Privacy Policy

Introduction

Your True Self (the "Service") is operated by Verata Ventures LLC ("Verata Ventures," "we," "us," or "our"), a New Jersey, USA limited liability company. This Privacy Policy explains what personal data we collect when you use the Service, why we collect it, who we share it with, and the rights you have over it.

The Service scores validated psychological instruments and generates a written personality report from your responses. Six couples-focused instruments ask about sexual desire, intimacy, and communication — special categories of personal data under GDPR Article 9. See Sensitive Data below before answering those instruments.

What We Collect

• Account information: your email address, and optionally your name and profile image if you sign in with Google. We authenticate accounts through Supabase (email magic link or Google OAuth); we never see or store your password.
• Assessment responses: your item-level answers to every instrument you complete — individual Likert-scale ratings and forced-choice selections — plus the scores computed from them.
• Report content: the personality report generated from your scores, and any sections you regenerate.
• Couples/relationship data: if you link accounts with a partner, we store the connection between your accounts, the sharing preferences you set for each instrument (see Sensitive Data), and — if a compatibility analysis or relationship blueprint is generated — a snapshot of both partners' profile data used to produce it.
• Payment data: Stripe processes your payment; we store which product you purchased and Stripe's checkout session identifier, not your card number.
• Attribution data: UTM parameters, referrer, and click identifiers (such as fbclid or gclid) captured to understand how you found the Service.
• Email preferences and delivery: when you enter an email to save or unlock results, we store the address, capture time, the email address to which that consent applies, whether you separately opted into follow-up messages, and delivery events such as sent, delivered, clicked, bounced, or unsubscribed.
• Technical data: IP address, browser and device information, and the cookies described in Cookies and Analytics.

How We Use Your Data

• To generate your report: your scores and profile data are sent to Anthropic's Claude API to write your report's prose sections. Anthropic's commercial API terms prohibit Anthropic from training its models on the content we send.
• To run the Service: authenticating you, storing your responses and results, processing payments, and orchestrating the background jobs that generate and regenerate your report.
• Product analytics: to understand which pages and features are used, and to fix bugs.
• Communication: to send you Supabase sign-in links, Stripe payment confirmations and receipts, and application emails such as saved-progress links, relationship invitations, and requested results. If you check the separate optional box, we also send a short follow-up sequence about interpreting your results and continuing your profile. You can unsubscribe from those follow-ups at any time without affecting service email.
• Security and compliance: to detect abuse and fraud, and to comply with legal obligations.

We do not currently use your assessment data for research, product improvement studies, or any purpose beyond generating your own report and operating the Service described above. If that changes, we will update this policy and, for any new use requiring your consent, ask for it before making the change.

Sub-processors

We use the following service providers to operate the Service. Each processes personal data only as necessary to provide its function to us.

• Supabase — database hosting and authentication, including email sign-in links and Google OAuth.
• Anthropic — the Claude API, used to generate your personality report's written sections from your profile data.
• PostHog — product analytics (page views, clicks, and navigation; see Cookies and Analytics).
• Stripe — payment processing, hosted checkout, and payment confirmations and receipts for report purchases and gifts. Purchase confirmation is also shown in the app.
• Inngest — background job orchestration for report generation and regeneration. Job events carry your user ID and assessment ID, not your full assessment content.
• Email delivery: application transactional messages such as requested results, saved-progress links, and relationship invitations, plus optional lifecycle marketing, are sent primarily through Resend, with SMTP fallback for eligible application mail. The provider handling a message receives your email address and that message's contents. We retain provider delivery and click status so we can diagnose failed mail and measure whether a message worked.
• Meta: if you opt into follow-up email after arriving through attributable advertising, we may send Meta a one-way hashed version of your email plus request context such as IP address, browser, page URL, and Meta click ID to measure the lead or account conversion. We do not send assessment answers, scores, or report content.

We do not sell your personal information to third parties.

