Julija AI is a service for self-reflection and personal development. This Privacy Policy explains what data we collect, why we collect it, how we protect it, and what your rights are.
We understand that the topics you may discuss with Julija AI — relationships, anxiety, self-worth, family — fall into the category of sensitive personal data. That is precisely why privacy is not a formality for us, but the foundation on which this product is built.
The Julija AI platform is operated by Wohl pr, Belgrade, Serbia (PIB: 114425830) — the data controller within the meaning of the Serbian Law on Personal Data Protection (Zakon o zaštiti podataka o ličnosti, "Sl. glasnik RS" no. 87/2018 — "ZZPL") and, where applicable to users in the EU/EEA, the General Data Protection Regulation (GDPR).
For all questions, requests, or complaints regarding your personal data: kontakt@julijaai.com — We respond within 30 days.
2.1 Data you provide directly
2.2 Data generated automatically
2.3 What we do NOT collect
2.4 Reminders and notifications (optional)
In the app you can enable reminders — short notifications that Julija AI sends to your device (for example, if you mention something coming up and want to be reminded of it). This feature is off until you turn it on, and you can turn it off at any time, either in the app or in your device or browser settings.
A reminder may contain part of what you shared in a conversation and, like any notification, may be visible on your device's lock screen. If you do not want that, do not enable reminders, or turn them off. Reminder content is encrypted in transit to your device — the service that delivers the notification relays it but cannot read its content. Reminders are sent solely on the basis of your consent and are never used for advertising.
Conversations you have with Julija AI may contain information about mental health, emotional state, relationships, and other sensitive topics. Under GDPR (Article 9) and ZZPL, such data constitutes a special category of personal data requiring a higher level of protection.
We process such data exclusively on the basis of your explicit consent, provided at registration. You may withdraw consent at any time. We will never use sensitive data from conversations for profiling, advertising, or sharing with third parties without your explicit consent.
We NEVER use conversations to train AI models without your explicit consent. We do not currently train any model on user data.
5.1 Processing at a glance
This table summarises what is set out in detail in Sections 2, 4, and 7 — for each purpose: the data we use, the legal basis, and how long we keep it. In case of any difference, the detailed text of those sections prevails.
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Conversations with Julija AI | Conversation content, conversation history | Explicit consent (Art. 9(2)(a) GDPR; ZZPL) | Until the account is deleted or consent is withdrawn |
| Account and sign-in | Email address, first name (optional), age group | Performance of a contract | For as long as the account exists |
| Subscription and payment | Email address, plan and subscription status; payment details are processed by the merchant of record (Section 6.4) | Performance of a contract; legal obligation for tax and accounting records | For the duration of the subscription; records for the statutory period (Section 7) |
| Usage limits and abuse prevention | Number of messages sent, date and time, technical device data | Performance of a contract; legitimate interests | Technical logs for a maximum of 90 days |
| Reminders (optional) | Device subscription, reminder content and timing, delivery record | Consent | While reminders are enabled, or until the account is deleted |
| Support and feedback | Email address, message content, category | Performance of a contract; legitimate interests | At most 24 months |
| Website analytics | Cookies, pages visited, interactions, recordings of visits to the site | Consent | Until consent is withdrawn; not used in the conversation app |
| Advertising measurement | Cookies, the fact that a visit or sign-up came from an ad | Consent | Until consent is withdrawn |
| Platform security | Technical logs and access records | Legitimate interests | At most 90 days |
6.1 Internal access
Access to data is limited to authorised personnel and is used only where necessary — for technical maintenance, fault resolution, responding to your support request, and improving product quality. Conversation content is not read for the purpose of personal monitoring of individual users, and is not shared with anyone outside the platform.
6.2 Categories of recipients (data processors)
To provide the service, we rely on a limited number of carefully selected processors, each bound by a data processing agreement and acting only on our instructions. We share data only within the following categories of recipients:
A detailed list of our sub-processors is available on request at kontakt@julijaai.com.
