Legal

Privacy Policy

Last updated October 23, 2026

Information you provide

CharmCue processes profile photos, profile text, prompts, and conversation context only when you choose to provide them. Adding a photo creates a temporary local preview. Choosing Analyze sends compressed copies of the lineup for analysis.

How information is used

Information is used to provide requested profile analysis, writing suggestions, saved versions, support, security, and product operation. CharmCue does not make your profile public or place it in a human rating feed.

AI processing and private diagnostics

Requested analysis is sent from CharmCue to the Qomza gateway and its configured AI provider. Qomza's restricted diagnostic systems currently retain request and response content, including submitted image copies, without an automatic expiration period. These records are used for service operation, troubleshooting, and quality review. They are not published or placed in a public rating feed.

Operational monitoring

CharmCue uses Sentry to monitor application errors and service operation. It receives sanitized error diagnostics, a sample of performance traces, and technical operation records such as the requested feature, result status, duration, and service correlation IDs, including an anonymous browser installation ID used to relate requests from the same browser. CharmCue filters profile text, photos, free-form error messages, request bodies, query strings, and credentials from these diagnostics. Sentry Session Replay is disabled.

Analytics and session replay

On charmcue.com and www.charmcue.com in production, CharmCue uses PostHog for page views, selected product outcomes, calls to action, and optional session replay. Analytics and replay are enabled by default unless Global Privacy Control is active or you turn them off. A brief notice appears for up to 30 seconds; letting it close does not save a choice. Use Adjust or Privacy settings in the footer to choose Analytics and Session replay separately, reject both, or save your preferences. Replay depends on Analytics. Choices remain saved in this browser until you change them; Global Privacy Control overrides a saved choice while it is active.

PostHog receives approved event names, limited product properties, normalized page paths, public link and form-control interactions, heatmap coordinates, and web-vitals metrics. Interaction capture excludes control values and secret-like attributes. Analysis events can include this browser's anonymous installation ID, the attempt's operation and request IDs, and the gateway request ID returned for that attempt; submitted photos, profile text, and conversation context are not included in those event properties. Qomza can use these identifiers to match analytics events, and any related session recording, to the lookup records kept by its gateway. Replay can include ordinary page text and interactions. Input values are masked; selected photos and other inline data or blob images, canvas, console output, network headers, network timing, and request or response bodies are excluded. URLs are filtered to remove credentials and secret-like query or fragment parameters. PostHog processes this data in its EU service. You can turn off either option at any time from Privacy settings; this stops future collection in this browser but does not delete data already received.

Security and abuse prevention

CharmCue uses Cloudflare Turnstile when you request AI analysis or conversation help. Cloudflare processes browser, device, and network signals to distinguish people from automated abuse. CharmCue validates the resulting one time token before sending anything to Qomza and does not store the token in its diagnostic logs.

Your choices

You decide whether to request an analysis and whether to use any result. Conversation drafts remain under your control and are never sent automatically. Automated deletion of private diagnostic copies is not available during the current beta.

Local browser data

Profile Studio keeps your current draft, selected lineup, and writing in this browser so you can return after a refresh. Conversation Coach keeps saved sessions, context, results, and your edited drafts in this browser. These records remain until you delete them using the product controls or clear this browser's site data. They are not uploaded merely by being saved locally.

If you choose Read screenshots, the selected images are sent for text extraction. CharmCue displays the extracted transcript for you to review and correct, then discards the local screenshot images; screenshots are not saved as a Coach session. The transcript is sent to Qomza for coaching only after you choose the separate action to submit your request. Refreshing or closing the page does not delete any image or conversation copy already sent to Qomza and retained in private diagnostics.

Contact

Questions about privacy can be sent to privacy@charmcue.com.