Privacy Policy

When you create a free log, YourView does not ask for your name, email, or phone number. Instead, your browser receives a single private link containing a random access token. That token is your only credential. We store only a one-way cryptographic hash (SHA-256) of it — never the token itself — so the link cannot be reconstructed from our database. Because there is no email or password, YourView has no way to contact you and no way to recover your data if you lose your link.

You provide, and we store, only what you choose to log:

• Check-ins (self-rated sleep, energy, appetite, overall feel, optional weight and notes).
• Quick logs (free-text entries you write, optionally parsed into structured fields).
• Mood check-ins, life events, and journal entries you create.
• Substances or supplements you record taking, with the doses you enter.
• Optional profile fields (age, biological sex, starting measurements) — all optional.

We ask you not to enter identifying details (names, exact locations, contact information, provider names) in free-text fields, and we remind you of this beside those fields.

For anonymous accounts we do not collect your name, email address, phone number, precise geolocation, device advertising identifiers, or government identifiers. We do not use third-party advertising or cross-site tracking technologies.

We use strictly necessary cookies only: an httpOnly session cookie that keeps you signed in to your own log after you open your private link, and a cookie recording your browser's timezone so dates show on the correct day. The timezone value stays in the cookie and is never written to our database. We set no advertising or analytics cookies [COUNSEL: confirm before adding any analytics provider].

When you use the natural-language quick-log feature, the text you write is sent to our AI provider (Anthropic) to convert it into structured fields you then review before saving. This text is processed to provide the feature and is not used to train models [COUNSEL: confirm current Anthropic API data-use terms and cite them]. You can always log without AI.

Data is stored in a managed PostgreSQL database (Supabase), encrypted at rest and in transit. Access is restricted at the database level so that each log is reachable only through its own authenticated session. Uploaded files (such as purity reports) are kept in private storage and are never publicly reachable.

A core purpose of YourView is contributing to observational research. Any research or administrative view shows only aggregated statistics across many participants, with small groups suppressed (cells representing fewer than {n} people are hidden) [COUNSEL: confirm the suppression threshold (currently 10) in the final copy]. You are never individually identifiable in these views, and your raw entries are never sold.

If you choose to create a verified account, we collect the minimum needed to authenticate you (for example, an email address for sign-in) and to manage billing. Identity information is held separately from your health data [COUNSEL: describe the identity-plane separation and Stripe billing data per the final verified-accounts design]. The anonymous free tier is unaffected.

[COUNSEL: describe the circumstances under which YourView could be compelled to disclose data, consistent with the verified-accounts disclosure, and what remains technically impossible for anonymous accounts].

You can delete your entire log at any time from within the app. Deletion is permanent and immediate: it removes your participant record and every entry linked to it, with no soft-delete or backup restore of your content [COUNSEL: confirm backup retention windows]. [COUNSEL: add any additional rights required by applicable law (e.g. access/export, GDPR/CCPA, and how to exercise them)].

YourView is intended for adults 18 and older and is not directed to children.

We will update this policy as the product evolves and will revise the “last updated” date above. Material changes will be communicated [COUNSEL: specify how].

Questions about privacy can be directed to [COUNSEL: privacy contact email and legal entity name/address].