Privacy Policy

Last updated: October 22, 2026

This Privacy Policy explains what data Lawfe ("we", "us") collects, how we use it, and who we share it with. Lawfe is an AI-powered legal-information app; it is not a law firm and does not provide legal advice. By using the app you agree to this policy.

Who we are

Lawfe is developed and published by Charbel Al Chaar and Elias Alzaghrini, based in Lebanon. We decide how and why the personal data described in this policy is processed, and we are responsible for it.

Contact us about privacy at any time: support@lawfe.com (or lawfeapp@outlook.com).

1. Data we collect

• Account data: your email, name, country, optional phone number, password (stored only in hashed form by our authentication provider), optional profile photo (shown publicly if you are a consultant), and your language and app settings. If you use Sign in with Apple or Google, we receive the name and email address they share with us, or an Apple private relay address.
• Device and security data: a device identifier (to allow one account per device and prevent abuse), the IP address you sign up from (for rate limiting), a CAPTCHA check at sign-up (hCaptcha), and your push-notification token if you allow notifications.
• AI content: your questions, the AI’s answers, chat titles, conversation memory summaries, the jurisdiction and legal area you choose, and the documents and photos you attach or save.
• Consultant interactions: consultation requests (including your description of the issue), the messages, files, photos and voice notes you exchange with consultants, star ratings, reports and blocks.
• Consultant applications in the app: name, email, phone, country, city, years of experience, specializations, fee, bio, licence document, and optional LinkedIn and Instagram links.
• Consultant applications on our website: name, email, phone number, country, city, years of experience, specializations, fee (or that it is negotiable), bio, licence number and issuing authority, licence document, an optional photo, optional LinkedIn and Instagram links, and whether you want a public profile page. We also record that you accepted our Terms of Service and which version, the language you applied in, when you confirmed your email address and, to prevent abuse, your browser’s user agent and a one-way hash of your network prefix (the first part of your IP address). We do not store your full IP address with your application. We also keep a record of the emails we send you and whether they were delivered and, once you are listed, of when your listing is linked to or unlinked from an app account.
• Usage and purchases: question and document counters, your plan, renewal and expiry dates, and store purchase identifiers (through RevenueCat). We never receive your card details.
• Reports of AI answers: when you report an AI answer, we store the text of that answer with your report.

We do not collect your advertising ID, precise location, contacts or health data. We do not track you across other companies’ apps or websites, and the app contains no advertising SDKs and no crash-analytics tools.

2. How we use your data and our legal bases

• To provide the service (contract): create and run your account, answer your questions, analyze your documents, connect you with consultants, deliver notifications you allow, and manage your plan and usage limits.
• AI processing (consent): sharing your questions and attachments with our AI providers, as described in section 3. You can withdraw this consent at any time.
• Security and fraud prevention (legitimate interest): one account per device, sign-up rate limiting, CAPTCHA checks, and reviewing reported content and abusive accounts.
• Reviewing consultant applications (steps at your request before a contract): confirming your email address, checking your details and licence, and emailing you about your application and our decision.
• Listing approved consultants (contract): showing your listing in the app’s consultant directory, publishing your public profile page and card if you turn them on, sending you the manage links you ask for, and linking your listing to an app account you create with the same email address.
• Emails about new consultation requests (legitimate interest): if you are listed through our website without an app account, we email you when clients send you consultation requests, so that they don’t go unanswered. Each of these emails has a one-click unsubscribe link, and you can turn them off or back on at any time with a manage link.
• Preventing abuse of our website forms (legitimate interest): rate limits based on one-way hashes of your network prefix and email address, your browser’s user agent, timed form checks and, when it is switched on, a Cloudflare Turnstile check, so that our forms can’t be used to send unwanted email.

We do not sell your personal data, and we do not share it for cross-context behavioural advertising.

3. AI processing and your consent

Lawfe’s answers are generated by third-party AI models. Before your first AI question, the app asks for your explicit consent to share the following with our AI providers. Without that consent, AI chat is not available.

