← Back to Home

Privacy Policy – EmpowerMe

Effective date: July 19, 2026 | Version: 2.0

Summary: EmpowerMe is an educational and supportive well-being app. It is not a medical device and does not provide diagnosis or treatment. We do not sell personal data, show advertising, or use user data for advertising. Chat content is sent to OpenAI to generate replies, and Firebase services are used for authentication, storage, analytics, and crash reporting.

1. Who We Are

EmpowerMe was developed for the Erasmus+ TSST (Tackling Self-Stigma) project. Development was coordinated by NGO GASZO in Palowice, Poland, and the application was developed by Bright Youth Community Association (Parlak Gençlik Topluluğu).

For privacy questions or requests, contact kodkirksekiz@gmail.com.

EU funding disclaimer: Funded by the European Union. Views and opinions expressed are those of the author(s) only and do not necessarily reflect those of the European Union or the European Education and Culture Executive Agency (EACEA). Neither the European Union nor EACEA can be held responsible for them.

2. Data We Collect

Account and contact data

Health and well-being data

These features are educational self-reflection tools. They do not create a medical diagnosis or treatment plan.

User content

Do not submit information that you do not want processed. In particular, avoid entering names, addresses, or other identifying details about other people.

Usage, identifiers, and diagnostics

Data stored only on your device

Some preferences, such as theme choice, completed weekly practices, and ACT Toolbox completion indicators, are stored locally on the device. They are generally removed when the app is uninstalled or its local storage is cleared.

Data we do not request

EmpowerMe does not request access to precise location, contacts, camera, photo library, microphone, fitness sensors, payment information, or browsing history.

3. How We Use Data

We do not sell personal data, use it for third-party advertising, or share it with data brokers.

4. Third-Party Services and Data Sharing

OpenAI

Chat messages and relevant context may be sent to the OpenAI API to generate a response. Context may include recent chat history, the latest WHO-5 context, and an optional Support Profile. OpenAI acts as a service provider for this purpose. API data handling and temporary retention are governed by OpenAI’s applicable business/API terms and policies. OpenAI states that API data is not used to train its models by default.

Learn more: OpenAI Privacy Policy .

Google Firebase

We use Firebase Authentication, Cloud Firestore, Firebase Analytics, and Firebase Crashlytics for account management, cloud storage, app analytics, and diagnostics. Google may process identifiers, usage information, and technical data as our service provider.

Learn more: Firebase Privacy and Security .

Apple and Google sign-in

If you choose Apple or Google sign-in, the relevant provider processes the sign-in request under its own privacy policy.

5. Legal Bases for Processing

Where the GDPR or similar laws apply, processing is based on:

6. Data Retention

7. Account and Data Deletion

Delete your account inside EmpowerMe

  1. Open EmpowerMe and sign in to the account you want to delete.
  2. Open the navigation menu and select Settings.
  3. Select Delete Account.
  4. Confirm the deletion request.
  5. If requested, sign in again and repeat the deletion to confirm your identity.

This deletes the Firebase Authentication account and associated EmpowerMe cloud data, including chat threads and messages, WHO-5 results, Self-Stigma Reflection results, and the Support Profile. This action cannot be undone.

Request deletion without using the app

Email kodkirksekiz@gmail.com with the subject “EmpowerMe Account Deletion”. Send the request from the email address associated with your account and include only the information needed to identify it. Never send your password.

We may ask you to verify ownership of the account. Verified requests will normally be completed within 30 days. Data held temporarily in service provider security or backup systems may remain for a limited period under the provider’s retention policy before final deletion.

Delete selected data without deleting your account

You can also delete selected information inside the app:

8. Security

Data is encrypted in transit using HTTPS/TLS. Firebase provides encryption at rest for stored cloud data. We use authentication and access controls designed to restrict account data to the relevant user. No system is completely secure, so we cannot guarantee absolute security.

9. International Data Transfers

Google, OpenAI, Apple, and their service providers may process data outside your country, including outside the European Economic Area. Where required, transfers rely on recognized safeguards such as adequacy decisions, standard contractual clauses, or the EU–US Data Privacy Framework.

10. Your Privacy Rights

Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing; receive a portable copy; and withdraw consent where consent is the legal basis. You may also complain to your local data protection authority.

To exercise a right, contact kodkirksekiz@gmail.com. We may need to verify your identity before completing the request.

11. Children’s Privacy

EmpowerMe is intended for young people but is not directed to children under 13. We do not knowingly collect personal data from children below the minimum age permitted by applicable law without required parental or guardian authorization. If you believe a child has provided personal data improperly, contact us so that we can investigate and delete it.

12. Automated Processing and Medical Disclaimer

AI is used to generate supportive conversational responses. EmpowerMe does not make legal or similarly significant automated decisions about users. It is not a medical device and does not diagnose, treat, or replace professional care or emergency services.

13. Changes to This Policy

We may update this policy when app features, service providers, or legal requirements change. The effective date and version at the top identify the latest revision.

14. Contact

Privacy and account deletion requests: kodkirksekiz@gmail.com