Privacy Policy
Draft — under legal review. This page describes our current practice but has not yet been finalised by a lawyer.
1. What we collect
- Account information: your email address and any profile details you add (username, display name).
- Idea content: the ideas, answers, and reports you create.
- Basic analytics events (page views, session activity) to understand product usage — no third-party ad trackers.
2. Who processes it
Your data is processed by the infrastructure providers that run the service:
- Supabase — database, authentication, and storage.
- Vercel — application hosting.
- Anthropic — the AI API used to generate your report content.
- Inngest — background job processing for report generation.
Each processes only what's needed to run the service. We don't sell your data to anyone.
3. Why we collect it
To generate your reports, run your account, keep the service reliable, and understand how the product is used so we can improve it.
4. Deletion
You can delete your account at any time from account settings. Deletion is permanent — your ideas, answers, and reports are erased and cannot be recovered.
5. Your rights
For questions about what data we hold on you, or to request deletion outside of the self-service flow, reach out via the contact page.
6. Cookies
We use three categories of first-party cookies, and nothing from third-party ad networks:
- Necessary — Supabase authentication (keeps you signed in),
ie_consent(remembers your cookie choice), andie_ab(fraud prevention for free-report promotions). These are required for the site to function and are never gated behind a choice. - Functional— your theme preference (light/dark), stored in your browser's local storage rather than a cookie. Disclosed here, not gated.
- Analytics — a session cookie and a persistent visitor cookie (
ie_vid) we use to count page views and understand product usage. Off by default; you choose whether to allow it in the cookie banner or via "Cookie preferences" in the footer.
If you decline analytics, we send a single anonymous page-view ping (no persistent identifier, no ie_vid) so we can still see that a visit happened — after that, nothing further is tracked for that visit. Accepting or declining never changes what the product itself can do.
During promotional periods offering free reports, we also retain a hashed (not raw) version of your IP address to help prevent abuse of the offer.
7. Changes to this policy
We may update this policy as the product develops. Material changes will be reflected on this page with an updated review status.