covered by safeguards the EU recognises.
• You can ask for a copy of your data, a correction or its deletion at any time, without giving a reason.

Gigi is responsible for your personal data, which makes us the "controller" under the EU General Data Protection Regulation (GDPR).

Gigi, KvK 99554097, Amsterdam, the Netherlands. Registered with the Netherlands Chamber of Commerce (KvK) under number 99554097. Email: hello@mygutgoddess.com.

Given our size and what we do, we are not required to appoint a data protection officer. Privacy questions go to the address above, and a person answers them.

Like any website, ours needs some technical information to work: your IP address, your browser and device type, the page you asked for and when. Our hosting provider processes this to deliver the page and to protect the site from abuse, and keeps it in short-lived server logs. We don't use it to identify you or to build a profile of you.

Legal basis: our legitimate interest in running a working, secure website (GDPR Article 6(1)(f)).

No cookies. talktogigi.ai sets no cookies and uses nothing that works like them, such as tracking pixels, fingerprinting or analytics. That is why you don't see a cookie banner. Our fonts and images are served from our own site, so opening a page doesn't send your details to Google or anyone else.

What we collect: your name, your email address, your answer to the optional question "What's going on with your gut?", that you ticked the box to hear from us, and the date you joined.

Why, and on what basis:

• To write to you when there's a place for you, and with Gigi news and releases, as you asked when you ticked "Keep me up to date on Gigi news and releases". Legal basis: your consent (Article 6(1)(a)).
• If you answer the optional question: to understand what people on the list are going through, so we know who Gigi can help first and what to build next. What you write there may be health information, which the law treats as a special category of data. We keep it only with your explicit consent (Article 9(2)(a)), which you give by choosing to write it after reading the note beneath the question. If you'd rather not share it, leave it empty. You'll be on the list all the same.

The form gives the same answer whether or not an email address is already on the list, so nobody can use it to find out who has signed up.

Changing your mind: reply to any email from us, or write to hello@mygutgoddess.com, and we'll take you off the list, together with anything you wrote in the optional question. Withdrawing your consent doesn't make what we did before unlawful, but it stops anything further.

How long we keep it: while the waiting list exists and you're on it. If you ask us to remove you, we delete your entry within one month. When we close the waiting list, we delete the entries of everyone who hasn't gone on to use Gigi.

We send emails from hello@mygutgoddess.com through an email delivery provider. It processes your email address and the message in order to deliver it, and it may record whether an email was delivered, opened or clicked. We use that only to check that our emails arrive and work, never to build a profile of you. You can stop our emails at any time, as described above.

Gigi is in a private pilot. When you join it, the app shows you the pilot's terms and asks for your consent, one item at a time, before your first message. This section describes the same processing, so that everything is in one place.

What we collect:

• Your account: name, email address, and a password, which we store only as a secure hash.
• What you write to Gigi, and any photo or document you choose to share in the chat.
• What Gigi remembers and works out from it, such as patterns in your food, symptoms, cycle, mood, energy and sleep.
• The companion you chose, your ratings and comments on her replies, your consent choices, and your answer if you reply to a check-in email from us.

Why, and on what basis:

• To hold the conversation, and for Gigi to remember you from one conversation to the next. Legal basis: our agreement with you (Article 6(1)(b)) and, for anything about your health, your explicit consent (Article 9(2)(a)).
• To keep you safe. Before Gigi replies, your message is checked against fixed safety rules, so that signs of something urgent point you towards proper care.
• To check that Gigi's answers are safe, accurate and useful. A small, named team of clinicians and the founder can read pilot conversations. They see them under a participant code rather than your name or email, and they are bound to confidentiality. Linking a code back to a person is limited to specific situations, such as a safety concern or your own request, and is logged every time.
• To improve Gigi. When our team marks a reply as a good example, that exchange can be used to improve future answers, with names removed first. We also look at overall patterns, such as which topics come up most, to decide what to build. Legal basis: your explicit consent to the pilot (Article 9(2)(a)).

Gigi is an AI. Her replies are written by an AI system, not a person, and she will never claim otherwise. To write them, your message and the relevant parts of what Gigi remembers about you are sent to an AI model provider. Under our agreement with it, it does not use them to train its models, and it deletes them within 30 days, keeping them only to detect misuse. Gigi doesn't make decisions about you that have legal or similarly significant effects. Nothing she says decides anything for you.

How long we keep it: while you use Gigi, and for the pilot and the improvement work that follows it. You can leave the pilot at any time, from the settings or by email. If you ask us to delete your data, we do it within one month. For now that is done by hand rather than automatically, and we'll confirm when it's done.

We use a few specialist providers. Each one acts only on our instructions, under a data processing agreement, and only for the purpose listed.

We don't list every provider by name here, but if you'd like to know who they are, ask us and we'll tell you.

Beyond these, we only share personal data if the law requires it, or to protect someone in an emergency. We don't sell or rent personal data, and we don't use it for advertising.

The providers above store and process data in the United States. When personal data leaves the European Economic Area, the GDPR requires a safeguard. Ours are the EU-US Data Privacy Framework, for providers certified under it, and the European Commission's standard contractual clauses for the rest. You can ask us for a copy of the safeguard that applies.

• Every connection is encrypted, including the ones between our servers and the database.
• Passwords are stored only as a secure hash, never as the password itself.
• Access is limited by role. The review team sees participant codes, not names, and linking a code back to a person is restricted and logged.

No system is perfectly secure. If a breach puts your data at risk, we'll report it to the Autoriteit Persoonsgegevens within 72 hours and tell you without undue delay, as the law requires.

Under the GDPR you can ask us to:

• give you a copy of the personal data we hold about you;
• correct anything that is wrong or incomplete;
• delete your data;
• limit how we use it while a question about it is sorted out;
• give you your data in a format you can take elsewhere;
• stop using it where we rely on our legitimate interests.

Where we rely on your consent, you can withdraw it at any time. To do any of this, write to hello@mygutgoddess.com. It's free, and we answer within one month. For a complicated request we may need up to two months more, and if so we'll tell you why. We may ask you to confirm who you are, using only details we already have.

If you're unhappy with how we've handled your data, please tell us first so we can put it right. You also have the right to complain to the Autoriteit Persoonsgegevens, the Dutch data protection authority, or to the authority in the EU country where you live or work.

Gigi is for adults. You need to be 18 or over to join the waiting list or use Gigi. If we learn that we've collected data from someone under 18, we delete it.

When we change this policy, we update the date at the top. If a change matters, such as a new purpose or a new kind of provider, and you're on the waiting list or using Gigi, we'll email you before it takes effect.

Anything about your data, or about this policy: hello@mygutgoddess.com. Our terms of use are here.