Privacy
Last updated: August 15, 2026.
Sign-in and your email
During the pilot, access requires a one-time email sign-in link. Your email lives only in our sign-in system and is deliberately kept separate from your conversations. Nothing you say is stored with, or connectable to, your email address. Support cannot look up your conversation, ever.
What we don't collect
No password, no name, no phone number, no profile. Conversations are keyed to a random anonymous identifier in your browser, not to you.
What we do store
A random anonymous identifier in a signed browser cookie, the messages of your conversation, your optional 0 to 10 check-in answers, and internal progress notes the system uses to guide the conversation. If you use voice input, audio is transcribed and immediately discarded. Recordings are never stored.
Who processes it
Conversations are processed by Anthropic (language model), stored with Supabase (database), and served via Cloudflare (hosting). Voice transcription, when enabled, uses a speech-to-text provider. Each receives only what is needed to run the conversation, never your identity, because we don't have it.
Deletion
The delete button on your conversation removes the session, all messages, and all internal notes immediately and permanently. Clearing your cookies orphans any remaining sessions. They can never be reconnected to you or to anyone.
What we never do
No advertising, no sale of data, no cross-site tracking, no analytics tied to your conversation content, and no use of your conversations to train models.