Privacy Policy
Last updated: July 21, 2026
Introduction
Your True Self (the "Service") is operated by Verata Ventures LLC ("Verata Ventures," "we," "us," or "our"), a New Jersey, USA limited liability company. This Privacy Policy explains what personal data we collect when you use the Service, why we collect it, who we share it with, and the rights you have over it.
The Service scores validated psychological instruments and generates a written personality report from your responses. Six couples-focused instruments ask about sexual desire, intimacy, and communication — special categories of personal data under GDPR Article 9. See Sensitive Data below before answering those instruments.
What We Collect
- Account information: your email address, and optionally your name and profile image if you sign in with Google. We authenticate accounts through Supabase (email magic link or Google OAuth); we never see or store your password.
- Assessment responses: your item-level answers to every instrument you complete — individual Likert-scale ratings and forced-choice selections — plus the scores computed from them.
- Report content: the personality report generated from your scores, and any sections you regenerate.
- Couples/relationship data: if you link accounts with a partner, we store the connection between your accounts, the sharing preferences you set for each instrument (see Sensitive Data), and — if a compatibility analysis or relationship blueprint is generated — a snapshot of both partners' profile data used to produce it.
- Payment data: Stripe processes your payment; we store which product you purchased and Stripe's checkout session identifier, not your card number.
- Attribution data: UTM parameters, referrer, and click identifiers (such as fbclid or gclid) captured to understand how you found the Service.
- Technical data: IP address, browser and device information, and the cookies described in Cookies and Analytics.
Sensitive Data (GDPR Article 9 Special Category Data)
Six instruments in the couples module ask directly about sexual desire, intimacy, and relationship dynamics. Under GDPR Article 9, this is a special category of personal data (data concerning sex life or sexual orientation):
- Desire Profile (based on the Sexual Inhibition/Sexual Excitation Scales, SIS/SES)
- Intimacy Mix
- Sexual Communication
- Sexual Satisfaction (based on the New Sexual Satisfaction Scale, NSSS-S)
- Erotic Blueprint
- Four Horsemen Check
None of the core eight instruments (Big Five, Attachment, Values, Conflict, Love Languages, Enneagram, Communication, Career Interests) touch this content. You only encounter these six instruments if you choose to take them, and our legal basis for processing this data is your explicit consent, given by completing the instrument. Declining any of them does not block access to the rest of the Service.
If you use couples mode, whether your results from these six instruments are shared with your partner is controlled separately, instrument by instrument, in your privacy settings — all six default to off, so you opt in to share each one individually.
How We Use Your Data
- To generate your report: your scores and profile data are sent to Anthropic's Claude API to write your report's prose sections. Anthropic's commercial API terms prohibit Anthropic from training its models on the content we send.
- To run the Service: authenticating you, storing your responses and results, processing payments, and orchestrating the background jobs that generate and regenerate your report.
- Product analytics: to understand which pages and features are used, and to fix bugs.
- Communication: to send you sign-in links, purchase receipts, and service-related emails.
- Security and compliance: to detect abuse and fraud, and to comply with legal obligations.
We do not currently use your assessment data for research, product improvement studies, or any purpose beyond generating your own report and operating the Service described above. If that changes, we will update this policy and, for any new use requiring your consent, ask for it before making the change.
Sub-processors
We use the following service providers to operate the Service. Each processes personal data only as necessary to provide its function to us.
- Supabase — database hosting and authentication (email magic link, Google OAuth).
- Anthropic — the Claude API, used to generate your personality report's written sections from your profile data.
- PostHog — product analytics (page views, clicks, and navigation; see Cookies and Analytics).
- Stripe — payment processing for report purchases and gifts.
- Inngest — background job orchestration for report generation and regeneration. Job events carry your user ID and assessment ID, not your full assessment content.
- Transactional email: sign-in links and purchase receipts are sent through Resend, which delivers on Amazon SES infrastructure. Resend receives your email address and the contents of those messages.
We do not sell your personal information to third parties.
Legal Basis for Processing
- Contract: processing your responses and generating your report is necessary to provide the Service you signed up for or purchased.
- Consent: the special category couples instruments described above are processed only on the basis of your explicit consent, given by choosing to complete them.
- Legitimate interest: product analytics, fraud prevention, and service security.
- Legal obligation: where we are required to retain or disclose data by law.
Data Retention
We retain your account and assessment data until you ask us to delete it. We do not currently expire accounts automatically after a period of inactivity, because a personality profile is something people return to years later and we would rather you still have it. If you want your data removed at any point, we will remove it. When you request deletion of your account (see Your Rights), your account and its data are deleted immediately and permanently — there is currently no grace period or recovery window, so deletion cannot be undone once processed.
Your Rights
- Right to access and correction: contact us at team@yourtrueself.app for a copy of the personal data we hold about you, or to correct it. The Service does not currently have a self-service data export button.
- Right to deletion: request deletion of your account and all associated data at team@yourtrueself.app. Deletion is immediate, permanent, and covers your account, your assessment responses and reports, and any relationship/blueprint records you share with a partner. It does not delete your partner's own account or their independent reports.
- Right to withdraw consent: you can stop taking the sensitive couples instruments at any time, or withdraw consent entirely by deleting your account.
- How to exercise these rights: email team@yourtrueself.app. We are a small team and handle these requests personally rather than through an automated queue. We act on them as quickly as we can. If you are in a jurisdiction that sets a statutory deadline for these requests, that deadline applies to us regardless of anything stated here.
Data Security
We use encryption in transit (HTTPS/TLS) and Supabase's infrastructure for storage and authentication, including Row-Level Security policies on sensitive tables. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal data, we will notify affected users by email and act without undue delay. Where a statutory notification deadline applies, we will meet it.
Jurisdiction: NJ/US Operator, EU/UK Visitors
Verata Ventures is based in New Jersey, USA, and the Service is governed by U.S. and New Jersey law. We do not restrict access by region, so if you access the Service from the European Economic Area or the United Kingdom, GDPR or UK GDPR rights apply to your data and will be honored on request through the contact channel above.
We have not appointed an Article 27 representative in the EU or UK. We are a US-based company and our current user base does not meaningfully extend into those regions. If that changes, we will appoint one and list the contact details here.
Children's Privacy
The Service, including its couples instruments covering sexual desire and intimacy, is intended for users who are at least 18 years of age. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, contact us at team@yourtrueself.app and we will delete it.
Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices, technology, or legal requirements. Material changes — including any change that would add a new use of your assessment data — will be posted here with an updated "Last updated" date, and where required by law, we will notify you directly before the change takes effect.
Contact
Questions about this Privacy Policy or our data practices: team@yourtrueself.app