1. Information We Collect

Information You Provide

Account Information

• Name, email address, and password (for email signup)
• Name and email provided by Google or Apple Sign-In

Profile & Wellbeing Data

• Focus areas and personal goals
• Nine Circles wellbeing self-assessment scores (1-10 ratings across nine life areas)
• Emotional moments (emotion type, intensity, and context)
• Values exercise responses and rankings
• Mission statements and program outputs

User-Generated Content

• Daily content reflections and question responses
• Journal entries
• AI coaching conversations
• Pathway step responses

Information From Third Parties

When you sign in with Google or Apple, we receive your name and email address from those services. We do not receive your passwords from these providers.

AI-Processed Data

GuidePath uses AI to generate insights about your wellbeing patterns. This includes:

• Daily, weekly, and pattern insights derived from your reflections and conversations
• Living Profile categories (AI-synthesized identity and growth statements)
• Coaching responses generated during AI conversations

This data is derived from the content you provide and is treated with the same protections as your original content.

Usage & Device Data

• Features accessed, content viewed, and session duration
• Device type, operating system, and app version
• Crash reports and performance data

2. How We Use Your Data

• Deliver core app functionality (daily exercises, pathway content, coaching)
• Generate AI-powered insights about your wellbeing patterns, challenges, and growth
• Tailor content recommendations based on your focus area and responses
• Send service notifications and daily exercise reminders
• Analyze app usage to improve features and resolve issues
• Respond to your support requests and feedback
• Prevent fraud and enforce our Terms of Service
• Comply with legal obligations
• Generate anonymized, aggregated analytics that cannot be linked to individual users

3. Sensitive Data

We recognize that wellbeing self-assessments, emotional moments, journal entries, coaching conversations, and AI-generated psychological insights are sensitive personal information. This data receives heightened protection:

• It is encrypted in transit and at rest
• Access is restricted to authorized team members and essential service providers
• It is never sold, shared with advertisers, or used for cross-app tracking
• It is deleted when you delete your account
• Third-party processors who handle this data are bound by contractual data protection obligations

4. Third-Party Services

Infrastructure & Service Providers

Firebase (Google Cloud)

• Purpose: Authentication, data storage, file storage
• Data shared: Account info, all user-generated content
• Privacy: Google Cloud Privacy

Customer.io

• Purpose: Push notifications, email campaigns, daily exercise reminders
• Data shared: Name, email, focus area, notification preferences, app engagement events
• Privacy: Customer.io Privacy

AI Processing

Anthropic (Claude AI)

• Purpose: AI coaching conversations and insight generation
• Data shared: Your reflections, coaching messages, wellbeing scores, goals, and personal context are sent to Anthropic's Claude API to generate personalized coaching responses and insights
• Retention: Anthropic retains API inputs/outputs for up to 30 days for safety monitoring, then deletes them. Anthropic does not use your data to train its AI models.
• Privacy: Anthropic Privacy Policy

Analytics & Tracking Technologies

PostHog

• Purpose: Product analytics for understanding app usage patterns and improving features
• Data shared: App usage events, screen interactions, device information
• Privacy: PostHog Privacy

Firebase Analytics (Google)

• Purpose: Aggregated usage analytics and crash reporting
• Data shared: App events, screen views, device metadata
• Privacy: Google Analytics Privacy

5. Third-Party Links

GuidePath may contain links to third-party websites or services (e.g., content sources referenced in daily exercises). This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you visit.

6. Data Storage & Security

• All data is stored on Firebase (Google Cloud) servers in the United States
• Data is encrypted in transit (TLS) and at rest
• Access to production data is restricted to authorized team members
• We maintain security practices appropriate to the sensitivity of wellbeing data
• If you believe your account has been compromised, contact us immediately at privacy@tryguidepath.com

7. Payment Information

GuidePath does not directly process, collect, or store payment card information. All payments and subscriptions are handled by the Apple App Store or Google Play Store. Please review their respective privacy policies for information about how they handle payment data.

8. Your Rights & Choices

You have the following rights regarding your personal data:

• Access: View and update your profile information at any time in Settings
• Deletion: Delete your account and all associated data from Settings > Delete Account. This permanently removes your data from our systems and notifies third-party processors.
• Data Export: Request a copy of your personal data by contacting us
• Notification Control: Manage reminder preferences in Settings
• Withdraw Consent: Withdraw consent for data processing at any time by contacting us or deleting your account

How to exercise your rights: Email privacy@tryguidepath.com with your request. We will respond within 30 days. Requests are free of charge. We may ask you to verify your identity before processing your request.

Non-discrimination: We will not discriminate against you or provide a lesser quality of service for exercising any of your privacy rights.

9. Data Retention

• Active accounts: Data retained as long as your account is active
• Deleted accounts: All user data is deleted from our systems upon account deletion. Third-party processors retain data according to their own schedules:
  • Anthropic (Claude AI): up to 30 days after last API interaction
  • PostHog: per their data retention policy
  • Customer.io: profile cleared on account deletion
• Legal obligations: We may retain certain data as required by law, even after account deletion (e.g., records needed for legal compliance or dispute resolution)
• Anonymized data: We may retain anonymized, aggregated data that cannot be linked back to you for the purpose of improving our services

10. De-Identified Data

We may create de-identified or aggregated data from your personal information by removing identifying details. De-identified data is not considered personal information and is not subject to this Privacy Policy. We commit not to re-identify de-identified data except to test our de-identification processes.

11. Children's Privacy

GuidePath is designed for users 18 and older. We do not knowingly collect data from children under 13. If we discover a child's data has been collected, we will delete it immediately. If you believe a child has provided us with personal data, contact us at privacy@tryguidepath.com.

12. AI Coaching Disclosure

GuidePath uses artificial intelligence to provide coaching conversations, generate insights, and create your Living Profile.

Before using AI features, you should understand:

• You are interacting with AI, not a human. Coaching conversations and insights are generated by Anthropic's Claude AI, not by licensed professionals or human coaches.
• AI processing: Your reflections, coaching conversations, and assessment data are sent to Anthropic's Claude AI for processing. The AI generates personalized observations and insights based on your data.
• Not a substitute for professional help: AI coaching is not therapy, medical advice, counseling, or mental health treatment.
• Accuracy: AI-generated insights are observations based on patterns in your data. They may not always be accurate. You can flag or delete any insight you disagree with.
• No automated decisions with legal effects: GuidePath does not use AI to make decisions that produce legal or similarly significant effects on you.

13. Business Transfers

If GuidePath LLC is involved in a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you via email or prominent notice in the app before your personal information becomes subject to a materially different privacy policy.

14. Policy Updates

We may update this policy from time to time. Material changes will be communicated via the app or email. Your continued use of GuidePath after changes are posted constitutes acceptance of the updated policy.