Last updated: 3 September 2026
In short
- PPE LLM is run from Switzerland. Contact: contact@ppellm.com.
- To open an account we need an email address, a username and a password. Nothing else is required.
- Your questions are sent to AI model providers to produce the answer. Do not put personal data in them. We never sell personal data.
- Analytics cookies run only with your consent (in the EEA/UK) or until you switch them off (elsewhere). Manage them any time under Cookie settings.
- You can delete your account yourself on the account page. It can be recovered for 30 days, then it is gone.
- AI answers are not professional advice. See the Disclaimer.
1. Who we are and what this notice covers
This Privacy Notice explains how PPELLM ("we", "us", "our"), Switzerland, handles personal data when you use www.ppellm.com (the "Site"), the PPE LLM iOS and Android apps (which display the Site inside an app shell), our emails, and any other service that links to this notice (together, the "Services"). We are the controller of this data.
It is written for the Swiss Federal Act on Data Protection (FADP), the EU and UK General Data Protection Regulations (GDPR) and, where they apply, other local privacy laws. If you do not agree with it, please do not use the Services. Questions: contact@ppellm.com.
2. What we collect
Data you give us
- Account data: email address, username and password. The password is stored as a salted hash; we cannot read it. We do not ask for your name, phone number, address or payment card details.
- Content you enter: the questions you ask, any files or images you attach to them, the answers you receive, your conversation history, settings, and survey answers.
- Payment data: if you buy a plan or a balance top-up, our payment provider Stripe collects your card details on its own pages. We never see the card number. We receive a Stripe customer id, the plan, invoice amounts and their paid/failed status, and (if you entered one at checkout) a billing address.
- Messages: anything you write to us by email, including support requests.
Data collected automatically
- Server visit log: for each page view we record the date and time, the page, your IP address, the device and browser type, the referring page, whether you were logged in (and, if so, your account email), and the campaign tags in the link you used (utm parameters and similar). An approximate location (city and country) is derived from the IP address when we review the log. This keeps the Site secure, lets us count visitors, and tells us which channel brought a sign-up.
- Usage records: how much of your allowance each question used, which models answered, and technical error reports. Needed to apply the allowances of your plan and to fix problems.
- Cookies and browser storage: see section 7 and the Cookie Policy.
What we do not collect
No sensitive data on purpose (health, religion, biometrics, and so on — please do not put such data in your questions), no precise device location (no GPS), no contacts or photos from your phone unless you attach one to a question, no push notifications, no data bought from third parties. The mobile apps do not use advertising identifiers; the home-screen widget only opens the app.
3. Why we use it, and on which legal basis
| Purpose | Data used | Legal basis (GDPR art. 6) |
|---|---|---|
| Create and run your account, log you in, show your conversations | Account data, content you enter | Contract |
| Produce answers to your questions | Content you enter (sent to the AI providers, section 4) | Contract |
| Apply the allowances of your plan and bill subscriptions or top-ups | Usage records, payment data | Contract; legal obligation (bookkeeping) |
| Send transactional emails (verification, password reset, receipts) | Email address | Contract |
| Invite you to a feedback survey (at most twice per account) | Email address, sign-up date | Legitimate interest for existing users (Swiss FADP / GDPR); tell us if you do not want them |
| Keep the Site secure, prevent abuse, debug errors | Visit log, usage records, error logs | Legitimate interest |
| Count visitors and measure which channels bring sign-ups | Visit log; analytics cookies | Legitimate interest for our own server log; consent for analytics cookies |
| Answer your questions and complaints | Messages | Legitimate interest; contract |
| Comply with the law (tax, court orders) | Whatever is required | Legal obligation |
Where we rely on legitimate interest we have checked that it does not override your rights. You can object at any time (section 10).
4. AI processing of your questions
To answer a question, PPE LLM sends the text you typed (and any attachment), together with the earlier messages of the same conversation, to several large language models. These models are run by third-party providers (currently Anthropic, OpenAI and Google, among others) reached through the OpenRouter platform, USA. Your account identity is not attached to these requests; the providers receive the content of the conversation only. Providers may keep the text for a limited time for abuse monitoring under their own terms.
Please do not type personal data (yours or anyone else's) into your questions unless it is needed for the answer. AI output is generated automatically, can be wrong, and is provided for information only — it is never a recommendation and never a decision with legal effect on you.
We keep your conversations so that you can return to them. You can delete individual conversations in the app; deleting your account deletes all of them.
