Privacy Policy

This Privacy Policy explains how Proactive Buddy collects, uses, stores, shares, and protects personal data when you use the service.

Proactive Buddy is an AI-supported reflection service operated by Proactive Health & Retreat ApS as part of the Proactive Being ecosystem.

This Privacy Policy applies when you:

• use Proactive Buddy through Telegram or another supported interface
• purchase, activate, or manage a subscription
• contact us for support or other inquiries
• otherwise interact with the service

The data controller for personal data processed through Proactive Buddy is:

Proactive Health & Retreat ApS CVR: 41372192 Vornæs Skovvej 14 5700 Svendborg Denmark

Contact: hello@proactivebuddy.com

Proactive Buddy is delivered through BuddyPro / Buddy.fm infrastructure, where BuddyPro / Buddy.fm acts as processor for personal data processed through the service under the applicable licence terms and processor structure.

We may collect and process the following categories of personal data.

4.1 Information you provide directly

• name
• email address
• account and contact information
• messages, prompts, uploads, and other content you submit through Proactive Buddy
• support requests and related communications
• information you voluntarily choose to share while using the service

4.2 Information collected automatically

• Telegram profile information made available to us, such as username, display name, and language settings
• usage data, such as frequency of use, interaction history, and service activity
• account, subscription, and billing status
• technical and device-related information necessary to provide, maintain, secure, and improve the service

4.3 Payment-related information

Payments are processed by Stripe or another payment provider we designate from time to time. We do not store full payment card details ourselves. We may receive limited payment-related data such as:

• billing email
• payment status
• subscription status
• transaction identifiers
• invoice and tax-related details

We use personal data to:

• provide, operate, and maintain Proactive Buddy
• authenticate users and manage access
• process subscriptions, payments, renewals, and cancellations
• maintain continuity of the user’s conversation experience
• provide support and service communications
• monitor, troubleshoot, and improve service quality, reliability, and safety
• detect misuse, abuse, fraud, and security incidents
• comply with legal, tax, accounting, and regulatory obligations
• establish, exercise, or defend legal claims where necessary

Where GDPR applies, we rely on one or more of the following legal bases:

6.1 Performance of a contract

We process personal data where necessary to provide the service you requested, including account management, delivery of the service, subscription administration, billing, and support.

6.2 Legitimate interests

We may process personal data where necessary for our legitimate interests, including:

• operating and improving the service
• maintaining service continuity and quality
• protecting the service against misuse, abuse, and fraud
• maintaining security, logging, and troubleshooting
• developing and improving the business in a proportionate way

6.3 Legal obligation

We may process personal data where necessary to comply with legal obligations, including accounting, tax, consumer law, and regulatory requirements.

6.4 Consent

Where required by law, we rely on consent for specific processing activities. If we rely on consent, you may withdraw it at any time, without affecting the lawfulness of processing before withdrawal.

Proactive Buddy uses AI-supported systems and third-party infrastructure to deliver the service.

This may involve processing your messages, prompts, uploads, and related conversation content through third-party providers strictly for the purpose of providing, operating, securing, supporting, and improving the service.

We do not sell your personal data.

Conversation data is not used to train AI models. BuddyPro has confirmed that its contracts with OpenAI, Anthropic, and Google prohibit such use.

BuddyPro has stated that neither the instance owner nor the BuddyPro team can read conversation content.

We may share personal data with trusted service providers and partners who help us operate Proactive Buddy, including providers for:

• payment processing
• hosting and infrastructure
• messaging and delivery
• AI model and inference services
• analytics, monitoring, logging, and support
• storage and security

These parties process personal data either:

• on our behalf under data processing agreements where required, or
• as independent controllers where their own role requires that under applicable law

We may also disclose personal data:

• where required by law
• to respond to lawful requests from authorities
• to protect rights, safety, and property
• in connection with a merger, acquisition, financing, restructuring, or sale of all or part of our business, subject to applicable safeguards

Primary data is stored in AWS Frankfurt (Germany). Vector database infrastructure is hosted in Pinecone Ireland.

Some service providers may process personal data outside your country of residence, including outside the EU/EEA.

Where relevant, we seek to use appropriate safeguards under applicable law, such as:

• adequacy decisions
• Standard Contractual Clauses
• other lawful transfer mechanisms

You may contact us if you want more information about the safeguards used for relevant transfers.

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy, including to:

• provide the service
• maintain your account and subscription
• verify prior commitments and continuity where relevant to the service
• comply with legal, accounting, tax, and regulatory obligations
• resolve disputes
• enforce our rights and agreements

Retention categories:

• account and subscription data: retained while your account is active and for a reasonable period afterward as needed for support, disputes, compliance, and fraud prevention
• payment and invoicing data: retained for as long as legally required for accounting and tax purposes
• support communications: retained for as long as reasonably necessary to handle support, disputes, and follow-up
• conversation data and uploaded content: retained for as long as needed to provide the service, maintain continuity, and support legitimate service operations, unless deleted earlier, anonymized, or no longer needed

We may delete, aggregate, or anonymize data when it is no longer needed.

If you request deletion of your Proactive Buddy conversation history and AI memory, Proactive Buddy will forward the request to BuddyPro support together with the affected user ID.

BuddyPro will then enable a one-time /clear command for that specific user. Once run, the user’s full conversation history and AI memory are permanently deleted.

To request deletion, contact: hello@proactivebuddy.com

We take reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.

These measures may include:

• encrypted transmission
• access controls
• secure hosting environments
• limited administrative access
• vendor due diligence
• logging and monitoring
• role-based access restrictions where appropriate

No system can be guaranteed perfectly secure. However, we take data protection and service security seriously and aim to apply proportionate safeguards.

If GDPR applies to you, you may have the right to:

• access your personal data
• request correction of inaccurate personal data
• request deletion of personal data
• object to certain processing
• request restriction of processing
• request data portability
• withdraw consent where processing is based on consent
• lodge a complaint with a supervisory authority

To exercise your rights, contact: hello@proactivebuddy.com

If you are in Denmark, you may also complain to Datatilsynet, the Danish Data Protection Agency.

Proactive Buddy is not intended for children and is not directed to individuals under 18.

We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without appropriate legal basis, we will take steps to delete it.

We may update this Privacy Policy from time to time.

The updated version will be posted with a revised “Last updated” date. Where required by law or where changes are material, we may also notify users through appropriate channels.

If you have questions about this Privacy Policy or our data practices, contact:

hello@proactivebuddy.com