Privacy Policy

1. What we collect

We collect only what we need to operate the membership: your email address and authentication metadata, payment identifiers held by our payment processor, and the content you create in your account — goals, habits, favorites, hydration settings and hydration entries — along with basic product usage such as which libraries and recipes you open. We do not sell personal data.

2. How we use it

Your data powers account access, subscription billing, your dashboard, hydration tracking and reminders, personalization of your libraries, recipes and goals, and periodic correspondence you opt into. Analytics are aggregated to improve the product — never resold.

3. Third parties

We rely on a small number of processors, each handling data under its own terms:

• Stripe — payment processing, subscriptions, refunds and billing records. Card details are handled by Stripe and never stored by us.
• Supabase — authentication, database and file storage for your account data.
• Lovable — hosting, application delivery and the AI gateway used by our assistant and audio features.
• Google (Gemini models) — accessed through the Lovable AI gateway to generate Lumi's responses. Your message text is sent for that purpose.
• OpenAI (text-to-speech models) — accessed through the Lovable AI gateway to generate guided-practice narration audio.

We do not currently use any other AI, analytics or advertising vendor. If that changes, this page will be updated before the change takes effect.

4. Escape photos and My Memories

When you complete a Mindful Escape or Seasonal Escape you may upload one or two photos of your activity, along with a short reflection, your participation type (solo, friends or family) and, optionally, a place or activity label. These, together with the Holiday and Compass badges you earn, make up your private My Memories collection.

This data is private — only you. Photos are stored in a private storage area in a folder tied to your account; access rules on the database and storage layer allow only your signed-in account to read them, and photos are served through short-lived signed links rather than public URLs. Memories are never shown to other members, never used in marketing, and never used to train AI models. Deleting your account removes your Memories, reflections and uploaded photos.

5. Retention

Account data is kept while your account exists. Billing records are retained by Stripe for as long as required by tax and accounting obligations. Deleting your account removes your goals, habits, favorites and hydration history.

6. Your rights

You may request access, correction, export, or deletion of your data at any time by writing to privacy@immunityofnegativity.com.

7. Contact

Questions? Reach us via the contact page.