5. Who we share data with
We share personal data only with the service providers below, who act on our instructions under a contract, and only for the purpose stated. We never sell personal data.
| Provider | What for | Where |
|---|---|---|
| Hetzner Online GmbH | Hosting of the Site and all stored data | Germany |
| OpenRouter, Inc. and the model providers it routes to (Anthropic, OpenAI, Google and others) | Producing the answers to your questions (section 4) | USA |
| Stripe Payments Europe, Ltd. / Stripe, Inc. | Payments, subscriptions, invoices, billing portal | Ireland / USA |
| Infomaniak Network SA | Sending our emails | Switzerland |
| ipinfo.io (IPinfo Inc.) | Turns an IP address into an approximate country and city, for showing prices in your currency, choosing the right cookie banner, and reviewing the visit log | USA |
| Google (Google Ireland Ltd. / Google LLC) | Google Analytics — only with your consent | Ireland / USA |
| Google Fonts (Google LLC) | Delivers the typeface of the Site; Google receives your IP address for that request but sets no cookie | USA |
| Apple Inc. / Google LLC (app stores) | Distribute the iOS and Android apps; their own privacy policies apply to the store itself | USA |
We may also disclose data if the law requires it, to defend our rights, or, in the event of a sale or merger of PPE LLM, to the successor under the same protections.
6. International transfers
Your data is stored in Germany. Some providers above process data in the USA. For those we rely on the Swiss–US and EU–US Data Privacy Frameworks where the provider is certified, and otherwise on the standard contractual clauses recognised by the Swiss FDPIC and the European Commission.
7. Cookies and similar technologies
Essential cookies (login session, your consent choice, which client you use) are always on. Analytics cookies are set only after you accept them, if you are in the EEA or UK; elsewhere they run until you switch them off. Change your choice any time under Cookie settings. In the iOS app the iOS tracking permission replaces the banner. The full list is in the Cookie Policy.
We honour the Global Privacy Control browser signal: when it is present we treat it as a refusal of non-essential cookies until you say otherwise. There is no accepted standard for the older "Do Not Track" setting, so we do not act on it.
8. How long we keep data
- Account data and your conversations: while your account exists. When you delete your account (account page → delete) it is deactivated at once; for 30 days you can recover it by logging in again, after which it is erased. Server backups are kept for 7 days, so a deleted account disappears from them within a week of erasure.
- Payment records: 10 years, as Swiss bookkeeping law requires. Stripe keeps its own records under its policy.
- Server visit log, usage records and consent records: at most 24 months, then deleted or reduced to anonymous counts.
- Support emails: up to 24 months after the last message.
- Unverified accounts (email never confirmed) are removed automatically after 24 hours.
9. Security
All traffic is encrypted (HTTPS), passwords are hashed, and only the operator of PPE LLM has access to stored data. No system is perfectly secure, so we cannot promise that unauthorised access will never happen; if it does and your rights are at risk, we will tell you and the competent authority as the law requires.
10. Your rights
Under the Swiss FADP and the GDPR you can ask us to:
- access the personal data we hold about you and receive a copy;
- correct inaccurate data (most account data you can edit yourself);
- delete your data (use "delete account" on the account page, or ask us);
- restrict or object to processing based on legitimate interest, including survey invitations;
- receive the data you gave us in a portable format;
- withdraw consent at any time (cookie settings) without affecting what was done before;
- not be subject to a decision based solely on automated processing that has legal effects on you — we make no such decisions.
Write to contact@ppellm.com from the email address of your account (or tell us how to verify it is you). We answer within 30 days, free of charge. We will not treat you differently for exercising these rights.
If you are unhappy with our answer you can complain to the Swiss Federal Data Protection and Information Commissioner (edoeb.admin.ch), to the data-protection authority of your EEA country, or, in the UK, to the Information Commissioner's Office (ico.org.uk).
11. Emails
We send transactional emails — verification, password reset, receipts — as part of the service while your account exists. The only other email we send is an occasional invitation to a short feedback survey (at most two per account, never repeated); reply to it or write to contact@ppellm.com if you do not want it. We do not send newsletters.
12. Residents of the United States
We do not sell or "share" personal data for cross-context advertising as US state privacy laws define it, and we do not use it for profiling with legal effects. The rights in section 10 (know, access, correct, delete, portability, non-discrimination, appeal) apply to you; to use them or to appeal a decision, email contact@ppellm.com. Under California's "Shine the Light" law you may ask once a year which personal data, if any, we disclosed to third parties for their direct marketing — the answer is none.
13. Children
The Services are for adults (18 or older). We do not knowingly collect data from minors; if we learn we have, we delete the account. Tell us at contact@ppellm.com if you believe a minor has registered.
14. Changes to this notice
We update this notice when our practices or the law change; the date at the top tells you when. For material changes we will show a notice on the Site or email account holders.
15. Contact
PPELLM, Switzerland — contact@ppellm.com.