Privacy

Draft for Kelvin to review. This page describes how the code actually works today, but it is a placeholder. Have it checked against PIPEDA before launch, and add the contact details.

Last updated: [date] • Privacy contact: [email]

What stays on your device

Your chat history and past conversations, net-worth log, goals, streak, reminders, reactions, theme and your music library are saved in your browser (local storage and IndexedDB). They aren’t uploaded to an account. Songs you add never leave your device. If you use Vision AI without an account, your daily check-ins and journal are kept on the device too, and move to your account if you sign in. Clearing site data removes them.

What we store on our server

Account: your email address, display name, when you joined, your credit balance and a usage ledger (date, credits used or added).
Sign-in: one-time codes are stored only as a keyed hash and expire after 10 minutes. Sessions are stored as a hash of a random token in an HttpOnly cookie.
Memory: short facts you ask Vision AI to remember. You can view and delete each one in the Memory page.
Learned profile (background learning): a short, editable list of what Vision AI has picked up about how you like to be coached (for example “prefers morning workouts”). It is built from your chats, reactions and Undo taps by a small AI model, after a chat and once a night. It is not used to train any AI model. To do this we keep short excerpts of your recent chats for 3 days, then delete them. You can see, edit or delete each item, or pause learning (which also deletes the excerpts), in the Memory page.
Daily ritual and weekly reviews: your morning check-ins (mood, energy, one priority), evening reflections (wins, gratitude, lesson), life-balance ratings and the weekly reviews built from them.
Journal: entries you write. They are private by default: Vision AI reads an entry only if you turn on “Vision AI can read this” for that entry.
Coaching preferences: your main focus area, check-in time, coaching style and time zone.
Notifications: if you turn on reminders, your browser’s push address (an opaque URL from Apple, Google or Mozilla) and the reminders to deliver. Notifications carry no content. Your device fetches the text from us with your own sign-in.
Abuse protection: short-lived rate-limit counters keyed by a one-way hash of your IP address or account.
Payments: for Interac e-Transfer top-ups we store your email, the pack, amount, reference code, status and who approved it (an audit log). Your bank shows [Kelvin] the sender name and the message you write; that stays in his bank records. If card payments are added later, Stripe handles them and we never see your card number.

What is sent to AI and other services

Each message sends your recent chat, a short summary of your goals, net worth and streak, today’s check-in, your coaching preferences, your learned profile, any journal entries you chose to share, and your saved memory to the AI model (Cloudflare Workers AI; optionally Google Gemini if the owner enables it) to write the reply. Photos you attach are sent for that one reply and aren’t stored by us.
Web lookups send your search words to [Brave Search / DuckDuckGo].
Sign-in, top-up and payment-confirmation emails are sent through [Resend]. Google sign-in shares your name and email with us if you choose it.

Your choices

You can delete individual memories and learned items, pause learning, and delete journal entries one by one. In Settings, Export my data downloads everything we hold about you plus what’s on this device as one JSON file, and Delete everything removes your account and all of the above from our server (account, sessions, ledger, memories, learned profile, chat excerpts, rituals, journal, reviews, preferences and push subscriptions) and clears this device. We don’t sell your data or use it for ads.

Terms • Back to Vision AI