Privacy Policy

1. Information We Collect

Account Information

When you create an account, we collect:

• Email address - Required for account creation and communication
• Name - Optional, for personalization
• Phone number - Required for Crisis Helper access, verified via SMS
• Password - Encrypted and stored securely (we cannot see your password)

Onboarding Data

During onboarding, we collect:

• Social anxiety triggers you select
• Baseline anxiety level (1-10 scale)
• Time budget preferences
• Practice modality preferences (voice/text)
• Other preferences to personalize your experience

Usage Data

We automatically collect:

• Practice sessions - Challenge completions, conversation transcripts (text only), confidence ratings, notes
• Crisis Helper calls - Structured output data (protocol steps, effective language, crisis type, improvement level) - NOT full call transcripts
• Tool usage - Which tools you use, when, and how often
• Progress data - Your practice history, achievements, and neural pathway progress
• Error logs - Technical errors to help us improve the service

Technical Data

For security and service improvement, we collect:

• IP address - For security and abuse prevention
• Device fingerprint - Browser characteristics for abuse detection (not personally identifiable)
• User agent - Browser and device type
• Page views and clicks - To understand how you use the service

Payment Information

Payment processing is handled by Stripe. We store:

• Stripe customer ID (not your card details)
• Subscription status and billing period
• Payment history (amounts and dates only)

2. What We Do NOT Collect

• Audio recordings - Voice conversations are processed in real-time and not permanently stored. We only store text transcripts of conversations.
• Location data - We do not track your physical location
• Third-party data - We do not purchase or import data from other sources
• Social media data - We do not access your social media accounts

3. How We Use Your Information

We use your data to:

• Provide the service - Deliver tools, track progress, personalize your experience
• Process payments - Manage subscriptions and billing
• Improve the service - Analyze usage patterns, fix bugs, add features
• Ensure security - Detect abuse, prevent fraud, protect user accounts
• Communicate with you - Send important updates, respond to support requests
• Comply with legal obligations - Meet legal requirements and respond to lawful requests

4. Data Sharing and Disclosure

We may share your data only in these limited circumstances:

• Service providers - Stripe (payments), Supabase (database hosting), Anthropic (AI text), ElevenLabs (AI voice), Vapi (voice calls). These providers are contractually required to protect your data.
• Legal requirements - If required by law, court order, or government request
• Safety and security - To protect our users, prevent fraud, or respond to emergencies
• Business transfers - In the event of a merger, acquisition, or sale of assets (with notice to users)

5. Data Storage and Security

Where Your Data is Stored

Your data is stored securely on Supabase servers (hosted on AWS). All data is encrypted in transit (HTTPS) and at rest.

Security Measures

• Encrypted database connections
• Row-level security (users can only access their own data)
• Secure authentication via Supabase Auth
• Regular security audits and updates
• Access controls for admin users

Data Retention

• Account data - Retained while your account is active
• After account deletion - Data is permanently deleted within 90 days
• Crisis Helper calls - We store structured output data (not full transcripts) for 12 months to improve our service. This includes protocol steps used, effective language patterns, crisis type, and improvement level.
• Conversation Helper transcripts - Text transcripts are stored for 12 months, then automatically deleted. Anonymized analytics data may be retained longer.
• Situation Helper conversations - We keep your 5 most recent advice conversations. Older conversations are automatically deleted.
• Real World Helper progress - Retained for 12 months, then anonymized for aggregate analysis
• Anonymized analytics - Aggregated, anonymized data (user identifiers removed) may be retained longer for service improvement
• Legal/regulatory requirements - May require longer retention of certain records

Data Analysis

We analyze aggregated, anonymized data to improve our services:

• All analysis is anonymized - User identifiers (user ID, email, phone) are removed before analysis
• Pattern analysis only - We analyze patterns across all users, not individual users
• Purpose - To improve prompts, identify gaps in coverage, and develop new features
• What we analyze - Crisis call effectiveness, common situations, scenario usage, challenge completion rates
• Privacy protection - No personal information is included in analysis. Only aggregated statistics and patterns.

6. Your Rights and Choices

You have the right to:

• Access your data - View all data we have about you
• Correct your data - Update inaccurate information in your account settings
• Delete your data - Request account deletion (data deleted within 90 days)
• Export your data - Request a copy of your data in a portable format
• Opt out of analytics - Disable non-essential tracking (contact support)
• Cancel your subscription - Cancel anytime from your billing page

7. Cookies and Tracking

We use minimal cookies and tracking:

• Authentication cookies - Required to keep you logged in
• Session storage - Temporary data stored in your browser for app functionality
• Local storage - Progress data cached locally for faster loading
• No third-party advertising cookies - We do not use advertising trackers

8. Children's Privacy

Our service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

9. International Users

Our service is hosted in the United States. If you are using our service from outside the US, your data will be transferred to and stored in the US. By using our service, you consent to this transfer.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes via email or through our service at least 30 days before they take effect. Continued use of the service after changes indicates your acceptance of the updated policy.

11. Contact Us

Questions about privacy? We're here to help: