Effective Date: 1 January 2026
Last Updated: 3 June 2026

AT A GLANCE

Age Requirement: You must be 18 or older to use Dareful Self.

What We Collect: Your account info, the content you create (dreams, messages, tarot questions), and how you use the app.

Why: To provide AI features, personalize your experience, and improve the service.

Who We Share With: Only our service providers (Anthropic for AI, Supabase for storage, Apple for payments). We don't sell your data.

Your Rights: Access, download, correct, or delete your data anytime.

Questions? privacy@darefulworks.com

1. WHAT INFORMATION WE COLLECT

Information You Give Us

Account & Profile:

• Name, email, password (encrypted)

• Birth date, birth time, and location (for astrological calculations)

• Pronouns (optional)

• Self-discovery frameworks you select (MBTI, Enneagram, Astrology, Human Design, Numerology)

• Framework details (e.g., your MBTI type, Enneagram type, astrological signs)

• Communication and emotional vocabulary preferences

Content You Create:

• Dream journal entries

• Messages to the AI Companion

• Tarot reading questions

• Practice history (breathwork, meditation, affirmations)

Information We Collect Automatically

Device & Usage:

• Device type, operating system, IP address

• Features you use and how often

• Session duration and timestamps

• App performance and crash data

Location:

• General location (city, state) from IP address

• Precise location only with your explicit permission

Sensitive Information

Some data we collect is considered "sensitive" under privacy laws:

• Dream and chat content (may include health information)

• Precise geolocation (only if you grant permission)

• Account credentials (encrypted)

We use sensitive information only to provide the features you request.

2. HOW WE USE YOUR INFORMATION

We use your information to:

Provide the Service:

• Operate your account and authenticate you

• Generate AI responses (dream analysis, tarot readings, companion chat)

• Calculate astrological charts and numerology

• Track your practice progress and streaks

• Process payments and manage subscriptions

Personalize Your Experience:

• Customize AI responses based on your frameworks (MBTI, Enneagram, etc.)

• Remember your conversation history

• Tailor recommendations to your preferences

• Detect recurring themes in your dreams

Improve and Develop:

• Analyze usage patterns (in aggregate)

• Fix bugs and improve performance

• Develop new features

• Optimize AI models

Communicate:

• Send account-related emails (password resets, payment receipts)

• Notify you of service changes or new features

• Send marketing emails (only with your consent - you can unsubscribe anytime)

• Respond to your support requests

Safety and Compliance:

• Detect and prevent fraud

• Enforce our Terms of Service

• Comply with legal obligations

• Protect user safety and security

3. WHO WE SHARE YOUR INFORMATION WITH

We do not sell your personal information. Period.

We share your information only with:

Service Providers

Provider What They Do What We Share

Anthropic AI processing (Claude API) Your messages, dream entries, tarot questions, framework profile

Supabase Database, authentication, file storage All account and content data

Railway Application hosting Data processed through our servers

All service providers:

• Are contractually obligated to protect your data

• Can only use your information to provide services to us

• Cannot use your data for their own purposes

Note on Anthropic: Your AI conversations are processed by Anthropic's Claude API. Anthropic does not use your data to train their models without separate consent. See their Data Processing Agreement for details.

Other Sharing

Business Transfers: If we're acquired or merged, your information may transfer to the new owner. You'll be notified before this happens.

Legal Requirements: We may disclose information to comply with laws, court orders, or legal processes, or to protect rights and safety.

With Your Consent: We may share your information with third parties when you explicitly agree.

Anonymized Data: We may share aggregated, anonymized data that cannot identify you (usage statistics, research findings).

4. YOUR PRIVACY RIGHTS

Rights for All Users

Access: Request a copy of your personal information
Correction: Update inaccurate information
Deletion: Delete your account and data
Portability: Download your data in a structured format
Opt-Out: Unsubscribe from marketing emails

How to Exercise: Email privacy@darefulworks.com

California Residents (CCPA/CPRA)

You have additional rights:

Right to Know:

• What personal information we collect

• Why we collect it

• Who we share it with

• Request access to your specific information

Right to Delete:

• Request deletion of your personal information (with some exceptions for legal compliance)

Right to Correct:

• Request correction of inaccurate information

Right to Limit Sensitive Data Use:

• Limit our use of sensitive personal information (health-related content, precise location) to providing the Service only

Right to Non-Discrimination:

• We won't discriminate against you for exercising your privacy rights

Categories of Information We Collect (Last 12 Months):

• Identifiers (name, email, device IDs)

• Personal records (birth date, payment info)

• Commercial information (subscription status)

• Internet activity (app usage, feature interactions)

• Geolocation (general from IP, precise with permission)

• Inferences (wellness preferences, practice patterns)

• Sensitive information (account credentials, health-related content from dreams/chats)

We Do Not Sell or Share Your Information for advertising or cross-context behavioral advertising.

To Exercise California Rights:

• Email: privacy@darefulworks.com

• In-app: Account Settings > Privacy Rights

• We'll respond within 45 days

Authorized Agents: California residents may designate an agent to make requests. The agent must provide written authorization.

