Privacy Policy

Hidden Self is operated as an independent application ("we", "us", "our"). For privacy inquiries, contact us at: support@usehiddenself.com

Information you provide directly: • Journal entries (text content you write) • Daily check-in responses and mood selections • Profile information (name, age, gender — all optional) • Account credentials (email and password, managed by Supabase Auth) Information generated by the app: • AI-generated insights, reflections, and pattern analyses derived from your journal entries • Depth layer progress (a numerical indicator of journaling consistency, 1-5) • Weekly archetype card assignments (a reflection tool, not a psychological assessment) • Cached pattern association data stored to your account • Subscription status and entitlement data (managed by RevenueCat) Information collected automatically: • Anonymous usage analytics including feature interactions, session frequency, and general app behaviour (collected via PostHog) • Device platform (iOS or Android) • API call counts per day (for rate limiting purposes) We do NOT collect: • Precise location data • Contacts or address book data • Photos, camera, or microphone data • Biometric data of any kind • Browsing history outside the app

We use the information we collect solely to: • Provide, operate, and maintain the Hidden Self application • Generate AI-powered reflections and insights from your journal entries • Cache and display your insight history • Process and manage your subscription • Enforce daily API usage limits • Analyse anonymous aggregate usage patterns to improve the app • Respond to support requests We do NOT use your information to: • Serve advertisements of any kind • Build advertising profiles • Sell, rent, or trade your data to third parties • Train AI or machine learning models on your personal journal content • Make automated decisions that produce legal or similarly significant effects

We share your information only with the following third-party service providers, solely as necessary to operate the app: Supabase (supabase.com) Purpose: Database storage and user authentication Data shared: Journal entries, check-ins, profile data, AI-generated insights, account credentials Location: United States Anthropic, PBC (anthropic.com) Purpose: AI text processing to generate reflections and insights Data shared: The plain text content of journal entries submitted for analysis. We do NOT send your name, email, age, gender, or account identifiers to Anthropic. Location: United States Note: Anthropic processes your entry text to generate a response and does not retain it for model training under standard API usage terms. RevenueCat (revenuecat.com) Purpose: Subscription management and entitlement verification Data shared: Anonymous user identifier, subscription status, purchase events Location: United States PostHog (posthog.com) Purpose: Anonymous usage analytics Data shared: Anonymous user identifier, feature interaction events, session data. We do NOT send journal content, mood data, entry text, or personal profile information to PostHog. Location: United States We do not share your information with any other third parties. We do not sell your data. Ever.

Your data is stored in Supabase's cloud infrastructure, located in the United States. We implement the following security measures: • Encryption in transit (TLS/HTTPS) for all data transmitted between the app and our servers • Row-level security policies ensuring users can only access their own data • Authentication token validation on all API requests • Rate limiting on AI processing requests to prevent abuse No method of electronic storage or transmission is 100% secure. While we implement commercially reasonable security measures, we cannot guarantee absolute security of your data. We retain your data for as long as your account remains active. If you delete your account or use the "Delete All My Data" function in Settings, all of your data is permanently and immediately deleted, including all journal entries, check-ins, AI-generated insights, profile information, and usage history. This deletion is irreversible.

Depending on your location, you may have the following rights regarding your personal data: • Right to access: Request a copy of your data (use Settings → Export My Data) • Right to deletion: Delete all your data (use Settings → Delete All My Data) • Right to correction: Update your profile information (use Settings → Edit Profile) • Right to portability: Export your data in JSON format (use Settings → Export My Data) For any privacy requests not addressed by in-app features, contact us at support@usehiddenself.com. We will respond within 30 days.

Hidden Self is not directed to, and we do not knowingly collect personal information from, individuals under the age of 17. If we become aware that a user under 17 has provided personal information, we will take steps to delete such information. If you believe a minor has provided us with personal information, contact us at support@usehiddenself.com.

Hidden Self is operated from Canada. If you are accessing the app from outside Canada or the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where our third-party service providers operate. By using the app, you consent to this transfer. California Residents (CCPA) If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA). We do not sell personal information. You have the right to know what personal information we collect, to request deletion, and to non-discrimination for exercising your rights. European Users (GDPR) If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR). Our legal basis for processing your data is your consent and the performance of our contract with you. You have the right to withdraw consent at any time by deleting your account.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top. For material changes, we will notify you through the app. Your continued use of Hidden Self after any changes constitutes your acceptance of the updated policy.

For privacy questions, data requests, or concerns: Email: support@usehiddenself.com Website: usehiddenself.com