• DeepSeek (servers in China) receives your question, the earlier messages of the conversation, a rolling AI-generated summary of the conversation (“memory”, which is not created in Incognito mode), your first name and home country, the jurisdiction and legal area you choose, and text extracted from your attachments.
• Google Gemini receives the images and PDFs you attach, and up to 3 of your saved documents when you include them in a question (Pro and Max only), in order to extract their text. We use Gemini on a paid API tier with billing enabled; under Google’s terms for that tier, Google does not use this content to train its models.

Voice notes are used only in chats between you and a consultant and are never sent to AI.

You can withdraw your consent at any time in the app under Settings → AI Assistant → AI data sharing. This stops AI chat until you give consent again; it does not affect processing that has already taken place.

4. Who else sees your data

• Consultants you contact: when you send a consultation request or message a consultant, that consultant sees your name, your email address, your request and everything you send in that chat.
• Consultants listed through our website: if a consultant hasn’t joined the app yet, we only email them how many requests are waiting, never your name, contact details or request. They see your request once they join the app with the email address on their listing; if they haven’t joined within 14 days of your request, it expires.
• Public consultant profiles: if you are an approved consultant, your name, photo, city, country, bio, specializations, years of experience, fee, LinkedIn link and rating are shown publicly in the app’s directory. If you give an Instagram username, it is also available to signed-in app users. Your licence document is seen only by Lawfe reviewers.
• Public consultant pages and cards: an approved consultant can also have a shareable page at lawfe.com/c/… showing their photo (or initial), name, specializations, years of experience, city and country, bio, rating (once they have reviews), fee or “Negotiable”, LinkedIn link, and a “Licence reviewed by Lawfe” seal with the month of our review, when we have it. The page offers a downloadable image card with the photo, name, specializations, seal and page address. Email addresses, phone numbers, licence numbers and licence documents are never shown. We ask search engines not to index these pages, but anyone with the link can open them.
• Your choice: the page is optional. If you apply on our website, you choose it on the application form, where it is selected unless you untick it; if you joined as a consultant in the app, it stays off until you turn it on with a link we email you. You can hide your page at any time with a manage link (see section 7), and it also stops showing when your listing is no longer active; a change can take a few minutes to reach every visitor. Cards that have already been downloaded stay with the people who have them, but the page address printed on the card then shows that the page is no longer available.
• Link previews: when a page link is shared on social networks or messaging apps such as WhatsApp, LinkedIn, Facebook or X, those platforms fetch the page to build a preview with the consultant’s name, a short description and a standard Lawfe image, not their photo. These platforms may keep their copy of a preview for some time after a page is hidden; we can’t remove it.
• Ratings: the star ratings you give a consultant count toward the rating shown on their public profile.
• Lawfe moderators: Lawfe admins may review reported content, and the conversation it came from, in order to moderate the service.

5. Third-party processors (sub-processors)

We share data with the following providers strictly to operate the service:

Each provider may use your data only to provide its service to us and must protect it at least as well as this policy describes.

Because DeepSeek processes data in China and other providers process data outside your country, your information may be transferred internationally. By using the AI features you consent to these transfers.

6. Security

Your data is encrypted in transit (TLS) and at rest. Note that messages and documents are not end-to-end encrypted, and the AI providers above necessarily receive your content in readable form to process it.

7. Data retention & account deletion

We keep your data only as long as we need it:

• Account data: until you delete your account.
• AI conversations and memory summaries: until you delete the conversation, clear your chat history or delete your account.
• Documents and photos: until you delete them or delete your account.
• Consultant listings created on our website: until you delete the listing (or, once it is linked to an app account, your account), or until we remove it.
• Chats with consultants: until you or the consultant deletes their account; deleting either account removes the whole conversation for both sides.
• Sign-up IP address: until you delete your account.
• Device hash: a one-way SHA-256 hash of your device identifier is kept indefinitely so that deleting an account can’t be used to reset the free plan’s question limit. It can’t be linked back to you or to any of your data.
• Data sent to AI providers: kept by DeepSeek and Google under their API terms.
• Purchase records: kept by Apple, Google and RevenueCat under their own legal obligations.
• Copies of our emails: kept by Resend, our email provider, under its own retention terms.
• Bounced or spam-reported addresses: kept on a suppression list so that we don’t email them again.

