Privacy Policy
inbetween exists to hold what you say in confidence. Your messages are read by the mediator so it can help you, and by nobody else — not the person you are talking about, not us. We sell nothing, show no ads, and no model is ever trained on your conversations.
What inbetween is
inbetween is a chat app for two or more people who need to work something out. Each person has their own private thread with the same AI mediator. The mediator sees every thread; the people in them see only their own. It runs on the web at inbetweenyou.com, including when installed to a phone’s home screen.
This policy explains what it collects, why, where it is kept, who else handles it, and how to remove it.
Who runs inbetween
International AI Academy LLC (შპს ინთერნეიშენალ ეი აი აკადემი), identification code 405786957, legal address Betlemi Street N10, Tbilisi, Georgia.
Email [email protected] · Phone +995 599 168 727
We are the controller of the personal data described here. For anything in this policy, write to [email protected] and a person answers within 30 days, usually much sooner.
What inbetween holds
- Your account: the email address you sign in with, the name you choose to show other people, your time zone, and the text size you picked.
- What you write: every message in your own threads — typed or dictated — and the mediator’s replies to you. Voice notes are turned into text; the audio is not kept.
- What the mediator remembers: short notes it writes for itself about what matters to you in a topic, a profile of how you are in that relationship, and an “about me” profile that follows you across your workspaces. You can read and delete these yourself.
- What crossed: rounds, agreements, games and the permissions you gave, with the exact words that were passed on and when.
- Your devices: the sessions you are signed in with and, if you allow notifications, each browser’s notification address.
- Running records: for each turn, which model answered, how many tokens it cost and how long it took, so we can keep the app affordable and find faults. Server logs for a short period hold the address your request came from and what it asked for — never the text of a message.
inbetween does not collect your location, contacts, calendar or browsing, uses no advertising identifiers, and has no analytics that follow what you do.
Why it holds it
To give you the service you asked for — that is the legal basis for everything above (performance of a contract), except the running records and server logs, which we keep because we have a legitimate interest in the app working and not being abused. We ask separately before sending notifications, and you can withdraw that at any time in your browser or in the app.
The part that is different: AI
The mediator is a large language model. To answer you, your thread — and the notes it keeps about you — are sent to a model provider. This is the core of how inbetween works, so it is worth being exact about it:
- Requests go through OpenRouter, which routes them to a model provider. We send every request with a filter that admits only providers that do not retain and do not train on what is sent (OpenRouter’s
data_collection: denyand zero-data-retention settings). This is fixed in the code, not a dashboard setting that could be changed by accident. A model with no compliant provider simply fails rather than falling back to one that keeps your words. - Three models do three jobs: one writes the replies, a stronger one reads the conversation in the background every so often and updates the mediator’s notes, and a fast one checks each outgoing reply against the other person’s private notes before it reaches you.
- Voice notes go to OpenAI for transcription, and OpenAI does not train on data sent through its API. The audio is not stored by us; the text lands in your composer for you to check before you send it.
- Nothing you write is used to train any model, by us or by anyone we send it to.
What the other person can see
Nothing, unless you allow it. This is a product promise, but it is also a data one, so here is the whole list of ways your words can reach another person:
- Your switch. Each topic has a setting that is yours alone — Private (nothing crosses; the mediator is not even shown your notes when it talks to them), Ask me (it may pass something on, but shows you the exact sentence first), or Open (it may discuss what you said, and read your messages when their side needs specifics). Nobody can move your switch but you.
- A round: it asks everyone the same question and reveals the answers only once everyone has answered.
- Your permission: you were shown the exact words and said yes.
- An agreement: a draft each person approves privately.
- A game: you chose to play; the result is shared by design.
Every reply the mediator writes is checked against the other people’s private material before it is delivered. The mediator’s “about me” profile of you is never shared with anyone, at any setting.
Who else handles it
| Who | What they receive |
|---|---|
| OpenRouter, and the model providers it routes to | The conversation and notes needed to answer a turn — under a no-retention, no-training filter. |
| OpenAI | The audio of a voice note, to turn it into text. Not used for training. |
| Postmark | Your email address and the six-digit sign-in code, to deliver it. |
| Hetzner Online GmbH | Hosting and encrypted nightly backups, in Nuremberg, Germany. |
| Cloudflare | DNS and the connection to the site. |
| Your browser’s push service (Apple, Google or Mozilla) | If you turn notifications on: the notification address and the short text of each notification, in order to deliver it. |
We do not sell personal data and do not share it for advertising. There is nothing to opt out of.
Where it is kept, and for how long
On servers in Nuremberg, Germany, in a database that is not reachable from the internet, with encrypted backups kept 14 days. Connections use HTTPS. Sign-in codes are short-lived and stored only as one-way hashes.
We keep what you write for as long as you have an account, and not after. Deleting your account deletes your messages, your notes and your profile at once, and they leave the backups within 14 days. Where a topic is shared, the other person’s own thread is theirs and stays with them; what you had already allowed to cross stays in their thread, because it is now part of their conversation — anything that had not crossed is gone.
Deleting your account
Open Me in the app and choose Delete my account. It happens immediately and needs no email to us. You can also write to [email protected] and we will do it for you.
Your rights
You can ask to see the personal data we hold about you, to correct it, to receive a copy in a portable format, to delete it, or to object to or restrict how it is used. Much of this you can do yourself in the app — the mediator’s notes about you are readable and deletable on your Me page. For the rest, write to [email protected]. You can also complain to the Personal Data Protection Service of Georgia, or to the data protection authority where you live.
Children
inbetween is not for children. You must be 16, or older if that is the age of digital consent where you live. If we learn that an account belongs to a child, we delete it.
Security
If you believe you have found a security problem, write to [email protected] with “inbetween security” in the subject. A person answers within two working days, and nobody who reports a problem in good faith will be pursued for it. There is also a security.txt. If we ever learn that someone reached your data without permission, you will be told what happened, what was affected and what was done about it, without undue delay.
Changes
If this policy changes in a way that matters, we will say so in the app before it takes effect. The date at the top is always the date of the current version.
Contact
International AI Academy LLC, Betlemi Street N10, Tbilisi, Georgia.
Email [email protected] · Phone +995 599 168 727