Privacy

Last changed October 7, 2026

Daniel Nakhla runs GroupChatRobot, a beta on one server. This page says what the server keeps, who else sees it, how long it stays and how to get it removed. It describes what the code does today.

What the server keeps

• Messages, reactions and edits, and the photos, files, voice notes and videos people share. Files sit on the server's disk. When a message or a robot answer links to a web page, a picture, a gif or a short video, the server keeps its own copy of that picture or video, up to 50 MB, to show it in the room; a copy made for a private answer is served to its asker only.
• The name you type to join a room, your answers to its join questions, and what you tell the robot about yourself. A CV, picture or link you add there is read once and never written to disk. The robot keeps a short summary with email addresses, phone numbers, street addresses, pay, birth dates and ID numbers taken out.
• The robot's answers, its notes on each file, and an index of the room's messages so it can find things later. The robot's engine keeps its own copy of the room for the same reason.
• A random device ID your browser makes on its first visit. Joining a room needs no account, so this ID and the room keys your browser stores are how the server knows you in a room. Clearing this site's data in your browser loses them.
• If you sign in with Google, which starting a room and sharing photos, files and voice notes need: your Google account's ID, email address, name and picture address, and a random sign-in key in a cookie that lasts 90 days or until you sign out. The server asks Google for nothing else and never sees your password. Your email is shown only to you, in Room settings, and the robot does not see it. Rooms you start and the rooms you are in on that device are marked as yours.
• If you turn on notifications, your browser's push address and the keys to encrypt to it. The server encrypts each notification for your browser, so the push service of your browser's maker carries it without reading it.
• A cost record for each robot call, with the room, the model, the tokens, the time and the price. It holds no words.

GroupChatRobot never asks for a phone number or a password. It learns your email address only if you sign in with Google.

Usage records

The server records what people do in the app, never what they write. Each record is an event, such as a message sent or a room created, with the few counts, kinds or timings that event may carry. The code refuses any other field and any value with a space in it, so a sentence or a name cannot slip in. Devices and members are counted by a keyed hash, which tells two devices apart without holding either ID.

If you first arrive from a link with ad or campaign tags, your browser saves its source, medium, campaign and referral codes, as short lowercase codes. They stay on your device and go with three records: opening a room link, creating a room and joining one. The full address you came from is never kept.

Raw records stay 180 days. Each finished day is first added up into daily totals that name no room and no device, and those totals stay.

Who else sees what you write

The people in the room. Everyone in a room sees all of its messages and files, including those from before they joined. A private room stays off the public list and opens only with its code or link, but anyone who has the code can join. A public room is listed under Public rooms, and anyone can join it with a name and read everything in it. Treat a public room like a public web page.

AI models. The robot runs on models from other companies, and each one handles what it receives under its own terms.

• When someone asks the robot something, the question, the room's recent messages and what it needs from the room's files go to OpenAI GPT-6 Luna, with Google Gemini Flash-Lite as the backup, both through OpenRouter. If both fail, the robot uses Google Gemini directly, then a model on our own server.
• Short jobs go to Google Gemini or to a model on OpenRouter. These are setting up a room, deciding whether to join in where a room allows it, checking a message's tone before it is sent, writing introductions and reading what you tell the robot about yourself.
• Photos, PDFs and frames from videos are read by Google Gemini or Anthropic Claude through Google's Antigravity service, else by Google Gemini directly or a model on OpenRouter. Word, Excel and text files are read on our own server. Voice notes and the sound of videos are transcribed on our own server.
• A request for a picture goes to fal.ai. A picture of a named real person goes to Google Gemini through OpenRouter, and editing a photo sends that photo to Google Gemini.
• The index of the room's messages is built on our own server, and by Google Gemini when that server is busy.

Search engines and websites. When the robot searches the web, the search words go to Brave Search, to a search service on our own server that passes them to public search engines, or to Google. Picture and GIF searches go to DuckDuckGo. When the robot opens a link, or a link in a message or a robot answer gets a preview, our server fetches the page and any picture or video it shows, so that website sees a request from our server and never one from your phone or browser. The preview and the copy are served to the room from our server. A linked video, song, post or map shows a card or a still and a play button from our server; the player itself loads only when you tap play, and from then on your browser talks to that company under its own terms: YouTube, Vimeo, Spotify, Apple Music, SoundCloud, TikTok, Instagram, Google Maps, Twitch, Loom or Figma. What each link gave is kept for 24 hours so the same link is not fetched again, and a copied picture or video is removed within about a day of the last message that used it going.

On the way in. Traffic passes through Cloudflare and then a proxy on our own server. The proxy keeps an access log of IP addresses and the pages they asked for, for about five weeks.

Not end-to-end encrypted

Connections use HTTPS, but the server stores messages and files in a form it can read. That is how the robot reads them, and the operator can read them too. Do not use GroupChatRobot for anything that needs end-to-end encryption.

How long it stays

A room and everything in it stays until its owner clears or deletes it.

Deleting a message removes its words, its file and the robot's notes on it, for everyone. You can delete your own messages, and an owner can delete any. Leaving a room leaves your messages behind, so delete them first if you want them gone. You can remove what you told the robot about yourself at any time, though anything the robot already said stays in the chat.

A private answer from the robot, and any photo, gif or video it posts in it, is stored on the server for you alone: only your own device can open those files, and they stay out of the room's file list and the robot's memory. Dismissing the answer deletes them. Sharing the answer to the room posts its text and its files in the room like any message.

Clear the chat is for owners. It removes every message, photo, voice note and file, the documents the robot made with every version, the reactions, link previews and the pictures and videos copied for them, pins and announcements, private answers and introduction notes, Decide together and Find common ground, the room's raw usage records and the robot's memory of the room, including its engine's copy. The server overwrites the deleted rows on disk. The room itself stays, with its members and owners, their join answers, its name, type, brief and settings, what the robot was told and what people told the robot about themselves.

Backups. Before each update to the service, the server saves a copy of its database to a folder on the same machine that only its administrator can read. Each copy is deleted after 7 days. Something cleared or deleted can stay in a backup for up to 7 days, and is gone after that.

Getting something removed

Use Report in the room to flag a message to the operator, or ask the room's owner, who can delete any message, clear the chat or delete the room.

Children

GroupChatRobot is not for children under 13.

Changes

This page changes when the code does, and the date at the top says when it last did. The rules for using GroupChatRobot are in the terms.