6.3 Data transfers outside the EU
Your account, profile, and conversation data held by our database and storage providers are hosted within the European Union and are not transferred to the United States by us. Some other categories of recipients (for example AI, hosting, authentication, push notification services, analytics, advertising measurement, and workflow providers) operate from the United States; analytics and advertising measurement providers are used only with your consent. Where data is transferred to the United States, this is done with appropriate safeguards in accordance with GDPR and ZZPL, including Standard Contractual Clauses. We do not sell or rent your personal data to anyone, and the content of your conversations is never shared with advertisers.
6.4 Payments — merchant of record
Purchases on the platform are processed by Creem (Armitage Labs OÜ, registry code 16977866, Estonia) as our merchant of record — meaning it is the seller you buy from and handles checkout, payment processing, invoicing, applicable taxes, and refunds. Creem processes the personal data needed for the purchase (such as your email address, billing country, and payment details) as an independent data controller, under its own privacy policy. We receive from it only the information needed to activate and manage your subscription (such as your email address and subscription status) — never your card details. The content of your conversations is never shared with Creem.
6.5 Disclosure to public authorities
We may disclose your data to a court, public prosecutor, the police, or another competent authority only where we are required to do so by a binding legal instrument — for example a court order or a request grounded in law. Where that happens:
We do not hand over data voluntarily, on an informal enquiry, or to private individuals and companies — including employers, family members, and partners.
You may request deletion of all your data at any time — conversations, email address, and all other personal data. We will delete everything within 30 days and send you confirmation.
Partial deletion: you may request deletion of your conversation history while keeping your account.
Withdrawal of consent: withdrawing consent for the processing of conversation content is treated as a request to delete that content, since consent is the legal basis for that processing.
Timing: we stop consent-based processing within 5 business days of withdrawal — reminders stop being sent, and conversation content is no longer used. The deletion itself is carried out within 30 days, and data expires from backups as described in Section 7.
Deletion and consent withdrawal are exercised by email to the contact address; we send confirmation by email. The same address is available in the app under "My profile → Data and privacy".
Request deletion at: kontakt@julijaai.com
Identity verification. Because your conversations are among the most sensitive data there is, we act on a request only once we are satisfied it comes from the account holder. Please send requests from the email address the account was opened with; where we have reasonable doubt, we may ask for further confirmation (for example confirming an action from within the app). We do this solely to prevent someone else from obtaining or deleting your data. We respond within 30 days; if a request is complex, we will tell you about the extension and why.
We implement reasonable technical, administrative, and organisational measures designed to protect your data from loss, misuse, and unauthorised access, disclosure, alteration, or destruction. No transmission over the internet is ever fully secure, so please also take care in deciding what you share.
Julija AI is intended for users aged 18 and over. If you indicate that you are under 18, access to the platform will be restricted. If we become aware that we have inadvertently collected data from a minor, we will delete such data without delay.
We use three categories of cookies and similar technologies:
On your first visit, a cookie banner lets you Accept or Reject analytics and marketing cookies. No analytics or marketing cookie or script loads before you accept. You can change your choice at any time via the Podešavanja kolačića link in the footer of every page — it clears your previous choice and shows the banner again. We do not sell your personal data, and the content of your conversations is never used for advertising.
Julija AI generates responses using an AI model, but we do not use your data for automated decisions that produce legal effects or similarly significantly affect you (such as eligibility, credit, or employment decisions). The content of your conversations is never used to profile you for advertising. With your cookie consent, website visit data (not conversation data) is used solely to measure the effectiveness of our ads, as described in Section 13. Identifying potential crisis situations is a safety feature, not an automated decision with legal effect.
We may update this Privacy Policy from time to time. Changes take effect when they are published on this page, and continuing to use the platform after that means you accept them. The date from which a version is in force is always visible at the top of this document.
Where a change means new or expanded processing of your data, we do not rely on silence — we ask for your consent in the app before you continue, and record which version you accepted.
For all questions regarding this Privacy Policy: kontakt@julijaai.com — We respond within 30 days.