EU/UK Residents (GDPR)

Legal Basis for Processing:

• Contract: To provide the Service you requested

• Consent: For marketing and non-essential features (withdrawable anytime)

• Legitimate Interests: To improve our Service, ensure security, analyze usage

• Legal Obligation: To comply with laws

Your GDPR Rights:

• Right to access your data

• Right to rectification (correction)

• Right to erasure ("right to be forgotten")

• Right to restrict processing

• Right to data portability

• Right to object to processing

• Right to withdraw consent

International Transfers: Your data may be transferred to the US. We use Standard Contractual Clauses (SCCs) approved by the EU Commission to protect your data during transfers.

Lodge a Complaint: You have the right to complain to your local data protection authority:

• UK: Information Commissioner's Office (ICO) - ico.org.uk

• EU: Your local supervisory authority

To Exercise GDPR Rights: privacy@darefulworks.com

Nevada Residents

You have the right to opt out of the sale of personal information. We do not currently sell your information. If our practices change, we'll update this policy and provide an opt-out mechanism.

5. HOW LONG WE KEEP YOUR DATA

Data Type Retention Period Account information While your account is active + 30 days after deletion User content (dreams, messages) While your account is active + 30 days after deletion Practice history While your account is active + 30 days after deletion Payment records 7 years (tax and accounting requirements) Support inquiries 3 years Anonymized analytics Indefinitely (cannot identify you)

You Can Delete Anytime: Delete specific content in-app or delete your entire account in Account Settings. We'll complete deletion within 30 days.

Legal Exceptions: We may retain data longer if required by law, to resolve disputes, or to prevent fraud.

6. HOW WE PROTECT YOUR DATA

We implement industry-standard security measures:

Technical Safeguards:

• Encryption in transit (HTTPS/TLS)

• Encryption at rest (database encryption)

• Encrypted password storage (never stored in plain text)

Organizational Safeguards:

• Role-based access controls (employees access only what they need)

• Multi-factor authentication for administrative access

• Regular security audits and updates

• Secure hosting with SOC 2 certified providers

Your Responsibility:

• Use a strong, unique password

• Don't share your account credentials

• Notify us immediately of unauthorized access: security@darefulworks.com

No Guarantee: While we implement reasonable security, no system is 100% secure. Use the Service at your own risk.

Data Breach Notification: If a breach affects your personal information, we'll notify you within the timeframe required by law.

7. COOKIES AND TRACKING

What We Use

Essential Cookies: Required for the Service to function (login, security)
Functional Cookies: Remember your preferences and settings
Analytics Cookies: Help us understand how you use the app (may use third-party analytics)

Your Choices

• In-App Settings: Manage preferences in Account Settings > Privacy

• Opt-Out: You can opt out of non-essential cookies

Note: Blocking essential cookies may prevent you from using certain features.

Do Not Track: We don't currently respond to Do Not Track browser signals as there's no industry standard for how to handle them.

8. INTERNATIONAL USERS

Service Location: Our servers are primarily in the United States.

Data Transfers: If you're outside the US, your information will be transferred to and processed in the US.

Protections for EU/UK/Swiss Users:

• We use Standard Contractual Clauses (SCCs) for data transfers

• Data Processing Agreements with all service providers

• UK Addendum to SCCs for UK transfers

Your Rights Apply Everywhere: Regardless of where your data is processed, you have the rights described in Section 4.

9. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. When we do:

• We'll update the "Last Updated" date

• For material changes, we'll email you and/or show an in-app notification

• Your continued use after changes means you accept the updated policy

Material changes include: Changes to what data we collect, how we use it, who we share it with, or your rights.

Review Regularly: Check this policy periodically to stay informed.

10. CONTACT US

Privacy Questions or Requests: privacy@darefulworks.com

Security Concerns: security@darefulworks.com

General Support: support@darefulworks.com

Mail:
Dareful Works LLC
Attn: Privacy Officer
P.O. Box 162
Brevard, NC 28712
United States

Response Times:

• Privacy rights requests: 45 days (may extend to 90 days)

• Security concerns: 3 business days

• General inquiries: 5 business days

ACKNOWLEDGMENT

By using Dareful Self, you acknowledge that you:

• Are 18 years of age or older

• Have read and understand this Privacy Policy

• Agree to our collection, use, and sharing of your information as described

APPENDIX: CALIFORNIA NOTICE AT COLLECTION

This notice supplements our Privacy Policy for California residents.

What We Collect:

• Identifiers (name, email, device IDs, IP address)

• Personal records (birth date, billing address)

• Protected classifications (birth date for age verification)

• Commercial information (subscription status, purchase history)

• Internet activity (app usage, clicks, features used)

• Geolocation (general location from IP, precise with permission)

• Inferences (preferences, wellness patterns)

• Sensitive information (account login, health-related content, precise location)

Why We Collect:

• Provide and personalize the Service

• Process payments

• Improve features and performance

• Communicate with you

• Safety and security

Who We Share With: Service providers only (Anthropic, Supabase, Railway, Lemon Squeezy)

Sale or Sharing: We do not sell or share your personal information.

Your Rights:

• Right to know what information we have

• Right to delete your information

• Right to correct inaccurate information

• Right to limit use of sensitive information

• Right to non-discrimination

Exercise Your Rights: privacy@darefulworks.com