Privacy Policy

Last updated: June 28, 2026

1. Overview

MyMerlin (“MyMerlin,” “we,” “us,” or “our”) is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, who we share it with, and your choices. By using the Service you agree to the practices described here.

2. Information We Collect

Account information. When you register, we collect your email address and any profile information you provide (such as your name or display name).

Chat and coaching content. We collect the messages you send during coaching sessions and the AI-generated responses you receive. This content is used to deliver the coaching experience and to maintain your ongoing coaching profile.

Derived profile data. As you use the Service, we build a coaching profile that includes memories and insights derived from your conversations. This helps the AI avatar provide personalized, contextually-aware coaching over time.

Usage and technical data. We collect standard usage metrics such as session timestamps, feature interactions, and error logs. We also collect technical data your browser or device sends automatically (IP address, browser type, operating system).

Billing data. Payments are processed by Stripe, Inc. We do not store your card number or full payment credentials. Stripe provides us with limited billing metadata (subscription status, last-four digits, expiration date) to manage your account.

3. How We Use Your Information

  • To provide, operate, and improve the Service.
  • To power the AI coaching avatar — your chat history and derived profile inform the AI's responses.
  • To process payments and manage your subscription through Stripe.
  • To send you transactional communications (account confirmations, billing receipts, service notices).
  • To monitor and ensure the security and integrity of the Service.
  • To comply with legal obligations.

We do not sell your personal data to third parties. We do not use your coaching chat content to train AI models that are shared with other users or made available externally.

4. Third-Party Service Providers

We share your data with third-party vendors only to the extent necessary to operate the Service:

  • Stripe — payment processing and subscription management.
  • Cloud infrastructure providers — hosting, database, and compute services that store and process your data on our behalf.
  • AI model providers — the large-language model services that generate coaching responses. Your chat messages are transmitted to these providers solely to generate responses; we contractually restrict their use of that data for model training on your behalf where such terms are available.

All service providers are contractually bound to handle your data in accordance with applicable law and to use it only for the purposes we specify.

5. Data Security

We implement industry-standard technical and organizational measures to protect your data:

  • Data is encrypted at rest using AES-256.
  • Data is encrypted in transit using TLS.
  • Each user's coaching data is logically isolated from other users' data.

No security measure is perfect. While we take reasonable precautions, we cannot guarantee absolute security. If you become aware of any security issue, please notify us immediately at support@mymerlin.ai.

6. Data Retention and Deletion

We retain your account and coaching data for as long as your account is active and for a reasonable period afterward to comply with legal obligations and resolve disputes.

If you close your account or request deletion of your data, we will delete or anonymize your personal information within a reasonable time, except where retention is required by law (for example, financial records). To request deletion, contact us at support@mymerlin.ai.

7. Cookies and Analytics

We use cookies and similar technologies to operate the Service (for example, to maintain your login session). We may use basic analytics to understand aggregate usage patterns (e.g., page views, feature usage). We do not currently use third-party advertising cookies or behavioral tracking networks.

You can configure your browser to reject cookies, but this may affect your ability to use certain features of the Service.

8. Your Rights and Choices

Depending on your jurisdiction, you may have rights regarding your personal data, including:

  • Access to the personal data we hold about you.
  • Correction of inaccurate information.
  • Deletion of your account and associated data.
  • Objection to or restriction of certain processing.

To exercise any of these rights, contact us at support@mymerlin.ai. We will respond within a reasonable time. Note that some requests may be limited by our legal obligations or legitimate business interests.

9. Children

The Service is not directed to children under 18 years of age. We do not knowingly collect personal information from anyone under 18. If we learn that we have inadvertently collected such information, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you by email or an in-product notice. Continued use of the Service after changes are posted constitutes your acceptance of the revised Policy.

11. Contact

Questions or concerns about this Privacy Policy? Contact us at support@mymerlin.ai.