Privacy Policy

1. Introduction

Anima (“we”, “our”, or “the App”) is operated by Bald Labs, Inc. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our personality assessment and self-discovery platform.

We comply with the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), the EU General Data Protection Regulation (GDPR), the UK GDPR, and other applicable privacy laws in the United States, European Union, United Kingdom, and elsewhere. Where required by law, we obtain your consent before using non-essential cookies or analytics.

2. Information We Collect

Account Information

• Email address (for authentication)
• Display name (optional)
• Account creation date

Assessment and Profile Data

• Your responses to personality assessments (Big Five, MBTI, Enneagram, DISC, and others)
• Intelligence and strengths assessment responses and scores
• Birth date, time, and location (if you choose to provide them for astrology, numerology, or Human Design features)
• Calculated personality trait scores and type results
• AI-generated personality analyses, chat conversations, and journal reflections
• Voice journal audio recordings (if you use voice journaling)
• Mood check-in data

Payment Information

• Payment transactions are processed by Stripe. We do not store your credit card number or full payment details on our servers
• We receive and store transaction metadata (purchase ID, product purchased, amount, date) for record-keeping

Technical Information

• IP address (for security and fraud prevention)
• Browser type and device information
• Access timestamps and usage patterns

3. How We Use Your Information

We use your information to:

• Generate your personality profiles, analyses, and test results
• Power the AI Mirror chat companion with personalized context
• Process and store journal entries (text and voice)
• Store your results in your personal Vault for future reference
• Process payments and manage subscriptions
• Send transactional communications (e.g., purchase confirmations, account notifications)
• Maintain security, prevent fraud, and comply with legal obligations
• Improve and maintain the App

4. Data Storage and Security

Your data is stored securely using industry-standard practices:

• Encryption at rest for all stored data (AES-256)
• Encryption in transit (TLS/SSL)
• Row-level security policies ensuring you can only access your own data
• Regular security monitoring and updates

Our infrastructure is hosted on Vercel and Supabase, both of which maintain SOC 2 compliance and enterprise-grade security measures. Servers are located in the United States.

5. Service Providers

We use the following third-party service providers to operate the App:

• Supabase — database and storage (United States)
• Vercel — application hosting (United States)
• OpenAI — AI analysis and chat (United States)
• Clerk — user authentication (United States)
• Stripe — payment processing (United States)
• PostHog — product analytics (usage and feature events to improve the App; United States). Where required by law (e.g. EU/UK), we load analytics only after you consent. See our Cookie Policy for details.

Each service provider processes data only as necessary to provide their service and is bound by contractual data protection obligations.

6. Data Sharing

We do not sell, rent, or trade your personal information to third parties. We do not share your personal information for cross-context behavioral advertising.

Your data may be disclosed in the following limited circumstances:

• Service providers: With the third-party providers listed above, solely to operate and deliver the App
• Legal requirements: If required by law, subpoena, court order, or governmental request, or to protect our legal rights, safety, or property
• Business transfers: In connection with a merger, acquisition, or sale of assets, in which case your data would remain subject to this Privacy Policy

7. Data Retention

We retain your data for as long as your account is active. Upon account deletion:

• All profiles, assessment data, journal entries, and chat history are permanently deleted
• All voice recordings are deleted
• Payment transaction records are retained as required by applicable tax and accounting laws
• Security audit logs are anonymized and retained for up to 1 year

8. Your Rights Under California Law (CCPA / CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act and California Privacy Rights Act:

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you
• Right to Delete: You may request permanent deletion of your personal information
• Right to Correct: You may request correction of inaccurate personal information
• Right to Opt-Out of Sale/Sharing: We do not sell or share your personal information for cross-context behavioral advertising
• Right to Limit Use of Sensitive Personal Information: You may request that we limit the use and disclosure of your sensitive personal information to what is necessary to provide the service
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

To exercise your rights: You can export your data from the App (Vault or account settings) and, where we have enabled it, delete your account and associated data from the App settings. For other requests (e.g. access, correction, deletion, or limit use of sensitive information), email us at support@theanima.ai. We will verify your identity and respond within 45 days as required by California law.

Authorized agents: You may designate an authorized agent to make a request on your behalf. We may require verification of the agent's authority and your identity.

Your Rights in the European Economic Area and United Kingdom (GDPR / UK GDPR)

If you are in the EEA or UK, we process your personal data on the following bases: performance of our contract with you (account, assessments, vault, AI), consent (where we ask for it, e.g. optional analytics cookies), and our legitimate interests (security, fraud prevention, improving the App) where those interests are not overridden by your rights.

You have the right to: access your data; have inaccurate data rectified; request erasure (“right to be forgotten”); restrict processing; data portability (we provide export in the App); object to processing based on legitimate interests; withdraw consent where processing is based on consent; and lodge a complaint with a supervisory authority (e.g. in your country of residence).

To exercise these rights, use the in-app data export or account deletion where available, or contact us at support@theanima.ai. We will respond within one month. You may also contact your local data protection authority if you believe we have not complied with applicable law.

9. Categories of Personal Information

As required by the CCPA, here is a summary of the categories of personal information we collect and how they are used:

10. Cookies and Tracking

We use essential cookies for authentication and session management (e.g. Clerk, Supabase, and our own session and guest identifiers). These are strictly necessary for the App to function and cannot be disabled.

We use optional analytics cookies (e.g. PostHog) to understand how the App is used and to improve it. In the European Economic Area, UK, and other jurisdictions that require consent for non-essential cookies, we only set these cookies after you accept them via our cookie banner. You can change your preference at any time via the cookie or preference link in the footer.

We do not use advertising cookies, third-party tracking pixels, or cross-site tracking for ads. We do not participate in ad networks or retargeting. For a full list of cookies and how to manage them, see our Cookie Policy.

11. Children's Privacy

The App is intended for adults aged 18 and older. We do not knowingly collect personal information from anyone under 18.

In compliance with the Children's Online Privacy Protection Act (COPPA), we do not knowingly collect, use, or disclose personal information from children under 13. If we become aware that we have collected information from a child under 13, we will promptly delete it. If you believe a child has provided us with personal information, please contact us at support@theanima.ai.

12. Do Not Track

The App does not track users across third-party websites and therefore does not respond to Do Not Track (DNT) signals. As noted above, we do not engage in cross-site tracking or behavioral advertising.

13. International Users and Data Transfers

The App is operated from and hosted in the United States. If you access the App from outside the United States (including the European Economic Area or UK), your information will be transferred to, stored, and processed in the United States and possibly other countries where our service providers operate.

For users in the EEA and UK, we rely on appropriate safeguards for such transfers (such as the EU Commission adequacy decisions, UK adequacy regulations, or standard contractual clauses where applicable). By using the App, you acknowledge this transfer. If you do not wish your data to be transferred in this way, please do not use the App or contact us to request deletion of your account and data.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice in the App or by sending an email to the address associated with your account. Your continued use of the App after changes are posted constitutes acceptance of the updated policy.

15. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

Bald Labs, Inc
For our physical mailing address, please contact support@theanima.ai.
Email: support@theanima.ai

If you are a California resident and believe your privacy rights have been violated, you may also file a complaint with the California Attorney General's Office at oag.ca.gov.