Privacy Policy
Last updated July 25, 2026.
This policy explains what ArchAI collects, how we use it, and the choices you have. We aim to collect only what the product needs to work.
1. What we collect
- Account info: your email address and display name (via Supabase Auth).
- Product data: the target names you enter, quiz answers, generated blueprints, daily habit completions, and optional mood check-ins (1–10).
- Billing data: handled directly by LemonSqueezy — we store your subscription status and plan, not your card details.
2. How we use it
To generate your AI blueprint, run your daily tracking dashboard, manage your subscription, and improve the product. We do not sell your personal data.
3. Third parties we share data with
- Google Gemini API — receives the target name and quiz answers to generate your blueprint.
- Supabase — hosts our database and handles authentication.
- Resend — sends account emails (sign-up verification, password reset) on our behalf.
- LemonSqueezy — processes payments and manages subscriptions.
4. Data retention & deletion
We retain your data while your account is active. You can permanently delete your account and all associated data at any time from your Profile (Profile → Delete my account); deletion is immediate and irreversible, and cancels any active subscription. You can also email us to request deletion. Backups containing residual copies are rotated out within 30 days.
5. Your rights
Depending on your location (including the EU/UK under GDPR and California under CCPA), you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. Use the self-serve deletion above, or contact us using the details below to exercise these rights. We won't discriminate against you for doing so.
6. Cookies
We use essential cookies for authentication (session cookies set by Supabase). We don't currently use advertising or cross-site tracking cookies.
7. Contact
Privacy questions or requests? Email us at kc5769392@gmail.com.
This is a plain-language summary of our privacy practices, not legal advice; for operating at scale in the EU/UK or California, have counsel confirm it meets GDPR/CCPA requirements.