1. Information We Collect

Information You Provide

Account Information

• Name, email address, and password (for email signup)
• Name and email provided by Google or Apple Sign-In

Profile & Wellbeing Data

• Focus areas and personal goals
• Nine Circles wellbeing self-assessment scores (1-10 ratings across nine life areas)
• Emotional moments (emotion type, intensity, and context)
• Values exercise responses and rankings
• Mission statements and program outputs

User-Generated Content

• Daily content reflections and question responses
• Journal entries
• AI coaching conversations
• Pathway step responses
• Companion and Group membership, the nickname you choose for a group, items you choose to share with a group, and replies you write there

Information From Third Parties

When you sign in with Google or Apple, we receive your name and email address from those services. We do not receive your passwords from these providers.

AI-Processed Data

GuidePath uses AI to generate insights about your wellbeing patterns. This includes:

• Daily, weekly, and pattern insights derived from your reflections and conversations
• Living Profile categories (AI-synthesized identity and growth statements)
• Reflection portraits, written from answers people you ask give about you
• Coaching responses generated during AI conversations

This data is derived from the content you provide and is treated with the same protections as your original content.

Usage & Device Data

• Features accessed, content viewed, and session duration
• Device type, operating system, and app version
• Crash reports and performance data

2. How We Use Your Data

• Deliver core app functionality (daily exercises, pathway content, coaching)
• Generate AI-powered insights about your wellbeing patterns, challenges, and growth
• Tailor content recommendations based on your focus area and responses
• Send service notifications and daily exercise reminders
• Analyze app usage to improve features and resolve issues
• Respond to your support requests and feedback
• Prevent fraud and enforce our Terms of Service
• Comply with legal obligations
• Generate anonymized, aggregated analytics that cannot be linked to individual users

3. Sensitive Data

We recognize that wellbeing self-assessments, emotional moments, journal entries, coaching conversations, and AI-generated psychological insights are sensitive personal information. This data receives heightened protection:

• It is encrypted in transit and at rest
• Access is restricted to authorized team members and essential service providers
• It is never sold, shared with advertisers, or used for cross-app tracking
• It is deleted when you delete your account
• Third-party processors who handle this data are bound by contractual data protection obligations

Companions & Groups (optional sharing with people you choose)

If you choose to add a Companion or join a Group, the people in that group can see limited activity signals from you: whether you were active today, your last seven days of activity, your current streak, and the nickname you choose. They cannot see your reflections, Coach conversations, Insights, or Living Profile unless you deliberately share a specific item with the group. A shared item is a copy you can remove at any time; replies you write under a shared item are visible to that group and can be removed by you or by the person who shared the item. You can pause sharing at any time without anyone being notified. Leaving a group removes your activity, shares, and replies from it, and deleting your account removes all of them. Group members may receive a notification with your nickname when you join, share, reply, or react.

Reflection requests

You can ask people for a reflection: three short questions about you at your best. People in your Companion or Group answer in the app. People outside GuidePath answer through a private link you send them; they don't need an account, and we don't collect their email, phone number, or any contact details. From them we store only the name they give and their three answers, which are attributed (never anonymous) and visible only to you. Our AI reads the answers to write your portrait and may hold back an answer that isn't clearly affirming for you to decide about. A link works for 30 days, for one answer, and you can turn it off at any time. Answers are kept with your account and deleted with it; someone who answered can ask us to remove their answer by contacting support.

4. Third-Party Services

Infrastructure & Service Providers

Firebase (Google Cloud)

• Purpose: Authentication, data storage, file storage
• Data shared: Account info, all user-generated content
• Privacy: Google Cloud Privacy

Customer.io

• Purpose: Push notifications, email campaigns, daily exercise reminders
• Data shared: Name, email, focus area, notification preferences, app engagement events. If you use Companions & Groups, notification events that include another member's nickname and, for a reply, a short excerpt of the reply text.
• Privacy: Customer.io Privacy

AI Processing

Anthropic (Claude AI)

• Purpose: AI coaching conversations and insight generation
• Data shared: Your reflections, coaching messages, wellbeing scores, goals, and personal context are sent to Anthropic's Claude API to generate personalized coaching responses and insights
• Retention: Anthropic retains API inputs/outputs for up to 30 days for safety monitoring, then deletes them. Anthropic does not use your data to train its AI models.
• Privacy: Anthropic Privacy Policy

Payments & Subscriptions

RevenueCat — Subscription and in-app purchase management. Data shared: your account identifier, purchase and subscription status, and device identifiers. Payment card details are handled by the Apple App Store, not RevenueCat or GuidePath. See RevenueCat's privacy policy for details.

