DebatatorLegal
Privacy policy
Last updated 11 November 2026
In short: you need an Apple or Google account to debate, and we keep only what sign-in needs. Your arguments go to our server and our AI providers so the debate can happen. An unfinished debate is kept for up to 30 days so you can resume it, and it is deleted as soon as the debate ends. Finished debates are saved encrypted on your phone, and only there. Your voice is recognised on your phone and the audio is never saved. There are no ads, no tracking and no analytics.
Who is responsible
Debatator is made by Daniel Grijuela, an individual developer based in Spain, who is the controller of your personal data under the EU General Data Protection Regulation (GDPR). Contact: privacy@debatator.app.
This policy covers the Debatator apps for iOS and Android and the website debatator.app.
What we collect and why
| Data | Why | Legal basis | How long |
|---|---|---|---|
| Account: your name, email address, the ID Apple or Google gives us, the profile picture link Google provides, and the sign-in tokens they issue | Create and secure your account, so only you can use your debates and daily allowance | Contract | Until you delete your account |
| Sign-in sessions: a session token, the IP address and the device description (user agent) used to sign in | Keep you signed in and detect misuse | Contract; legitimate interest in security | Each session expires after 7 days without use, or when you sign out or delete your account |
| Debate content: the topic, your side, the opponent, what you and the opponent write, and the judge’s scores | Run the debate, generate the opponent’s replies and judge both speakers | Contract | On our server only while the debate is unfinished: deleted when it ends or you abandon it, and no later than 30 days after your last move |
| Topic ideas you type to create your own topic | Turn your idea into a clear, safe resolution and research it | Contract | Not stored after the request, except as the topic of a debate you start |
| Daily usage counters: how many debates, researched topics and topic ideas you used today | Enforce the free daily allowance | Contract; legitimate interest in preventing abuse | Deleted at the end of each day |
| IP address of each request | Rate limiting and protection against attacks | Legitimate interest in security | Processed in memory for rate limiting; not stored with your account |
| Reports you make about an opponent reply | Spot opponents that need fixing or withdrawing | Legitimate interest in a safe service | Only the opponent, the category and a random reference to the reply, with no text and no account details, for up to a year |
| Operational logs: request IDs, timings, status codes, model versions, token counts and costs | Keep the service running and within budget | Legitimate interest | Up to 7 days in our hosting provider’s logs. They never contain what you write or say |
What stays on your device
- Finished debates: the visible transcript, scores and result of up to your 50 most recent debates, in encrypted storage protected by the iOS Keychain or Android Keystore. They never leave your phone. Delete one or all of them in the app at any time.
- Voice input: speech is recognised by your phone’s built-in on-device speech recognition, and you can edit the text before sending it. We never receive or save audio.
- Opponent voice: read aloud by your phone’s built-in speech synthesis.
- Settings and Training progress: language, appearance, sound and haptics preferences, and your drill progress.
Who we share it with
We do not sell your data or share it for advertising. We use these service providers, who process it only on our instructions:
- Cloudflare, Inc. hosts our server, database and this website, and forwards email sent to our addresses.
- OpenRouter, Inc. routes the debate text to the AI models that write the opponent’s replies, judge the debate and research topics. We allow only providers that commit to not storing prompts (zero data retention) and not training on them. Research for a topic is searched on the web before the debate starts. It contains the topic, never your arguments.
- Apple and Google authenticate you when you choose to sign in with them, under their own privacy policies.
Some of these providers are based in, or process data in, the United States and other countries outside the European Economic Area. Those transfers rely on the EU–US Data Privacy Framework where the provider is certified, or on the European Commission’s Standard Contractual Clauses.
We may disclose data if the law requires it, for example in response to a valid court order.
What we don’t do
- No advertising, ad identifiers or cross-app tracking.
- No analytics or crash-reporting tools.
- No cloud copy of your debate history.
- No use of your debates to train AI models.
- No cookies on this website.
Your rights
You can ask for access to your data, correction, deletion, restriction, portability, or object to processing based on legitimate interest. Write to privacy@debatator.app from the email address of your account. We answer within one month.
You can delete your account yourself in the app: see how to delete your account. Deleting it removes your account and sessions, any unfinished debate on our server and the encrypted debate history for that account on your device.
If you think we have handled your data unlawfully, you can complain to the Spanish Data Protection Agency (aepd.es) or to the authority where you live.
Age
Debatator is for people aged 16 and over. We do not knowingly collect data from younger users. If you believe a child under 16 has an account, write to privacy@debatator.app and we will delete it.
Security
Data is encrypted in transit, provider credentials stay on our server, debate history on your device is encrypted, and we keep as little as the service allows. No system is perfectly secure. If a breach affects your data, we will tell you and the authorities as the law requires.
Changes
If we change this policy, we will update the date above and, for significant changes, tell you in the app before they apply.