Consultant applications and emails

Data from the consultant application form on our website, and records of the emails we send, are deleted automatically on this schedule:

You can delete your account in the app at any time (Profile → Delete Account, or Settings → Account → Delete Account). Deletion immediately and permanently erases your account and data, and it can’t be undone. If you first applied as a consultant on our website, the photo published with your listing, any files still kept from that application, such as your licence document, and the records of your listing being linked to or unlinked from your account are deleted by our daily clean-up, normally within 24 hours after you delete your account.

If you are listed through our website and don’t have an app account, request a manage link on our For Consultants page and choose to delete your listing, or email us from the address on your listing. Deleting with a manage link immediately erases your listing, your public page, and your licence document and photo; if you email us, we do this within 30 days. Records of the emails we sent you are then deleted on the schedule above.

Step-by-step instructions, how to request deletion by email, and the full list of what is deleted and kept are on our account deletion page.

8. Your rights

Depending on where you live (for example under the GDPR or the CCPA), you have the right to:

• access the personal data we hold about you and receive a copy in a portable format;
• correct inaccurate data;
• delete your data (see section 7);
• object to processing based on our legitimate interests;
• withdraw your consent at any time — for AI processing, in Settings → AI Assistant → AI data sharing;
• lodge a complaint with your local data-protection authority.

To exercise any of these rights, email us at the address in section 12. We respond within 30 days, and we will not discriminate against you for exercising these rights.

9. Children

You must be 18 or older to use Lawfe. We do not knowingly collect data from anyone under 18; if we learn that we have, we delete it.

10. Our website

• Analytics: lawfe.com uses Google Analytics 4 with Google Consent Mode. Analytics cookies are set only if you accept them; until then, analytics storage stays off. Details are in our Cookie Policy.
• Help Center AI assistant: what you type into the “Ask Lawfe AI” box on our Help Center is sent through our server to DeepSeek (China) to generate an answer, and your IP address is used briefly to limit the number of requests. Please don’t enter personal or sensitive information there.
• Consultant application form: what you enter on our For Consultants page, and the licence and photo you upload, go to our server functions and private file storage at Supabase; only our review team can see your licence. Your photo is resized and its hidden details, such as location data, are removed in your browser before it is uploaded. Nothing is reviewed until you confirm your email address, and you can ask for a manage link at any time to check or withdraw your application.
• Manage-link form: if you enter your email address to get a manage link, we use it only to look for a listing or application with that address and, if we find one, to email the link there. The page never shows whether we found one.
• Emails we send: we use Resend to email you the link to confirm your address, our decision on your application, the manage links you ask for, a notice if your listing is linked to an app account (with a link to undo it) and, if you are listed without an app account, alerts about new consultation requests. Our emails contain no tracking pixels, and open and click tracking is switched off. Emails to consultants never include a client’s name, contact details or the text of their request, only how many requests are waiting.
• Confirmation page: the links in our emails open lawfe.com/consultant-confirm. The code in each link sits in the part of the address that browsers don’t send to servers, the page removes it from the address bar once it has been read, and nothing changes until you press the button on the page. This page doesn’t load Google Analytics or send its address to other sites. Public consultant pages (see section 4) don’t load Google Analytics either.
• Hosting: the website is hosted by Vercel, which processes technical request data, such as your IP address and browser type, in its server logs to deliver and protect the site.
• Emails: if you email us, we use your address and message only to reply and to keep a record of your request.

11. Changes

We may update this policy; we will post the new version here with an updated date and, for material changes, notify you in-app.

12. Contact

Questions or data requests: support@lawfe.com (or lawfeapp@outlook.com).

Lawfe is developed and published by Charbel Al Chaar and Elias Alzaghrini, Lebanon.