Privacy Policy

At Updrift, we're committed to supporting your mental wellbeing journey. Our privacy practices reflect our core values: respect, transparency, and care. We believe privacy is fundamental to creating a safe space for reflection and growth.

We do not sell your personal information. We do not use your data for advertising. Your information is only used to provide and improve our service that supports your wellbeing.

1. Information We Collect

To provide the Updrift service, we need to collect certain information. We collect limited information that you provide directly to us, or that is generated through your use of the service, including:

• Account information (email, name) required for login and identification.
• Chat messages and interactions necessary for the core journaling and reflection features.
• User preferences and settings to personalize your experience.
• Usage data (like feature interaction frequency) to improve our services.

We collect only what's functionally necessary to provide you with a supportive and personalized experience, or to improve the service.

2. How We Use Your Information

We use your information solely to:

• Provide, maintain, and improve the Updrift services.
• Personalize your experience based on your preferences.
• Process your chat interactions using third-party AI services (like Google Gemini and OpenAI) to provide conversational features.
• Analyze usage patterns to enhance the platform's functionality and usability. This analysis uses only aggregated and anonymized data, meaning it cannot be associated with any specific individual.
• Ensure platform security and prevent abuse.

Improving AI Models (Optional & Opt-In): To help improve the AI models that power Updrift, you may have the option to share versions of your chat interactions with our AI service providers (Google Gemini, OpenAI). This feature is disabled by default. If you explicitly opt-in through your account settings, we ensure the shared data is thoroughly anonymized and cannot be linked back to you or your account before it is shared.

All internal data analysis relies strictly on aggregated or anonymized data that is not associated with any specific person. We never share identifiable individual user data with our team or third parties unless required by law or for the essential AI processing described above.

We do not:

• Sell your personal information to anyone.
• Use your identifiable data for advertising or marketing.
• Access or share your personal conversations, except for the anonymized, opt-in model improvement described above.

3. Third-Party Services

We use select trusted partners to help deliver our service:

• Vercel - Hosting, Blob Storage, and analytics.
• Supabase - Database and authentication.
• Google Gemini, OpenAI, and potentially other AI providers - For processing chat interactions and providing AI-powered features.

These services have their own privacy policies and security practices. We carefully select partners who align with our commitment to privacy and security and ensure Data Processing Agreements (DPAs) are in place where required.

4. Data Security

Your wellbeing journey deserves protection. We implement robust security measures to protect your information:

• Encryption of data at rest (in the database) and in transit (using HTTPS).
• Secure authentication and authorization managed via Supabase, including Row Level Security where applicable to restrict data access.
• Regular security reviews and updates to our infrastructure and dependencies.
• Strict internal access controls; your personal chat content is not accessible by our team under normal circumstances.

While we implement strong security practices, please remember that no system is impenetrable. We encourage you to use a strong, unique password for your account.

5. Your Rights

You maintain control of your data. Under GDPR and other privacy laws, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate personal data.
• Request deletion of your account and associated personal data.
• Export your personal data in a common format.
• Opt out of non-essential data processing, such as optional analytics or AI model improvement contributions.
• Object to or restrict certain types of data processing.

We aim to make exercising these rights simple and straightforward. Please contact us using the details below to make a request.

6. Our Commitment

Updrift exists to support your wellbeing journey. We believe privacy is essential for creating a safe space where you can reflect, grow, and find peace.

We're committed to being worthy of your trust by handling your data with care and transparency.

7. Contact Us

If you have any questions about this Privacy Policy or would like to exercise your data rights, please contact us at:

Email: privacy@updrifted.com