Last updated: 6 November 2026
This is an English translation for your convenience. If it ever differs
from the Spanish version, the Spanish version prevails.
Read it in Spanish
The controller of your data is Álvaro Sánchez Gómez, an individual (natural person) domiciled in Spain, creator and owner of AllChat.
For anything related to your data, write to hola@allchat.es. You'll get an answer from us, not from a form.
This is AllChat's central promise and it's written into the code, not just here:
| What | Where to | What for |
|---|---|---|
| Your email address | Our server (api.allchat.es) and Resend, which is the one that sends the message | Creating your account and sending you the link to verify it |
| If you subscribe to Premium: your email, your country and your card details | Stripe's payment page. The card stays with Stripe: all that comes back to our server is the email you paid with, the plan and how long it lasts | Charging the subscription and turning on Premium in your account |
| If you connect your Discord (it's optional): your Discord user ID and your username | From Discord to our server, when you press "Authorize" on the Discord page. We only ask to know who you are: not your Discord email, not your messages, not your servers | Giving you the Member or Premium role on the AllChat Discord server without you having to ask, and keeping it up to date when your Premium changes |
| The name you gave your PC | Our server | Telling your devices apart within your account, so your laptop and your desktop can coexist |
| Your IP address | Our server | Preventing someone from requesting thousands of links in a row. It's deleted after one hour |
| How many sentences AllChat has corrected and translated for you | Our server, in batches every few minutes | Calculating your level and your experience. Numbers travel, never sentences |
| The text you translate | Our server, and from there Google Cloud Translation | Translating it. Without this there's no translation. The server doesn't store the text: it only counts how many translations you make per day, which is how the free plan's cap is enforced |
| The text you correct, only if you turn on correction over the internet (it comes turned off) | LanguageTool's public API | Being able to correct you when the engine on your PC doesn't start. If you don't turn it on, nothing leaves |
About correction and the local engine. AllChat installs a correction engine on your computer that works without internet, and it's the one that's always used. If that engine can't start on your device, AllChat doesn't correct and tells you so: your text stays on your computer. In Settings, under Modes, there's a switch to allow correction over the internet in that case; it comes turned off and only you turn it on. If you turn it on, the text you correct will travel to LanguageTool's public API for as long as the engine on your PC still fails to start.
What we never do with your text: store it on our server, use it to train anything, sell it or hand it over to anyone for advertising. Our server never stores a sentence of yours: the one you ask to translate passes through it on its way to Google and isn't kept.
| Data | How long |
|---|---|
| Your email, your sign-up date, your level, your experience, your streak, how many days you've written, whether you've already seen the invitation to the community, the gift translations you have left, and whether you have premium and until when | As long as you have an account. If you ask us to delete it, it's deleted |
| Which version of AllChat you use (your app tells our server each time it talks to it) and the first and last day we saw it with each version. It's used to know how many people have updated | As long as you have an account. If you ask us to delete it, it's deleted |
| A fingerprint (hash) of your session and the name of your device | As long as the session remains active. We keep the fingerprint, not the session: with what's in the database, no one can get into your account |
| From visits to this website, only daily totals: how many visits, to which version (the Spanish or the English one), from which country (Cloudflare tells us), which page they come from or the tag the link carried (utm_source and utm_campaign), how many clicks there are on Download and on Discord, with their country, and how many on the shortcuts allchat.es/tt and allchat.es/yt. No cookies, no IP address and nothing that says who you are: we don't know whether two visits come from the same person | They're kept: they're totals that say nothing about anyone |
| Sign-in attempts, with your IP | Deleted after one hour |
| Experience batches | Deleted after 7 days |
| If you've paid for Premium: the email you paid with, the plan, until when, whether it renews, the identifiers Stripe gives your subscription and your customer record (they're not your card and can't be used to charge you), the redemption key and, if you canceled, the reason you chose when you did | As long as the subscription exists, to recognize your Premium and handle refunds. If you ask us to delete your account, it's deleted too; Stripe keeps the invoice for as long as the law requires it to |
| The notifications Stripe sends our server about your subscription (sign-up, renewal, cancellation), with their identifier | Deleted after 30 days. They're only used to avoid applying the same notification twice |
| If you connect your Discord: your Discord user ID, your username and since when. The permission Discord gives us is used only once, to know who you are, and isn't stored | Until you disconnect it from Settings, under Premium (it's deleted immediately), or until your account is deleted |
| If your Discord received the gift translations: a fingerprint (hash) of its ID, not the ID itself, with nothing else next to it. It's only used to know that that Discord has already received the gift | It's kept even if you disconnect your Discord, so that the gift is given only once per Discord |
We don't store passwords because AllChat doesn't use passwords: you sign in with a link we send to your email.
Only with what's essential for the app to work. None of these services receives data for advertising:
We process your data because it's necessary to provide the service you've asked us for (Article 6(1)(b) of the GDPR): without your email there's no account, and without an account there's no progress to save or premium to recognize. Your Premium subscription data is also necessary for the contract (6(1)(b)): without it we wouldn't know whom to turn Premium on for or whom to refund a charge to. We process the IP address of sign-in attempts on the basis of our legitimate interest in protecting the service from abuse (Article 6(1)(f)).
You can exercise your rights of access, rectification, erasure, restriction, portability and objection at any time. Write to hola@allchat.es from your account's email and we'll sort it out.
Deleting your account deletes your email, your progress and your sessions from our server. What AllChat learned from you doesn't need to be deleted by us: we never had it, it's on your PC and you erase it yourself from Settings.
If you think we haven't done things right, you can file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD), which is Spain's data protection authority.
AllChat is not aimed at minors under the age of 14, and we don't knowingly collect data from people of that age.
If we change something important, we'll change the date above and tell you about it in the app's What's new. AllChat is in beta and growing fast: when a new feature touches data, this page is updated before the feature reaches your computer.