When you create an account, we store:
• Your email
• Your password (encrypted, never in plain text)
• Your product idea description
• Your personalized 30-quest plan
• Your daily check-ins and notes
• Payment information (handled by Stripe, not us)
• Account events (quest opened, prompt generated, etc.)
Everything is stored on Supabase, a server located in Europe.
🔴 Important: When you generate a quest prompt or check-in, we send to Claude (Anthropic's AI):
• Quest title
• Quest objective
• Your check-in status ("completed", "partial", "not started")
• Your evening notes (2 lines)
• Nothing else
Your personal data never goes to the AI. We don't send your email, full idea, or payment info.
Anthropic retains messages for up to 30 days, then deletes them. See their policy: https://www.anthropic.com/privacy
We use minimal localStorage to keep you logged in. We don't sell your data to advertisers or use invasive analytics.
⚠️ Verify: Check that the current site version doesn't have any hidden analytics we may have forgotten about.
We never see your card numbers. Stripe handles everything. We only store a Stripe customer ID to know you've paid. Read Stripe's policy: https://stripe.com/privacy
• While your account exists = we keep everything
• You delete your account = everything disappears within 30 days
• You cancel subscription = we keep your quests 1-3 free access
You can request anytime:
• A copy of your data (we'll email it)
• Deletion of your account and data
• Clarification on how we use your info
Email the founder in your account for any GDPR requests.
• Data in transit is encrypted (HTTPS everywhere)
• Passwords are encrypted in the database
• Supabase manages server security
• We don't have root access to user data (Row Level Security)
⚠️ Security audit needed: Before taking payments, have a security expert review the Supabase and Stripe configuration.
If this policy changes, we'll notify you by email. Major changes require your acceptance.
Last updated: September 2026