Privacy

Policy

Effective Date: 1 January 2026
Last Updated: 13 June 2026

AT A GLANCE

Age Requirement: You must be 18 or older to use Dareful Self.

What We Collect: Your account info, the content you create (dreams, messages, tarot questions), and how you use the app. During onboarding, we ask you to confirm you are 18+, accept our Terms and Privacy Policy, and consent to sharing your content with Anthropic for AI processing

Why: To provide AI features, personalize your experience, and improve the service.

AI-Powered Features: Dareful Self uses Anthropic's Claude AI to power the Companion, Dream Journal analysis, and Tarot readings. When you use these features, the content you submit (messages, dream entries, questions) and your framework profile are sent to Anthropic's servers for processing. Anthropic does not use this data to train their AI models. You will be asked to consent to this before first use. AI processing by Anthropic is core to Dareful Self's features. If you do not consent to this processing, or wish to withdraw consent, you may delete your account at any time in Settings.

Who We Share With: Only our service providers (Anthropic for AI, Supabase for storage, Apple for payments). We don't sell your data.

Your Rights: Delete your data; Access, correct, or request a copy by emailing privacy@darefulworks.com.

Questions? privacy@darefulworks.com

Dareful Self iOS app: We do not use advertising tracking (App Tracking Transparency), third-party analytics SDKs, browser cookies, or your device’s GPS. The app communicates with our API and Supabase using your sign-in token. Our servers may briefly use your IP address for rate limiting and abuse prevention; we do not store your IP as profile data or derive location from it.

1. WHAT INFORMATION WE COLLECT

Information You Give Us

Account & Profile:

  • Email address and optional display name (preferred name); sign-in uses one-time email codes (no password to choose or store)

  • Birth date (required during onboarding for age verification). Optional birth time and birth location (city/region you enter) in profile settings for astrology calculations when provided

  • Pronouns (optional)

  • Self-discovery frameworks you select (MBTI, Enneagram, Astrology, Human Design, Numerology)

  • Framework details (e.g., your MBTI type, Enneagram type, astrological signs)

  • Communication and emotional vocabulary preferences

Content You Create:

  • Dream journal entries

  • Messages to the AI Companion

  • Tarot reading questions

  • Practice history (breathwork, meditation, affirmations, gratitude journal entries; feedback you submit; tarot reading history; affirmation view activity (for the Service))

Information We Collect Automatically

Device & Usage:

  • Feature usage needed to operate the Service and enforce subscription limits (e.g., AI message counts, tarot/dream usage, completed breathwork or meditation sessions, affirmation views)

  • Timestamps associated with your account activity (e.g., when content was created, last message times, terms consent)

Sensitive Information

Some data we collect is considered "sensitive" under privacy laws:

  • Dream and chat content (may include personal information)

  • Account authentication data (email address, sign-in session tokens)

We use sensitive information only to provide the features you request.

2. HOW WE USE YOUR INFORMATION

We use your information to:

Provide the Service:

  • Operate your account and authenticate you

  • Generate AI responses (dream analysis, tarot readings, companion chat)

  • Store and use your self-discovery framework preferences; when you provide optional birth time and birth location, calculate certain astrological fields (e.g., moon/rising signs)

  • Process payments and manage subscriptions

Personalize Your Experience:

  • Customize AI responses based on your frameworks (MBTI, Enneagram, etc.)

  • Remember your conversation history

  • Personalize AI responses using your profile and framework preferences

Improve and Develop:

  • Analyze usage patterns (in aggregate)

  • Fix bugs and improve performance

  • Develop new features

  • Monitor aggregate usage of AI features to enforce limits and operate the Service (we do not use third-party advertising or cross-app analytics)

Communicate:

  • Send sign-in codes to your email.

  • Subscription billing and receipts are handled by Apple; we receive subscription status from Apple to provide paid features

  • Notify you of service changes or new features

Safety and Compliance:

  • Detect and prevent fraud

  • Enforce our Terms of Service

  • Comply with legal obligations

  • Protect user safety and security

3. WHO WE SHARE YOUR INFORMATION WITH

We do not sell your personal information. Period.

We share your information only with:

Service Providers

Provider What They Do What We Share

Anthropic AI processing (via API) Your messages, dream entries, tarot questions, framework profile

Supabase Database, authentication, file storage All account and content data

Railway Application hosting Data processed through our servers

All service providers:

  • Are contractually obligated to protect your data

  • Can only use your information to provide services to us

  • Cannot use your data for their own purposes

Note on Anthropic: Your AI conversations are processed by Anthropic's Claude API. Anthropic does not use your data to train their models without separate consent. See their Data Processing Agreement for details.

Other Sharing

Business Transfers: If we're acquired or merged, your information may transfer to the new owner. You'll be notified before this happens.

Legal Requirements: We may disclose information to comply with laws, court orders, or legal processes, or to protect rights and safety.

With Your Consent: We may share your information with third parties when you explicitly agree.

4. YOUR PRIVACY RIGHTS

Rights for All Users

Access: Request a copy of your personal information
Correction: Update inaccurate information
Deletion: Delete your account and data
Portability: Request a copy of your data in a commonly used format

How to Exercise: Email privacy@darefulworks.com

California Residents (CCPA/CPRA)

You have additional rights:

Right to Know:

  • What personal information we collect

  • Why we collect it

  • Who we share it with

  • Request access to your specific information

Right to Delete:

  • Request deletion of your personal information (with some exceptions for legal compliance)

Right to Correct:

  • Request correction of inaccurate information

Right to Limit Sensitive Data Use:

  • Limit our use of sensitive personal information (health-related content, precise location) to providing the Service only

Right to Non-Discrimination:

  • We won't discriminate against you for exercising your privacy rights

Categories of Information We Collect (Last 12 Months):

  • Identifiers (name, email, device IDs)

  • Personal records (birth date, payment info)

  • Commercial information (subscription status)

  • Internet activity (app usage, feature interactions)

  • Geolocation (general from IP, precise with permission)

  • Inferences (wellness preferences, practice patterns)

  • Sensitive information (account credentials, health-related content from dreams/chats)

We Do Not Sell or Share Your Information for advertising or cross-context behavioral advertising.

