Privacy Policy

We collect what we need to run your account and your governance work. We don't sell your data. We don't advertise to you. Your journal entries, decisions, mission, and board are yours. You can export them or delete them at any time by emailing the address at the bottom of this page.

• Account info: email, name, and any sign-in identifiers from Clerk (Google, Apple, Facebook).
• Profile data you enter: mission, role, board members, decisions, journal entries, ideas, mission edits.
• Technical logs: IP, browser, and timestamps, kept up to 30 days for security and abuse detection.
• Payment info: handled entirely by Stripe. We never see your card number.

• We don't use third-party advertising trackers.
• We don't sell or rent data to anyone.
• We don't use your content to train AI models without your explicit, separate consent.

• Clerk — authentication. Privacy
• Supabase — database hosting. Privacy
• Railway — application hosting. Privacy
• Stripe — payments. Privacy
• Anthropic — AI text features, when you use them. Privacy
• Google — the guided-meditation voice (text-to-speech). Privacy

Each one is a data processor acting on our instructions. None of them sell your data.

AI runs only when you ask it to. When you generate an advisory memo or another AI summary, the relevant content travels to Anthropic for processing and the response comes back. Anthropic does not train on this content per their commercial terms. You can disable AI features entirely in Settings.

The guided-meditation voice uses Google's text-to-speech. Only the fixed meditation script travels to Google, never your journal, decisions, or other personal content. The spoken audio is cached so the same line is generated once.

The Founded doubles as a research vehicle. Nothing is captured for research unless you turn it on in Settings. When you opt in, a small set of measures (like how settled you feel before and after a meditation) is stored de-identified: keyed to a random research ID, never to your name or email. It is voluntary, you can withdraw any time in Settings, and deleting your account deletes your research data too. This is not medical research and does not replace care.

• Access: request a copy of everything we have about you.
• Correction: edit your profile fields directly, or email us for anything you can't edit.
• Deletion: close your account from Settings, or email us. We delete within 30 days.
• Portability: we'll export your data as JSON on request.
• EU/UK residents: you have the additional rights under GDPR/UK-GDPR. Same email below.
• California residents: you have CCPA rights including the right to know, delete, and opt-out of sale (we don't sell).

The adult product is for users 18 and older. The youth product (Founded Emerging) collects parental consent before any data is stored, in line with COPPA. The youth app stores journal data on the device only and does not sync.

All data in transit uses TLS. Database access is restricted to the application and is protected by Row Level Security per user. We don't store passwords ourselves; Clerk handles authentication.

We'll post any material changes here with a new effective date. For account-affecting changes we'll also email you.

Privacy questions, data requests, deletions:
thefoundedproject@gmail.com

Dr. Stephen Thompson
The Founded Project