Plain answers about your data

Your phone number

Used once to text you a verification code when you join, and again when you log in. It proves you’re one real person — that’s the entire job. It is never shown to another member, never used for marketing you didn’t ask for, and never sold. It is the one real-world identifier we keep.

A handle you choose

Your name here. You can carry different handles in different rooms, so even your ideas can’t be stitched together into a profile of you by other members.

An email, only when you hand us one for a job

A donation receipt (that address lives with Stripe, our payment processor — our own database has no donor list), notifications you switched on (removable anytime, and unsubscribe works straight from the email, no login), or writing to us.

What you choose to bring

Posts, survey answers and the notes you attach to them, your watchlist, favorites, and the everyday details you tell your AI. When you import something — contacts, bank rows for a budget — we keep only the entries you individually tap. The file itself is never kept.

Payment records, barely

Stripe handles money start to finish; your card number never touches our servers. We keep a card fingerprint — a code Stripe issues, not your number — so a card can’t be used to create endless memberships.

Receipts of your choices

Every optional data use starts switched off. When you say yes or no, we record the exact wording you saw and when — so both of us can always check what was actually agreed.

Your real name

There is no field for it. We couldn’t leak or sell what we never asked for.

Your AI conversations

They live in your browser and vanish when the tab closes — unless you tap Keep, in which case that conversation is stored for you alone.

IP addresses

Not stored in our database. They’re used only in passing memory to slow down abuse, then gone.

Anything a crisis brings you here with

Safe Harbor conversations are never written to our database and never analyzed, and the safety pages carry no analytics at all. The Safe Harbor vault is encrypted on your own device with keys we never have — if we were forced to hand it over, we could not read it.

Card details (which never touch our servers), a donation’s receipt email and the name you type, and your phone number inside membership checkout records.

The text of AI conversations, and for your own AI, the picture you’ve built — under your handle, never a name, never your reading list.

Where member data lives. Every table is locked with row-level security; the only road in is through our servers.

Serves the site, and counts page visits (counts, not profiles). Switched off entirely on the safety pages.

Your phone number, to text you a login code.

The address and contents of email we send you or you send us.

Survey answers only — no handle, no member id, no email attached.

The shipping name and address you give Stripe when you order a physical item.

If you click a shop link, Amazon sees its own search and pays us a small commission through a 24-hour cookie it sets. Amazon learns nothing about your membership from us.

When a web lookup runs, the question text goes to the lookup provider — the question, not you.

Download everything

One tap on your member page exports everything we hold about you — your words, answers, messages, receipts, all of it. “Everything” is the promise.

Delete yourself, two ways

Leave your words behind (re-signed as from a former member) or take them with you. Either way your identity, phone number, and vault are erased, and your handles retire forever — nobody can wear them after you.

Messages kept only by mutual choice

A direct conversation is saved only if both people choose to keep it.

Every optional use starts at no

Consent switches default off. Flip one, and the receipt records the exact words you agreed to. Flip it back anytime.