This document is a good-faith draft written to describe what OnBetterTerms actually does. It has not been reviewed by a lawyer and is not jurisdiction-specific. It must not be relied upon as a binding agreement until counsel has reviewed it. See docs/LEGAL-REVIEW.md for the outstanding items.
Privacy Policy
Version 2025-01-01
The plain-language version is on the privacy page, and it is the better description of what we intend. This document is the formal one.
What we collect
- Account data — email address, display name, timezone, locale.
- Content you create — check-ins, entries, messages, goals, debriefs, and voice recordings where you use them.
- Relationship structure — which spaces you belong to, when you joined, and consent records.
- Technical data — hashed IP address, user agent, device labels, session timestamps.
- Product analytics — that an action happened, never its content.
How content is protected
Entries, notes, transcripts, AI memories and safety excerpts are encrypted at the application layer with per-purpose keys before they reach the database. Access is enforced server-side on every read, not by hiding things in the interface.
Privacy levels
Every record you author carries one of three levels — shared, private, or 100% private. The third is additionally excluded from counts, aggregates, exports, notifications and any AI output visible to another member.
Processors
We use third-party processors for AI inference, speech-to-text, email delivery, payments and hosting. They receive only what is necessary. Content sent for AI processing is restricted by the privacy classification of that content.
[Attorney review required — the processor list, sub-processor disclosures, international transfer mechanism and retention schedule must be completed before launch.]
Your rights
You can export your data, correct or delete individual records, delete your account, review AI memories, and revoke sharing. Deleting your account does not delete another member’s independently authored content.
Retention
Voice recordings are deleted after transcription unless you choose otherwise. Safety excerpts are retained only for cases that reach human review. Audit logs are retained longer than product analytics for security reasons.