Privacy Policy

Last updated: 20 July 2026

This Privacy Policy explains which personal data we process when you visit our website www.worldviews.ai or use our WorldViews platform (web app at app.worldviews.ai and mobile apps for iOS/iPadOS and Android – together the "Platform").

In the event of discrepancies between the language versions of this Privacy Policy, the German version prevails.

1. Controller

WorldViews UG (haftungsbeschränkt), Am Forstgarten 10, 09526 Olbernhau, Germany Represented by the Managing Director: Franz Zedler Email: privacy@worldviews.ai

No data protection officer has been appointed, as the legal requirements for this do not apply.

2. General Information

Legal bases. We process personal data on the basis of the GDPR, in particular Art. 6(1)(a) (consent), (b) (performance of a contract), (c) (legal obligation) and (f) (legitimate interest), and – for information relating to opinions and beliefs – Art. 9(2)(a) GDPR (explicit consent). The storage of and access to information on your device (e.g. cookies) is additionally governed by Section 25 of the German TDDDG.

Transfers to third countries. Some of our service providers process data (also) in the USA. Transfers are based on the EU-US Data Privacy Framework where the provider is certified, and otherwise on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR) with supplementary safeguards.

No advertising with your data. We do not sell personal data and do not share it with third parties for advertising purposes. Our Platform is ad-free.

Encryption. Data is transmitted via encrypted connections (TLS).

No automated decision-making. No automated decision-making with legal effect within the meaning of Art. 22 GDPR takes place. For our AI features, see Section 5.1.

3. Website (www.worldviews.ai)

3.1 Hosting and Server Log Files

Our website is operated on the platform of HubSpot (HubSpot Ireland Limited, 1 Sir John Rogerson's Quay, Dublin 2, Ireland; parent company: HubSpot, Inc., USA). When you visit the website, technically necessary data is processed (IP address, date and time, page accessed, browser and device type). The legal basis is our legitimate interest in providing the website securely and reliably (Art. 6(1)(f) GDPR). A data processing agreement is in place with HubSpot.

3.2 Cookies and Consent

On your first visit, a consent banner asks whether we may use cookies for analytics purposes. Without your consent, only strictly necessary cookies are set (including the cookie that stores your choice). The legal basis for analytics cookies is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG); strictly necessary cookies are based on Section 25(2) TDDDG and Art. 6(1)(f) GDPR. We also respect your browser's Global Privacy Control signal.

Cookies used (selection):

You can withdraw your consent at any time with effect for the future by deleting the cookies in your browser and declining in the banner on your next visit.

3.3 Web Analytics (HubSpot Analytics)

Only with your consent does HubSpot collect pseudonymous usage data (pages visited, time on page, approximate location). If you later submit a form, HubSpot may link previous usage to your contact record. Legal basis: Art. 6(1)(a) GDPR. Withdrawal: see 3.2.

3.4 Chat Widget

We offer a chat widget (HubSpot Conversations) on the website. We process your chat messages and – if provided – your name and email address; the conversation is stored in our CRM to answer your enquiry. Legal bases: Art. 6(1)(b) GDPR (handling your enquiry) and (f) (efficient communication); the associated cookie only with consent (see 3.2).

3.5 Waitlist

You can sign up for the closed-beta waitlist via our form. We process your email address and, optionally, your name. The sole purpose is to inform you about beta access and the launch of WorldViews; you confirm your sign-up via a confirmation link (double opt-in). Legal basis: your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time via the link in every email; your data will then be removed from the list.

3.6 CRM and Email Communication

If you communicate with us by email or chat, we store the correspondence and your contact details in our CRM system (HubSpot) in order to handle enquiries and keep track of the communication history. Contact records may also be created automatically from incoming correspondence. Legal bases: Art. 6(1)(b) and (f) GDPR. We delete correspondence data once it is no longer required for communication and no statutory retention obligations apply.

4. Platform: Account, Content and Security

We operate the Platform (web app and mobile apps) on the infrastructure of Google Firebase (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; parent company: Google LLC, USA). Our database (Cloud Firestore) and file storage (Cloud Storage) are located in the EU (multi-region europe-west/eur3). Data processing agreements are in place with Google (Google Cloud Data Processing Addendum).

4.1 Registration and Sign-in (Firebase Authentication)

An account is required to use the Platform. You can register with an email address and password, with your Google account (Google Sign-In; Google Ireland Limited) or with your Apple account (Sign in with Apple; Apple Distribution International Ltd., Ireland / Apple Inc., USA). We process your email address, display name and profile picture (if any), a user ID and sign-in timestamps. When signing in via Google or Apple, we receive the data you release there; the privacy notices of the respective provider apply in addition. Legal basis: Art. 6(1)(b) GDPR.

4.2 Your Content on the Platform

To provide our service, we store the content you create, in particular: profile information, selected topics and positions, conversation content (1:1 chats), preparation and reflection notes, results and agreements, and uploaded images. Your conversations are not public; conversation content is accessible only to you, your respective conversation partner and – to provide the AI features – our systems (Section 5.1). Legal basis: Art. 6(1)(b) GDPR.

4.3 Special Categories of Personal Data (Opinions and Beliefs)

WorldViews is a platform for conversations about controversial topics. The topics, positions and conversation content you choose may therefore reveal political opinions, religious or philosophical beliefs (special categories of personal data within the meaning of Art. 9(1) GDPR).

