Privacy

Draft. Needs a lawyer's review before launch. This page describes how Vision AI's code actually handles data today, and it is written with Canada's PIPEDA in mind. It is not legal advice. Have it reviewed and fill in the [highlighted] fields.

Last updated: [Date published] · Organisation: [Legal name, e.g. "Kelvin Howard, operating as K & K Property Management"], Saskatoon, Saskatchewan, Canada · Privacy contact (accountable person): [Contact email, e.g. [email protected]]

Why we collect information

We collect only what is needed to run your coach: to sign you in, remember what you ask us to remember, coach you, deliver the reminders and calls you turn on, and handle payments. We don't sell your data, we don't use it for advertising, and we don't use it to train AI models. By using a feature, you consent to the processing it needs. You can withdraw consent at any time by turning the feature off or deleting your data.

What stays on your device

Your chat history, net-worth log, goals, streak, theme and your uploaded music files are stored in your browser. Songs you upload never leave your device. Guest check-ins, journal entries, Academy progress, flashcards and Balance entries also stay on the device until you sign in. When you sign in, your progress is copied to your account so it follows you.

What we store on our servers (Cloudflare, Canada/US)

Account: your email, your name, your Google account ID if you sign in with Google, when you joined, your credits and a usage ledger.
Sign-in: one-time codes, stored only as keyed hashes for 10 minutes. Sessions, stored as a hash of a random token in an HttpOnly cookie.
Coaching: memories you save, your learned coaching profile, your mission and the family details you choose to share, daily check-ins, journal entries (private unless you share one), weekly reviews and your preferences. Vision AI learns from your chats by default to personalize your coaching (preferences, goals, wins, what helped); you can see, edit or delete what it learned, or pause learning, under Memory. Card, account and ID numbers, passwords, emails and health diagnoses are never kept, and Kids Tutor sessions are never used. Short chat excerpts used for learning are deleted after 3 days.
Library and progress: notes, creations, saved web links, photos, vision-board images, your budget, music library metadata (titles and likes, not audio files), Academy progress, assignments, flashcards and study streaks, up to 40 MB per account.
Balance (wellness): mood, breathing, thought records, gratitude and reflections you save. This can be sensitive information. It is visible only to you, it is used only to show you your own history, and it is sent to the AI only when you ask for a coach reflection.
Wake-up calls: your phone number, the call schedule, your consent time and a short call log.
TradingView alerts: the alerts your TradingView account sends to your private link (symbol, timeframe, signal, price, time), kept for 90 days. We store only a hash of your link.
Payments: your Stripe customer ID, subscription status and renewal date, and records of your e-Transfer top-ups. Stripe holds your card details. We never see them.
Security: short-lived rate-limit counters keyed by a one-way hash of your IP address or account.

Service providers we share data with

Cloudflare (hosting, database, Workers AI). Your messages, and the context needed to answer them, are processed by AI models running on Cloudflare.
Google, only if you choose "Continue with Google". Google shares your name, your email and whether the email is verified.
Stripe (card payments and billing), Twilio (wake-up phone calls: your number and the message to read out), and Resend or Cloudflare Email (sign-in emails).
YouTube (Google): course videos and music mixes are embedded using youtube-nocookie.com and load only when you open them. YouTube's own privacy policy applies to what you watch. TradingView: the chart widget loads from TradingView when you open Finance.
Web lookups send your search words to a search provider (Brave Search or DuckDuckGo).

Some of these providers process data outside Canada, for example in the United States, where it may be accessible to authorities under local law.

How long we keep it

We keep your account data for as long as your account exists. When you delete your account, it is removed from our live database right away, and from backups within [Retention period, e.g. 30 days]. Payment records may be kept longer where tax law requires it. Stripe keeps its own records.

Your rights and choices

In Settings you can export everything we hold about you as a file, and delete everything, which removes your account and all the data above and cancels any subscriptions. You can delete individual items, pause learning, turn off calls and notifications, and rotate your TradingView link. To ask for access or a correction, or to make a complaint, contact [Contact email, e.g. [email protected]]. If you're not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada.

Children

The Kids Tutor is set up and managed by a parent or guardian on their own account. We don't knowingly create accounts for children.

Terms · Back to Vision AI