Privacy Policy

1. Information We Collect

We collect information you provide directly to us, including:

• Account information: email address and password when you create an account
• Name: optional, provided during sign-up or chart generation
• Birth data: date of birth, time of birth, birth city (latitude/longitude and timezone) — used to generate your Human Design chart
• Payment information: processed securely by Stripe; we do not store your credit card details
• Usage data: pages visited, features used, and interactions with the Service
• Journal entries: reflections and notes you choose to save within the app
• IP address and approximate location: collected automatically when you access the Service
• AI conversation content: questions you ask about your chart, used solely to generate your response

2. How We Use Your Information

We use the information we collect to:

• Generate and display your personalized Human Design chart
• Provide AI-powered guidance and transit readings
• Process payments and manage subscriptions
• Send transactional emails (account confirmation, password resets)
• Improve and develop new features for the Service
• Respond to your comments, questions, and support requests

AI conversations: Questions you ask about your chart are sent to Anthropic's Claude API to generate responses. We do not use your conversations to train AI models. Conversation data is not stored beyond what is necessary to generate your response, unless you explicitly save a journal entry.

3. Data Storage and Security

Your data is stored securely using Supabase (hosted on AWS). We use industry-standard encryption for data in transit (TLS/SSL) and at rest. While we take reasonable measures to protect your information, no method of electronic transmission or storage is 100% secure.

4. Data Sharing

We do not sell your personal information. We may share your data only in the following circumstances:

• Service providers: Stripe (payments), Supabase (database), Anthropic (AI responses), Vercel (hosting), Klaviyo (transactional and marketing email), PostHog (product analytics)
• Legal requirements: when required by law, regulation, or legal process
• Business transfers: in connection with a merger, acquisition, or sale of assets

5. Cookies and Tracking

We use essential cookies to maintain your session and authentication state. We do not use third-party advertising cookies. Analytics data is collected to improve the Service and is not shared with advertisers.

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Delete your account and all associated data
• Export your data in a portable format
• Opt out of marketing communications

• To access your data: email hello@humandesignos.com
• To delete your account: use "Delete Account" in Settings, or email us
• To request a data export (JSON format): email us and we will provide it within 30 days
• California residents: we do not sell your personal information (CCPA)
• EU/EEA residents: you may lodge a complaint with your local data protection authority

To exercise any of these rights, contact us at hello@humandesignos.com

7. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act. You may request disclosure of the categories and specific pieces of personal information we have collected, request deletion of your data, and opt out of any sale of personal information (we do not sell personal information).

8. International Users (GDPR)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, we process your data under the legal basis of consent (which you provide when creating an account) and legitimate interest (to operate and improve the Service). You have the right to withdraw consent at any time and to lodge a complaint with your local data protection authority.

9. Children's Privacy

Human Design OS is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you are under 16 and located in the EU/EEA, please have a parent or guardian review this policy before using our Service. If we become aware that we have collected data from a child under 13, we will delete it promptly.

10. Data Retention

We retain your account data for as long as your account is active. Upon account deletion, your personal data is soft-deleted within 24 hours and permanently deleted within 30 days. Payment records are retained for 7 years as required by applicable law.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page. Continued use of the Service constitutes acceptance of the updated policy.

12. Contact

If you have questions about this Privacy Policy or your data, contact us at hello@humandesignos.com