What we hold, and what you can do about it.

MB Storno, company code 122026689, Ukrainos Didvyrių str. 1-10, Vilnius LT-08113, Lithuania. We are the data controller — we decide what is collected and why.

For anything in this notice, write to virgilijus.bukevicius@gmail.com.

• Your account — your email address, and a password held in scrambled form by our database provider. We never see your password. If you sign in with Google instead, we receive your email address from Google — and only that: we deliberately do not ask Google for your name or your photo.
• What you write — your conversations, the parts you save and every field on them, your letters, your evidence entries, and any photograph you upload. This is the health-related material above.
• Analytics, only if you agree — pages visited and actions taken, such as “a pair was created”. Never the content of anything you wrote, never your email, never anything identifying you.

• To give you an account — because we need to in order to provide what you signed up for (Article 6(1)(b), performance of a contract).
• To store your reflections — because you explicitly agreed to it (Article 9(2)(a)). This is the one that matters most, and you can withdraw it at any time by deleting your account.
• To send your words to the model — both for guided sessions and for the Part filter, which asks it which of your parts fits what is happening now. One consent covers both, asked separately the first time you use either. Decline and the rest of the app still works; you can build your map by hand.
• To measure use — because you agreed in the cookie banner. Refusing changes nothing about how the app works for you.

Withdrawing any consent is as easy as giving it, and does not affect anything done before you withdrew it.

Four companies process data on our behalf, under contracts that bind them to our instructions.

Where data goes to the United States, it is covered by the European Commission’s Standard Contractual Clauses. We do not sell anything to anyone, and nothing you write is used to advertise to you.

One thing to weigh about Google sign-in: choosing it means Google learns that this account uses Parts Map, and when it signs in. Since using this app is itself health-related information, that is a real consideration, not small print — which is why sign-up with an email address remains for anyone who would rather Google didn’t know. For sign-in, Google acts as your identity provider under its own terms, not on our instructions.

When you use a guided session or the Part filter, what you type is sent to Anthropic in the United States so the conversation can respond — and so are the parts you have already saved, because the model has to know what is on your map to talk about it or to point at it. Your letters are not sent.The app keeps and displays those itself, and the model never receives them. Anthropic’s published position, which we rely on and which you should be able to check yourself:

• They do not train their models on what is sent through their API.
• Inputs and outputs are deleted automatically within 30 days.
• The exception worth knowing about: if a conversation is flagged under their usage policy, it can be kept for up to two years, and safety classification scores for up to seven. We are telling you this because in an app about difficult childhoods it is a real possibility, not a footnote.

If you would rather nothing left our own database, decline the guided-session consent and build your map by hand. Nothing else is affected.

What you write stays until you remove it or close your account. Deleting a pair, a letter or an entry removes it for good; there is no archive we quietly keep. Closing your account removes everything, including your photographs.

One thing to know before you start. If nobody signs in to an account for six months, we delete it and everything in it. We do not currently send a warning beforehand. Keeping people’s childhood and mental health on file indefinitely, unread and unvisited, is not something we want to do — but it does mean that if you step away for half a year, your map will not be waiting. If you want to keep it, sign in occasionally, or take a copy from your settings.

You can ask us to:

• show you a copy of everything we hold about you;
• give it to you in a portable file, or send it to another service;
• correct anything wrong;
• delete all of it;
• stop or limit what we do with it, or object to it.

Two of these you can do yourself, right now, from your settings: download everything we hold as a single file, and close your account, which erases all of it immediately. The same page turns guided sessions and analytics off again.

For anything else, email virgilijus.bukevicius@gmail.com and we will answer within one month. There is no charge.

If you think we have handled your data badly, you can complain to Lithuania’s State Data Protection Inspectorate — L. Sapiegos str. 17, LT-10312 Vilnius, +370 5 271 2804. You can also complain to the authority where you live.

Every row in the database is fenced to its owner, so one account cannot read another’s even if our own code asked it to. Photographs live in a private store and are reachable only through links that expire within the hour. Traffic is encrypted, and data rests in the EU.

No system is perfect. If something goes wrong that puts you at risk, we will tell the supervisory authority within 72 hours and tell you directly.

Parts Map is for people aged 16 and over.

One cookie remembers whether you agreed to analytics — that one is necessary and cannot be turned off, because it is how we remember you said no. Google Analytics cookies are set only if you accept, and removed if you change your mind.

If this notice changes in a way that matters, we will say so in the app rather than quietly editing the page. See also our terms.