To Exercise California Rights:

  • In-app: Settings → Account → Delete account

  • Email privacy@darefulworks.com for other requests

  • We'll respond within 45 days

Authorized Agents: California residents may designate an agent to make requests. The agent must provide written authorization.

EU/UK Residents (GDPR)

Legal Basis for Processing:

  • Contract: To provide the Service you requested

  • Consent: For marketing and non-essential features (withdrawable anytime)

  • Legitimate Interests: To improve our Service, ensure security, analyze usage

  • Legal Obligation: To comply with laws

Your GDPR Rights:

  • Right to access your data

  • Right to rectification (correction)

  • Right to erasure ("right to be forgotten")

  • Right to restrict processing

  • Right to data portability

  • Right to object to processing

  • Right to withdraw consent

International Transfers: Your data may be transferred to the US. We use Standard Contractual Clauses (SCCs) approved by the EU Commission to protect your data during transfers.

Lodge a Complaint: You have the right to complain to your local data protection authority:

  • UK: Information Commissioner's Office (ICO) - ico.org.uk

  • EU: Your local supervisory authority

To Exercise GDPR Rights: privacy@darefulworks.com

Nevada Residents

You have the right to opt out of the sale of personal information. We do not currently sell your information. If our practices change, we'll update this policy and provide an opt-out mechanism.

5. HOW LONG WE KEEP YOUR DATA

Data Type Retention Period

  • Account information - While your account is active + 30 days after deletion

  • User content (dreams, messages) - While your account is active + 30 days after deletion

  • Practice history - While your account is active + 30 days after deletion

  • Subscription verification records - 7 years (Apple transaction identifiers and status) — while your account is active and as needed for tax/legal obligations; payment card data is held by Apple

  • Support inquiries - 3 years

You Can Delete Anytime: Delete specific content in-app or delete your entire account in Account Settings. We'll complete deletion within 30 days.

Legal Exceptions: We may retain data longer if required by law, to resolve disputes, or to prevent fraud.

6. HOW WE PROTECT YOUR DATA

We implement industry-standard security measures:

Technical Safeguards:

  • Encryption in transit (HTTPS/TLS)

  • Encryption at rest (database encryption)

  • Secure authentication via one-time email codes; access tokens stored securely on your device (Keychain)

Organizational Safeguards:

  • Role-based access controls (employees access only what they need)

  • Multi-factor authentication for administrative access

  • Regular security audits and updates

  • Secure hosting with SOC 2 certified providers

Your Responsibility:

  • Keep access to your email account secure; do not share sign-in codes

  • Don't share your account credentials

  • Notify us immediately of unauthorized access: security@darefulworks.com

No Guarantee: While we implement reasonable security, no system is 100% secure. Use the Service at your own risk.

Data Breach Notification: If a breach affects your personal information, we'll notify you within the timeframe required by law.

7. INTERNATIONAL USERS

Service Location: Our servers are primarily in the United States.

Data Transfers: If you're outside the US, your information will be transferred to and processed in the US.

Protections for EU/UK/Swiss Users:

  • We use Standard Contractual Clauses (SCCs) for data transfers

  • Data Processing Agreements with all service providers

  • UK Addendum to SCCs for UK transfers

Your Rights Apply Everywhere: Regardless of where your data is processed, you have the rights described in Section 4.

8. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. When we do:

  • We'll update the "Last Updated" date

  • For material changes, we'll email you and/or show an in-app notification

  • Your continued use after changes means you accept the updated policy

Material changes include: Changes to what data we collect, how we use it, who we share it with, or your rights.

Review Regularly: Check this policy periodically to stay informed.

9. CONTACT US

Privacy Questions or Requests: privacy@darefulworks.com

Security Concerns: security@darefulworks.com

General Support: support@darefulworks.com

Mail:
Dareful Works LLC
Attn: Privacy Officer
P.O. Box 162
Brevard, NC 28712
United States

Response Times:

  • Privacy rights requests: 45 days (may extend to 90 days)

  • Security concerns: 3 business days

  • General inquiries: 5 business days

ACKNOWLEDGMENT

By using Dareful Self, you acknowledge that you:

  • Are 18 years of age or older

  • Have read and understand this Privacy Policy

  • Agree to our collection, use, and sharing of your information as described

APPENDIX: CALIFORNIA NOTICE AT COLLECTION

This notice supplements our Privacy Policy for California residents.

What We Collect:

  • Identifiers (email, account/user ID, optional preferred name)

  • Personal records (birth date; optional birth time/location)

  • Commercial information (Apple subscription status and product identifiers)

  • Subscription status and Apple transaction identifiers needed to verify paid access

  • Protected classifications (birth date for age verification)

  • Usage data (feature interactions needed for the Service and subscription limits)

  • Inferences (preferences, wellness patterns)

Why We Collect:

  • Provide and personalize the Service

  • Process payments

  • Improve features and performance

  • Communicate with you

  • Safety and security

Who We Share With: Service providers only (Anthropic, Supabase, Railway)

Sale or Sharing: We do not sell or share your personal information.

Your Rights:

  • Right to know what information we have

  • Right to delete your information

  • Right to correct inaccurate information

  • Right to limit use of sensitive information

  • Right to non-discrimination

Exercise Your Rights: privacy@darefulworks.com