Privacy Policy — starter draft

This is a product-development draft, not legal advice. Have a UK privacy professional review it before launch.

Last updated: 16 September 2026.

What we collect

Account information may include display name, email address, self-selected belief identity and consent preferences. Test data may include target identifiers, responses, scores, timestamps, test type and scoring version.

Why we use it

We use account data to provide login and profile features. We use test data to show personal history and reports. Where a user separately opts in, anonymised or pseudonymised test data may also be used for aggregate platform analysis and published findings.

AI processing

Prediction text and remote-viewing responses may be processed by OpenAI's API from our server to prepare prediction outcomes and calculate semantic similarity scores. The OpenAI API key remains server-side and is never exposed in the browser. We configure these requests not to be stored by the API where supported.

Firebase

The production site is designed to use Firebase Authentication and Firestore. You should configure data location, retention, access controls and any analytics products in line with your final privacy policy.

Your choices

Users should be able to change research consent without losing access to the core service. Production launch should also provide account deletion and data-export routes.

Contact

Add your legal business name, postal address and privacy contact email before launch.