Privacy policy

The personalized path requires sign-in, affirmative confirmation that you are 18 or older, and acceptance of the current Terms and Privacy policy. We record the accepted versions, language and time. Consent to process sensitive wellness or health information is separate and is not selected for you.

You can withdraw sensitive-data consent in Account settings. Withdrawal blocks new personalized processing, interview-profile writes and session saves; existing saved data remains until you delete it. Account export and deletion remain available.

No paid subscription is currently offered. The application includes no advertising or analytics tracking.

The new personalized page keeps unsent descriptions and follow-up answers in the page’s memory. It does not save those raw fields in browser storage or your interview profile. Leaving or reloading can lose work that has not produced a completed draft.

For a completed signed-in draft, the service may retain one temporary recovery record for up to 24 hours when the current Privacy policy and sensitive-data consent cover that purpose. It contains the canonical generated result and limited session metadata, not the request body, free-text answers, raw prompt, or a substitute saved session.

Withdrawal and account deletion block access to a recovery record immediately. Expired records are inaccessible and are physically deleted when scheduled or lifecycle cleanup runs; withdrawal cleanup is asynchronous and can remain pending if it fails.

Submitting sends the information needed for server safety screening and, when explicitly enabled, session generation. A general-relaxation fallback uses a neutral goal instead of forwarding your original concern. The generated script may still reflect words you shared.

The separate guided interview can retain progress on your device. When you are signed in with the required consent and request an eligible session, it saves your interview answers to your account for reuse before generation. Those answers can remain saved even if generation later fails. You can clear the saved interview profile in Account settings. Do not include names, contact details or a full medical history.

Live text and narration providers are disabled by default. Text goes to a language model provider only when the live text gate has been explicitly enabled and you request an eligible session. A clearly labeled offline demonstration is not a live personalized result.

An audio provider receives the necessary session text only after an explicit narration request and when live narration is enabled. Saving a script does not itself request narration.

When the optional approved-playbook audit is explicitly enabled, TypeSafe Jev receives original approved guidance modules, fixed purpose and method selections, and application-owned catalog method rules. This audit does not send your raw description or follow-up answers. Its scores are model judgments about selected modules and method rules; they do not establish clinical effectiveness or full coverage of source books. Enabling this processor or changing its model requires renewed processing consent.

Provider identities, processing locations, retention terms and transfer safeguards must be verified and published before live processing. This version makes no promise about provider-side deletion or use beyond the configured request.

We store account identifiers, email, password hash or linked sign-in identity, display name, language, preferences and consent records. Saved interview profiles and saved session scripts are stored in the service’s PostgreSQL database.

A saved session includes its title, category, language, creation date, script and ending information where available. Internal source and safety-check records support traceability. The new personalized path keeps raw descriptions and follow-up fields out of separate saved records. A saved script may contain sensitive details.

After an explicit narration request, a verified final MP3 may be retained in encrypted application-controlled storage. An unattached recording expires after 24 hours. Explicitly saving a session links an available recording to it; the recording is retained until all linked saved sessions are deleted, your account is deleted, or sensitive-data consent is withdrawn. Storage and duration limits may prevent retention while current playback remains available.

Profile and script fields are not encrypted by the application at rest. Deployment-level disk encryption has not been verified; do not assume it is enabled.

Theme choice, legacy interview progress and relief ratings may use browser storage. Audio you choose to keep offline uses an app-managed device cache. Authentication uses necessary session cookies.

The application has no advertising, analytics or cross-site tracking cookies. Your browser may keep additional copies outside the application’s control.

Use Account settings to export your account data, change available preferences, clear the saved interview profile, or delete your account. Remove individual written sessions from Saved sessions.

Account deletion removes active application database copies, including the account, profile, saved sessions, consent history and related authentication records. It attempts to clear known app-managed browser entries and offline audio. The interface reports if device cleanup needs further action.

Deletion of production backups, security logs or processor records has not been verified. Their retention periods and any applicable legal retention obligations are not yet established in this notice.

The legal operator’s identity, address, registration details and public privacy contact are not yet configured. A working contact and an applicable rights-request process must be published before public launch.

The available account controls do not replace any rights you may have under applicable law. Legal bases, response periods and transfer arrangements require review for the countries where the service is offered. No legal review is claimed here.

The date above identifies this policy version. Updated policy acceptance is requested when required by the account’s consent rules.

This is an adult wellness service, not emergency support. Use the emergency contacts below for urgent help and review the Safety page before a session.