Privacy policy

Last updated: 27 September 2026

undrstand is operated by Louwr. This privacy policy describes how undrstand ("we", "our" or "us") collects, uses and protects your personal information when you use our website, our API, our MCP server, and any app that connects to your account.

undrstand exists to hold private things: what happened to you, how you felt and what you did. We treat it that way. Nothing you write is used to train models, sold, or shown to anyone you did not authorise.

1. Information we collect

We collect what you give us and what the service needs to run.

  • Account information: your email address and, if you choose to give them, your name and a display language and timezone.
  • Captures: the text you hand in about your life, in its original language, and its English translation.
  • Derived analysis: the situations, feelings, triggers, behaviours, patterns, correlations, flows and descriptions we derive from your captures. This is personal data too and is treated the same way.
  • Apps you connect: which apps you have authorised, which scopes you granted them, and when.
  • Technical data: server logs with IP addresses, request times and error details, kept only as long as needed to run and secure the service.

2. How we use it

We use your data for these purposes only:

  • The service itself: to store your captures, analyse them and hand the result back to you and to the apps you authorise.
  • Your account: to sign you in, send magic links and security notices, and let you manage connected apps.
  • Security: to protect the service and its users against abuse.
  • Legal obligations: to comply with the law.

Under the GDPR our legal bases are performance of our agreement with you, our legitimate interest in running a secure service, your consent where we ask for it, and legal obligations.

3. Processing by AI models

The analysis is done by language models from OpenAI, accessed through OpenAI's API. Your capture text, and small pieces of the derived analysis, are sent to OpenAI to be translated, split into situations, and read for feelings, triggers and behaviours. OpenAI's API terms state that data sent through the API is not used to train their models.

We never send your name or email address along with a capture. We do not use any other AI provider for your data.

4. Where your data lives

Your account and everything derived from it is stored on servers in the European Union, hosted by Hetzner in Germany. Backups stay in the EU. The only transfer outside the EU is the processing described in section 3, which happens under OpenAI's data processing terms and standard contractual clauses.

5. Apps and the MCP server

undrstand has no interface of its own. You reach it through Claude or ChatGPT over the MCP server, or through an app built on the API.

An app only sees what you grant it. Every app asks for specific scopes, you see them on a consent screen, and you can revoke an app at any time. What an app does with your data after you grant it access is governed by that app's own policy; we publish which scopes each app holds so you can judge it.

When you connect Claude or ChatGPT, the conversation you have there is handled by Anthropic or OpenAI under their own terms. undrstand only sees the tool calls those assistants make on your behalf.

6. Sharing

We do not sell, trade or rent your personal information. We share it only:

  • With processors: Hetzner for hosting, OpenAI for the analysis in section 3, and our transactional email provider for magic links and notices.
  • With apps you authorise: within the scopes you granted.
  • When the law requires it: or to protect our rights and the safety of our users.

7. Retention and deletion

Your data is kept while your account exists. When you delete your account, or delete a capture, the data and everything derived from it is deleted, and copies in backups are removed as those backups are replaced in the normal course of operations, within thirty days. We keep only what the law requires us to keep, such as invoice records for seven years under Dutch tax law if you ever pay us.

8. Your rights

You can, at any time:

  • Read everything we hold about you through the API, or ask us for an export
  • Correct your account information
  • Delete a capture, an app connection, or your whole account
  • Object to or restrict processing, and withdraw consent where processing rests on it
  • Lodge a complaint with a supervisory authority, in the Netherlands the Autoriteit Persoonsgegevens

We answer requests within thirty days.

9. Cookies

The website uses one cookie to remember your language. The connect flow for MCP clients uses a session cookie to keep you signed in while you authorise. We use no advertising or tracking cookies.

10. Not a clinical service

undrstand is a self-awareness tool, not medical care, therapy or diagnosis. Nothing it produces is a diagnosis, and it does not replace a professional. If you are in crisis, please contact local emergency services or a crisis line.

11. Children

The service is not intended for people under 16, and we do not knowingly collect their data. If you believe we have, contact us and we will delete it.

12. Changes

When this policy changes we update the date at the top and, for material changes, notify you by email or through the service.

13. Contact

Data controller: Louwr, the Netherlands. Contact person: Tristan de Wit. Write to the email address on the website, and we will respond within thirty days.