Privacy Policy

• Account details: your name, email and password. Passwords are stored scrambled (hashed) by our sign-in provider, so no one can read them. If you sign in with Google, Google gives us your name and email.
• Your study: the cards you study and how you rate them, your card schedule, your answers to questions, your blocks and marked questions, and your settings, such as cards and questions per day.
• What you write: notes, error reports, and the questions you ask in the Ask box.
• Your plan: which plan you're on and whether it's active. Stripe takes your card details; we never see your full card number.
• Technical details: the cookies that keep you signed in, and the basic logs, such as IP address and browser, that our hosting and database providers keep to run and protect the service.

• to run the service: schedule your cards, build your question blocks and show your progress
• to manage your account and plan, and to answer you when you write to us
• to fix errors that you report in the content
• to keep the service secure and stop misuse
• to meet legal duties, such as keeping payment records

We don't sell your data, use it for advertising, or let other companies use it for their own purposes.

Only you can see your notes and your study. Our reviewers see the error reports you send. These providers help us run the service, each only for its own job:

• Supabase: our database and sign-in
• Vercel: hosts the website
• Stripe: takes payments
• OpenRouter, and the AI model it sends the request to: answers Ask box questions, so they receive the question you type
• Resend: sends account emails
• Google: only if you choose to sign in with Google

We may also share information when the law requires it, or with a buyer if the business is ever sold, who would have to keep to this policy.

We use only the cookies needed to keep you signed in. Your browser also holds your latest study answers until they're saved, so nothing is lost if your connection drops. We don't use advertising or tracking cookies. If that changes, we'll update this policy first, and ask for your consent where the law requires.

We keep your data while your account is open. If you delete your account, we delete your data within 30 days, apart from what the law makes us keep, such as payment records. Copies in our backups are overwritten over time.

You can ask to see, correct, download or delete your data, or object to how we use it. Write to support@thesutureself.com and we'll answer within 30 days. Depending on where you live, such as the EU, the UK or California, you may have further rights, including complaining to your data protection authority.

Our providers store and process data in the United States and other countries. Where the law requires, transfers are protected with approved safeguards.

Data is encrypted on its way to and from the service, and our providers encrypt it where it's stored. Each person's data is kept apart, so only they can read it. No system is perfectly secure; if a breach affects your data, we'll tell you as the law requires.

The service is for people 18 and older. If we learn that we hold data about someone younger, we delete it.

When we update this policy we'll change the date at the top, and for important changes we'll tell you by email or in the app before they apply.

Privacy questions and requests: support@thesutureself.com.