diff --git a/PRIVACY_POLICY.md b/PRIVACY_POLICY.md
new file mode 100644
index 0000000..dd5dd84
--- /dev/null
+++ b/PRIVACY_POLICY.md
@@ -0,0 +1,75 @@
+Privacy Policy
+
+Last updated: 06.01.2026
+
+1. Controller / Contact
+
+Application: DeepFake
+
+Owner/Controller: Kristian Cerni
+
+Contact: https://github.com/KrisHD1337
+
+This policy applies to all users within Switzerland, the EU, and other jurisdictions.
+
+2. What We Collect
+
+We collect only what’s needed to provide our service:
+
+Account Data: Username, email (optional), hashed password
+
+Chat Data: Messages you send and the AI responses
+All data is processed to provide your chat history and account functionality.
+
+3. Legal Basis (GDPR)
+
+For EU/EEA users, we process data based on:
+
+Contract performance (to provide your account and chat history)
+
+Legitimate interests (system security, fraud prevention)
+Your data will not be processed for marketing without explicit consent.
+
+4. How We Use Data
+
+Your data is used to:
+
+Authenticate and manage your account
+
+Store and retrieve chat history
+
+Improve and maintain the app
+
+We do not sell your data.
+
+5. Data Retention
+
+We retain data as long as your account is active. If you request deletion, your data will be deleted unless we must retain it for legal reasons.
+
+6. Data Transfers
+
+Your data may be stored or processed where our servers reside. Switzerland has an adequacy decision with the EU, meaning transfers can occur without additional safeguards.
+
+7. Your Rights (GDPR + Swiss rights)
+
+Depending on jurisdiction, you may have the right to:
+
+Access your data
+
+Correct inaccuracies
+
+Request deletion
+
+Restrict or object to processing
+
+Request data portability (GDPR)
+
+To exercise these rights, contact us at: kriscerni@gmail.com
+
+8. Data Security
+
+We implement reasonable technical and organisational measures to protect your data — encryption for passwords and secure database access.
+
+9. Changes to this Policy
+
+We may update this document. Changes will be posted with a “Last updated” date.
\ No newline at end of file
diff --git a/README.md b/README.md
index 0e920f0..59593ca 100644
--- a/README.md
+++ b/README.md
@@ -1,2 +1,6 @@
# KrisHD_AI
AI Frontend for ai.krishd.ch
+
+## Legal
+- [Privacy Policy](PRIVACY_POLICY.md)
+- [Terms of Service](TERMS_OF_SERVICE.md)
\ No newline at end of file
diff --git a/TERMS_OF_SERVICE.md b/TERMS_OF_SERVICE.md
new file mode 100644
index 0000000..f84e941
--- /dev/null
+++ b/TERMS_OF_SERVICE.md
@@ -0,0 +1,17 @@
+Terms of Service
+
+Last updated: 06.01.2026
+
+Use of DeepFake AI is subject to the following terms:
+
+Service
+You agree that DeepFake is provided “as is,” and functionality may change.
+
+User Conduct
+You are responsible for content you submit and maintaining secure account credentials.
+
+Data Processing
+By using the service, you consent to storing and processing your data as described in the Privacy Policy.
+
+Limitation of Liability
+We are not liable for service interruptions or data loss.
\ No newline at end of file
diff --git a/public/index.html b/public/index.html
index ba1fcf6..69240fa 100644
--- a/public/index.html
+++ b/public/index.html
@@ -46,6 +46,15 @@
Create password
+
Your data will not be processed for marketing without explicit consent.
+
+
+
+
4. How We Use Data
+
Your data is used to:
+
+
Authenticate and manage your account
+
Store and retrieve chat history
+
Improve and maintain the app
+
+
We do not sell your data.
+
+
+
+
5. Data Retention
+
We retain data as long as your account is active. If you request deletion, your data will be deleted unless we must retain it for legal reasons.
+
+
+
+
6. Data Transfers
+
Your data may be stored or processed where our servers reside. Switzerland has an adequacy decision with the EU, meaning transfers can occur without additional safeguards.
+
+
+
+
7. Your Rights (GDPR + Swiss rights)
+
Depending on jurisdiction, you may have the right to: