Privacy Policy

Hidden Self is operated by Isochasm Labs Ltd. ("we", "us", "our"), a company incorporated in British Columbia, Canada. For privacy inquiries, contact us at: support@usehiddenself.com

Information you provide directly: • Journal entries (text you write, or speech transcribed to text) • Photos and videos you choose to attach to an entry • Account credentials (email and password), if and when you choose to create an account Information generated by the app: • AI-generated observations, brief daily reflections, and classifications derived from your entries • Automatically-formed "chapters" (clusters of related days, shown as planets or constellations on your map) and their AI-generated names and summaries • Your map layout — the position of your stars and chapters is computed and stored so your map stays consistent over time • Streak and account-age data, used to determine your "fog of war" progress on the map • Achievement/discovery records (which unique events or objects you've unlocked in the in-app Almanac) • Subscription status and entitlement data (managed by RevenueCat) Information collected automatically: • Device platform (iOS or Android) • API call counts per day (for rate-limiting purposes only) We do NOT collect: • Precise location data • Contacts or address book data • Camera or microphone recordings permanently. Voice entries are sent securely to a third-party transcription service to convert speech to text; the audio itself is not stored afterward, only the resulting text • Biometric data of any kind • Browsing history outside the app

Hidden Self allows you to use the app immediately without creating an account, using an anonymous, device-generated identifier. Journal entries, photos, and all other data described in this policy are collected and stored under this anonymous identifier in exactly the same way as for a registered account, and are subject to the same retention and deletion rules described in Section 6 — using the app anonymously does not shorten, lengthen, or otherwise change how your data is retained or protected. If you later choose to create an account (adding an email and password), your existing anonymous data is carried over to that account automatically; it is not deleted or treated differently as part of that process.

We use the information we collect solely to: • Provide, operate, and maintain the Hidden Self application • Generate brief AI-powered observations and pattern classifications from your entries • Automatically detect and render chapters, plan your map's visual layout, and track your account's progress (streaks, unlocked achievements) • Process and manage your subscription • Enforce daily API usage limits to prevent abuse • Respond to support requests We do NOT use your information to: • Serve advertisements of any kind • Build advertising profiles • Sell, rent, or trade your data to third parties • Train AI or machine learning models on your personal journal content • Make automated decisions that produce legal or similarly significant effects

We share your information only with the following third-party service providers, solely as necessary to operate the app: Supabase (supabase.com) Purpose: Database storage, authentication (including anonymous/guest sessions), and account management Data shared: Journal entries, account credentials, map/chapter data, achievement records Location: United States Privacy policy: supabase.com/privacy Supabase Storage — Photos and Videos Photos and videos you attach to an entry are uploaded to private cloud storage buckets, accessible only to your own account and never made public. Photos and videos are permanently deleted, along with the rest of your data, if you delete your account. Anthropic, PBC (anthropic.com) Purpose: AI text processing to generate brief observations and automatically detect chapters Data shared: The plain text content of your entries (or their AI-generated summaries) submitted for processing. We do NOT send your name, email, age, gender, photos, or account identifiers to Anthropic. Location: United States Privacy policy: anthropic.com/privacy RevenueCat (revenuecat.com) Purpose: Subscription management and entitlement verification Data shared: Anonymous user identifier, subscription status, purchase events Location: United States Privacy policy: revenuecat.com/privacy OpenAI (openai.com) Purpose: Converting voice entries to text Data shared: The audio recording of a voice entry, sent solely for transcription. The audio is not retained by us or, per OpenAI's stated policy for this service, by OpenAI after the text is returned. Location: United States Privacy policy: openai.com/privacy PostHog (posthog.com) Purpose: Basic, anonymized product analytics to understand how the app is used, so we can improve it Data shared: An anonymous or account-linked identifier and general usage events. We do NOT send your journal entries, photos, videos, or any personal content to PostHog. Location: United States Privacy policy: posthog.com/privacy We do not share your information with any other third parties. We do not sell your data. Ever.

Your data is stored in Supabase's cloud infrastructure, located in the United States. We implement the following security measures: • Encryption in transit (TLS/HTTPS) for all data transmitted between the app and our servers • Row-level security policies ensuring users can only access their own data • Authentication token validation on all API requests • Rate limiting on AI processing requests to prevent abuse No method of electronic storage or transmission is 100% secure. While we implement commercially reasonable security measures, we cannot guarantee absolute security of your data.

We retain your data for as long as your account remains active — this applies equally whether your account is anonymous/guest or fully registered with an email and password. If you delete your account, all of your data is permanently and immediately deleted from our systems, including: • Every journal entry, photo, and video • Every chapter, planet, and constellation your entries have formed • Your map layout, streak, and achievement/discovery records • Your profile and account credentials This deletion is irreversible. We do not retain backups of deleted user data beyond standard database backup windows (maximum 30 days for infrastructure backups, after which deleted data is purged). Separately, Settings also offers a "Delete All My Data" option, which deletes your journal entries, photos, videos, chapters, and achievement records while keeping your account itself active and signed in.

Depending on your location, you may have the following rights regarding your personal data: • Right to access: Request a copy of your data • Right to deletion: Delete all your data, or your entire account, from Settings • Right to correction: Update your account information from Settings For any privacy requests not addressed by in-app features, contact us at support@usehiddenself.com. We will respond within 30 days.

Hidden Self is not directed to, and we do not knowingly collect personal information from, individuals under the age of 17. If we become aware that a user under 17 has provided personal information, we will take steps to delete such information. If you believe a minor has provided us with personal information, contact us at support@usehiddenself.com.

Hidden Self is operated from British Columbia, Canada. If you are accessing the app from outside Canada or the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where our third-party service providers operate. By using the app, you consent to this transfer.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA). We do not sell personal information. You have the right to know what personal information we collect, to request deletion, and to non-discrimination for exercising your rights. To exercise these rights, contact support@usehiddenself.com.

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR). Our legal basis for processing your data is your consent (given when you use the app) and the performance of our contract with you (providing the app service). You have the right to withdraw consent at any time by deleting your account. For data protection inquiries, contact support@usehiddenself.com.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top. For material changes, we will notify you through the app. Your continued use of Hidden Self after any changes constitutes your acceptance of the updated policy.

For privacy questions, data requests, or concerns: Email: support@usehiddenself.com Website: usehiddenself.com