Feeling Great

GDPR overview

There is no GDPR implementation to report. Across every page collected, from the homepage and FAQ to the terms of use, the privacy policy and the contact page, the words GDPR, EEA, European Union and Article 27 representative never appear, and neither does HIPAA. The framework is entirely American: California law governs the terms, disputes go to JAMS arbitration, and the privacy policy cites section 1789.3 of the California Civil Code. No data processing agreement is published, no subprocessor list is maintained and no data protection officer is named. The rights actually described are profile access and update, marketing unsubscribe, cookie and advertising controls, and full account deletion from the app settings. This is consistent with a product sold in the United States only, but readers should treat the silence as an absence of commitment, not as an implicit claim of compliance.

Who owns the data?

Feeling Great Corporation does not claim ownership of what users write, nor of the chatbot's replies: sections 3.2 and 4.3 of the terms say so plainly. Ownership, however, is not the operative question here. Users grant the company a non-exclusive, irrevocable, perpetual, worldwide, royalty-free, transferable and multi-tier sublicensable license over their inputs and outputs, covering the training, development and improvement of its models and those of its affiliates, as well as marketing and promotional use. Everything else, meaning the app, the lessons, the videos and the interface, belongs outright to Feeling Great and its suppliers, and users acquire no title to any of it.

Reuse rights

The user receives a limited, non-exclusive, non-transferable, revocable license to install and run the app on a single device for personal or internal business purposes, and nothing beyond that. Chatbot outputs can be reused freely for personal purposes, since the publisher claims no ownership over them, but the app's own material, lessons and videos may not be copied, redistributed, resold, adapted or used to build a competing service. On the vendor's side, personal information is used to operate and personalize the service, for research and development including building and running algorithms and models, for direct marketing and for third-party interest-based advertising, and to create aggregated or de-identified data that may be shared with third parties. The privacy policy names OpenAI for the chatbot, Anthropic and Twilio for the SMS service, Stripe for payments and Google Analytics for measurement. Do Not Track signals are not honored, and testimonials may be reused in marketing material.

Data retention & training

Hosting summary

No hosting country or region is declared anywhere. The privacy policy states only that the company is headquartered in the United States, that it may use service providers operating in other countries, and that personal information may be transferred to the United States or to other locations where privacy laws may be less protective. That is a transfer statement, not a hosting commitment, so no jurisdiction can be recorded with confidence. There is no trust or security page, no certification displayed, no SOC 2 or ISO claim, no data processing agreement and no subprocessor list. Security is described in general terms: technical, organizational and physical safeguards, with an explicit statement that security cannot be guaranteed. Two concrete elements do stand out: the FAQ states that the user's name and account email address are encrypted and unreadable in the database and in all its replications and reports, and the Google Play listing declares that data is encrypted in transit and that deletion can be requested.