We process this data exclusively on the basis of your explicit consent, which you give during registration (Art. 9(2)(a) GDPR), and exclusively to provide the Platform's features (matching, conversations, AI mediation, preparation, reflection, results). We do not use this data for advertising and do not share it with third parties. You can withdraw your consent at any time with effect for the future (e.g. by deleting your account); without this consent, the Platform cannot be used, as processing positions and opinions is at its core. You can declare the withdrawal directly in the app settings; there it is combined with the deletion of your account.

4.4 App Delivery and App Security (Firebase App Check)

Operating the apps and the web app generates technically necessary data (e.g. IP address, device information, timestamps of server requests). To protect against abuse, we use Firebase App Check, which uses attestation services to verify that requests originate from an unmodified, genuine app instance (Android: Google Play Integrity; iOS: Apple App Attest; web: reCAPTCHA). Device signals are transmitted to the respective provider. Legal basis: Art. 6(1)(f) GDPR (protecting our systems and users against abuse).

4.5 Account Deletion

You can delete your account at any time in the app settings or request deletion by email. Upon deletion, your profile is anonymised and your content and contributions to conversations are removed. Your conversation partners keep their own messages and will see a notice in the conversation that the associated account has been deleted. Statutory retention obligations (e.g. for purchase data) remain unaffected; backups are overwritten on a rolling basis.

5. Platform: Features and Services

5.1 AI Features (Mediation, Preparation, Source Checking)

At the core of WorldViews is AI-supported, neutral conversation facilitation. For this purpose, conversation content and preparation input are processed automatically by a language model to generate mediation prompts, de-escalation suggestions, summaries and source references. We use Firebase AI Logic with models of the Google Gemini API (Google, see above). Under the Google Cloud terms applicable to us, your content is not used by Google to train the models. Processing on servers in the USA is possible (safeguards: see Section 2).

Transparency notice: In conversations, you visibly interact with an AI system ("AI Mediator"); AI contributions are labelled as such. The AI does not make decisions with legal effect for you.

Legal bases: Art. 6(1)(b) GDPR and – where special categories are concerned – your explicit consent under Art. 9(2)(a) GDPR (Section 4.3).

5.2 Usage Analytics (Google Analytics for Firebase)

To improve the Platform, we collect pseudonymous usage data with Google Analytics for Firebase: events (e.g. app start, screen views), app instance ID, device and version information, and the approximate country of origin. We use this to create aggregated statistics (e.g. active users, stability, features used); conversation content is not part of the analysis. Google's advertising features (Google Signals, ads personalisation) are disabled. Event data is retained for up to 2 months, user-level analytics data for up to 14 months. Legal basis: our legitimate interest in analysing and improving the Platform (Art. 6(1)(f) GDPR).

5.3 Crash Reports (Firebase Crashlytics)

In the mobile apps we use Firebase Crashlytics to detect crashes and errors. We process crash logs (stack traces), device and version information and an installation ID; conversation content is not included. Legal basis: our legitimate interest in stability and troubleshooting (Art. 6(1)(f) GDPR).

5.4 Push Notifications

With your consent at operating-system level, we send push notifications in the mobile apps (e.g. for a match or a new message) via Firebase Cloud Messaging. A pseudonymous device token is processed. You can disable push notifications at any time in your device's system settings. Legal bases: Art. 6(1)(a) and (b) GDPR.

5.5 Purchases and Subscriptions

Purchases and subscriptions are made through the respective app store – Apple App Store (Apple Distribution International Ltd. / Apple Inc.) or Google Play (Google). The store processes the payment; we do not receive payment data such as card numbers. To manage purchases and entitlements, we use RevenueCat (RevenueCat, Inc., USA); a pseudonymous user ID and transaction/receipt data (product, time, status) are processed. Legal bases: Art. 6(1)(b) GDPR (contract performance) and (c) (statutory retention obligations under German tax and commercial law).

5.6 Support and Feedback

If you send us feedback or support requests via the Platform or by email, we process the information provided to handle your request. We may also use our chat system (HubSpot) for this; Section 3.4 applies accordingly. Legal bases: Art. 6(1)(b) and (f) GDPR.

6. Recipients

We use the following categories of recipients: IT and hosting providers (in particular Google/Firebase, HubSpot), purchase processing and stores (Apple, Google Play, RevenueCat) and – internally – providers of communication and office software. Where providers act on our behalf, data processing agreements pursuant to Art. 28 GDPR are in place. Data is only disclosed to other third parties where we are legally obliged to do so.

7. Retention Periods

We store personal data only for as long as necessary for the respective purposes: account and content data until you delete your account (Section 4.5); waitlist data until the launch communication is completed or you withdraw; correspondence until it is no longer required; purchase and invoice data for the duration of statutory retention periods (up to 10 years). Thereafter, the data is deleted or anonymised.

8. Your Rights

You have the following rights with regard to your personal data: access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on legitimate interests (Art. 21 GDPR). You may withdraw any consent given at any time with effect for the future (Art. 7(3) GDPR). An email to privacy@worldviews.ai is sufficient to exercise your rights.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Saxon Commissioner for Data Protection and Transparency (Sächsische Datenschutz- und Transparenzbeauftragte), Dresden, Germany (www.datenschutz.sachsen.de); you may also contact the supervisory authority of your habitual residence.

9. Notice for Users Outside the EEA

Our Platform is also accessible outside the European Economic Area (in particular in the USA). We apply the GDPR-level standards of protection described in this policy uniformly to all users. Where the law of your country grants you additional rights, you can exercise them via the contact details above.

10. Changes to this Privacy Policy

We update this Privacy Policy when our processing activities or the legal situation change. The current version is always available at www.worldviews.ai; we will inform you of significant changes in the app.