Cookies and Analytics

• Essential cookies: Supabase session cookies that keep you signed in. These cannot be disabled without losing the ability to use the Service.
• Analytics: we use PostHog with autocapture enabled for page views, clicks, and navigation events. Session replay is off by default for all users; it is enabled only for allowlisted beta testers who have opted in, and even then every input field is masked in the recording. We do not intentionally send assessment item responses or report content to PostHog.
• Advertising measurement: Meta conversion matching is only triggered from the email-capture flow when you select the optional follow-up checkbox. The matched event contains no assessment answers or report content.
• Cookie control: you can block or clear cookies in your browser settings, but disabling essential cookies will prevent you from signing in.

Legal Basis for Processing

• Contract: processing your responses and generating your report is necessary to provide the Service you signed up for or purchased.
• Consent: the special category couples instruments described above are processed only on the basis of your explicit consent, given by choosing to complete them. Optional marketing follow-ups and associated Meta conversion matching are likewise based on the separate unchecked consent box at email capture.
• Legitimate interest: product analytics, fraud prevention, and service security.
• Legal obligation: where we are required to retain or disclose data by law.

Data Retention

We retain your account and assessment data until you ask us to delete it. We do not currently expire accounts automatically after a period of inactivity, because a personality profile is something people return to years later and we would rather you still have it. If you want your data removed at any point, we will remove it. When you request deletion of your account (see Your Rights), your account, assessment content, and direct identifiers are deleted immediately and permanently. A minimal payment ledger may be retained for up to seven years when needed for tax, refund, dispute, fraud-prevention, and other legal obligations. Hosted checkout links and purchaser email are removed from that retained ledger unless a legal hold requires otherwise.

Your Rights

• Right to access and correction: contact us at team@yourtrueself.app for a copy of the personal data we hold about you, or to correct it. The Service does not currently have a self-service data export button.
• Right to deletion: request deletion of your account and all associated data at team@yourtrueself.app. Deletion is immediate, permanent, and covers your account, your assessment responses and reports, and any relationship/blueprint records you share with a partner. It does not delete your partner's own account or their independent reports. We may retain the limited, de-identified payment ledger described under Data Retention where law or payment reconciliation requires it.
• Right to withdraw consent: you can stop taking the sensitive couples instruments at any time, or withdraw consent entirely by deleting your account. Every marketing email also includes an unsubscribe link; unsubscribing stops future follow-ups but does not stop requested results, saved-progress links, account authentication, payment confirmations, or security messages.
• How to exercise these rights: email team@yourtrueself.app. We are a small team and handle these requests personally rather than through an automated queue. We act on them as quickly as we can. If you are in a jurisdiction that sets a statutory deadline for these requests, that deadline applies to us regardless of anything stated here.

Data Security

We use encryption in transit (HTTPS/TLS) and Supabase's infrastructure for storage and authentication, including Row-Level Security policies on sensitive tables. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal data, we will notify affected users by email and act without undue delay. Where a statutory notification deadline applies, we will meet it.

Jurisdiction: NJ/US Operator, EU/UK Visitors

Verata Ventures is based in New Jersey, USA, and the Service is governed by U.S. and New Jersey law. We do not restrict access by region, so if you access the Service from the European Economic Area or the United Kingdom, GDPR or UK GDPR rights apply to your data and will be honored on request through the contact channel above.

We have not appointed an Article 27 representative in the EU or UK. We are a US-based company and our current user base does not meaningfully extend into those regions. If that changes, we will appoint one and list the contact details here.

Children's Privacy

The Service, including its couples instruments covering sexual desire and intimacy, is intended for users who are at least 18 years of age. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, contact us at team@yourtrueself.app and we will delete it.

Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, technology, or legal requirements. Material changes — including any change that would add a new use of your assessment data — will be posted here with an updated "Last updated" date, and where required by law, we will notify you directly before the change takes effect.

Contact

Questions about this Privacy Policy or our data practices: team@yourtrueself.app