Privacy policy

How we handle your data.

Last updated: October 20, 2026

What we collect

We do not collect location, contacts, tracking identifiers, or ad IDs.

First-time setup

Setup answers are saved to your account as a draft so you can finish on another device. The draft is cleared when you finish or skip; anything setup creates for you, like a habit, goal or Life Balance rating, stays in your account like the rest of your data.

Metrics journals

Metrics journals: the fields you create, your answers, and the summaries and insights we calculate from them are private to your account. Insights are calculated on your device from your entries and aren’t stored. CSV exports are created on your device.

Supplements

The supplements you add, your check-offs (taken or skipped, with the time) and your day notes are private to your account. They’re used only to show your own Supplements, Home and Healthspan views. They aren’t sent to generative AI, used for advertising, or sold.

Your values and personality snapshot

The values you pick and rank, and your optional personality snapshot (ten short answers plus the consent you gave), are stored so the app can show them back to you — on Today, on your goals and habits, in Change a Pattern, and on your results page. They are private to your account by default.

They are never shared or sold, never used for advertising, and never sent to any AI. They are not included in emails, reminders, notifications, logs or the feedback digest. You can re-pick or clear your values anytime from Settings → Your values; clearing them leaves your goals, habits and plans as they are. You can hide or delete your snapshot in one tap, and deletion is immediate and permanent. Both are included in your data export, and deleting your account removes them.

Workouts

Your workouts, the sets you log (weight, reps, reps left in the tank, distance and time), your notes and how a session felt, your plan and your workout settings are private to your account. They’re used only to show your own Workouts, Home and Body views (including the in-database Healthspan summary for your account). They aren’t sent to generative AI, used for advertising, or sold. Progress numbers like personal records and the estimated 1-rep max are calculated only from your own entries. CSV exports are created in your browser.

Emotional Mastery: saving is your choice

Practice answers stay in memory in the open page until you explicitly choose fields in the save preview and confirm saving. There is no reflection autosave or offline draft storage. Closing, reloading, browser termination, or some history transitions can lose unsaved text. Saved reflections contain the selected fields and disclosed tool, content-version, optional lesson, and server-time metadata. Excluded answers clear after a successful save. Explicit lesson completion is stored separately.

These reflections are not sent to generative AI, included in notifications, or monitored for urgent help. Owner-scoped access restricts other ordinary users; authorized infrastructure administrators may have access. This is not end-to-end encryption.

You can edit, export, or permanently delete saved reflections from the active app database. Infrastructure backups may retain copies according to their retention policies; we do not promise an immediate backup purge. Minimal request identifiers and payload fingerprints prevent duplicate or replayed writes and remain until account deletion without retaining deleted reflection text. Deleting your account also removes lesson progress and those retry receipts from the active database.

Apple Health

Connecting Apple Health is optional and only possible in the Deliberate iPhone app. If you connect it, Deliberate reads only the types you choose, from this list: sleep, weight, steps, active energy, resting heart rate, heart rate variability, workouts, body fat and lean mass. Wearables such as Hume Health, Apple Watch and smart scales reach Deliberate through Apple Health, so their readings are included when their own app is set to share with Apple Health. Deliberate never writes to Apple Health.

Deliberate stores one daily total per type (for example, hours asleep or steps for the day) and the names of the apps that recorded it, not individual readings. These totals are saved to your Deliberate account so they also appear on the web, beside your Body Log and on Home. They are not copied into your check-in unless you choose “Use this”.

Apple Health data is never used for advertising, marketing or data mining, never sold, and never shared with advertisers, data brokers or other third parties beyond the hosting providers listed below. It is not sent to generative AI or included in notifications, and it is not stored in iCloud. Owner-scoped row-level security keeps it private to your account; authorized infrastructure administrators may have access.

To stop: open Settings → Apple Health in the iPhone app and choose Disconnect. Tick “Also delete data already imported” to remove every imported total from the active database. You can also turn off Deliberate’s access in the Health app under your profile → Apps → Deliberate. Deleting your account removes all imported data from the active database. Infrastructure backups may retain copies according to their retention policies.

Feedback you send

When you use the Feedback button, we collect your message, the kind (something’s broken, idea, or other), the page or screen you sent it from, your app version, your device, and your account email so we know who sent it.

We use it only to fix and improve Deliberate. It’s seen only by the Deliberate team, who get it in an hourly email digest. We don’t use it for advertising or analytics, and we don’t share it with anyone outside the team beyond the hosting and email providers that run Deliberate.

Feedback messages can include personal details if you choose to share them, so please leave out anything private you don’t need to share. Feedback is deleted along with the rest of your data when you delete your account. To ask for it to be deleted sooner, email support@deliberate.app.

Where it lives

In a Supabase Postgres database on AWS (US-East). Encrypted at rest (AES-256) and in transit (TLS 1.3).

Who can see it

Owner-scoped row-level security restricts ordinary users to their own private records. Authorized infrastructure administrators may have access. Shared directory and catalog records are not private user reflections.

Third parties

No advertising networks, no analytics providers, no data brokers.

Your rights

Contact

Email support@deliberate.app.