Analytics & Tracking Technologies

PostHog

• Purpose: Product analytics and session replay for understanding usage, debugging, and improving features
• Data shared: App usage events, screen interactions, device information, and session recordings of in-app navigation with all text and images masked on-device (sensitive content is not captured)
• Privacy: PostHog Privacy

Firebase Analytics (Google)

• Purpose: Aggregated usage analytics and crash reporting
• Data shared: App events, screen views, device metadata
• Privacy: Google Analytics Privacy

Session Replay

We use session replay technology provided by PostHog to record how users navigate and interact with the app, so we can find and fix problems and improve the experience. Sensitive content — including your journal entries, coaching conversations, wellbeing scores, and values responses — is automatically masked on your device and is not captured in these recordings. Recordings are accessible only to a small number of authorized team members and are reviewed only as needed (for example, to investigate a reported issue).

5. Third-Party Links

GuidePath may contain links to third-party websites or services (e.g., content sources referenced in daily exercises). This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you visit.

6. Data Storage & Security

• All data is stored on Firebase (Google Cloud) servers in the United States
• Data is encrypted in transit (TLS) and at rest
• Access to production data is restricted to authorized team members
• We maintain security practices appropriate to the sensitivity of wellbeing data
• If you believe your account has been compromised, contact us immediately at privacy@tryguidepath.com

7. Payment Information

GuidePath does not directly process, collect, or store payment card information. All payments are handled by the Apple App Store or Google Play Store. We use RevenueCat to manage subscription status and entitlements — it receives your purchase events and subscription status, but not your payment card details. Please review the Apple, Google, and RevenueCat privacy policies for information about how they handle this data.

8. Your Rights & Choices

You have the following rights regarding your personal data:

• Access: View and update your profile information at any time in Settings
• Deletion: Delete your account and all associated data from Settings > Delete Account. This permanently removes your data from our systems and notifies third-party processors.
• Data Export: Request a copy of your personal data by contacting us
• Notification Control: Manage reminder preferences in Settings
• Withdraw Consent: Withdraw consent for data processing at any time by contacting us or deleting your account

How to exercise your rights: Email privacy@tryguidepath.com with your request. We will respond within 30 days. Requests are free of charge. We may ask you to verify your identity before processing your request.

Non-discrimination: We will not discriminate against you or provide a lesser quality of service for exercising any of your privacy rights.

9. Data Retention

• Active accounts: Data retained as long as your account is active
• Deleted accounts: All user data is deleted from our systems upon account deletion. Third-party processors retain data according to their own schedules:
  • Anthropic (Claude AI): up to 30 days after last API interaction
  • PostHog: per their data retention policy
  • Customer.io: profile cleared on account deletion
• Legal obligations: We may retain certain data as required by law, even after account deletion (e.g., records needed for legal compliance or dispute resolution)
• Anonymized data: We may retain anonymized, aggregated data that cannot be linked back to you for the purpose of improving our services

10. De-Identified Data

We may create de-identified or aggregated data from your personal information by removing identifying details. De-identified data is not considered personal information and is not subject to this Privacy Policy. We commit not to re-identify de-identified data except to test our de-identification processes.

11. Children's Privacy

GuidePath is designed for users 18 and older. We do not knowingly collect data from children under 13. If we discover a child's data has been collected, we will delete it immediately. If you believe a child has provided us with personal data, contact us at privacy@tryguidepath.com.

12. AI Coaching Disclosure

GuidePath uses artificial intelligence to provide coaching conversations, generate insights, and create your Living Profile.

Before using AI features, you should understand:

• You are interacting with AI, not a human. Coaching conversations and insights are generated by Anthropic's Claude AI, not by licensed professionals or human coaches.
• AI processing: Your reflections, coaching conversations, and assessment data are sent to Anthropic's Claude AI for processing. The AI generates personalized observations and insights based on your data.
• Not a substitute for professional help: AI coaching is not therapy, medical advice, counseling, or mental health treatment.
• Accuracy: AI-generated insights are observations based on patterns in your data. They may not always be accurate. You can flag or delete any insight you disagree with.
• No automated decisions with legal effects: GuidePath does not use AI to make decisions that produce legal or similarly significant effects on you.

13. Business Transfers

If GuidePath LLC is involved in a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you via email or prominent notice in the app before your personal information becomes subject to a materially different privacy policy.

14. Policy Updates

We may update this policy from time to time. Material changes will be communicated via the app or email. Your continued use of GuidePath after changes are posted constitutes acceptance of the updated policy.