What you share, and what we do with it

We never sell your email address or your data. No advertisers, no data brokers, no exceptions. Your information exists to power your own Blueprint, and nothing else.

Only what the product genuinely needs:

• Your account email. Used to sign you in and send account-related mail.
• A first name, if you offer one during onboarding — used only inside your own Blueprint.
• Birth data (date, and optionally time and place). Optional beyond the date. Time and place unlock rising sign and houses under the Symbolism lens; skipping them is completely fine.
• Assessment answers for the modules you choose to complete.
• Journal entries and reflections you write.
• Plan data — experiments, claims, and prompt cadence you set for yourself.
• Commons posts (pseudonymous — see below).
• Share snapshots you deliberately create.

Your data is stored in our database, which runs on Lovable Cloud (built on Supabase). It's encrypted in transit (HTTPS/TLS) and at rest by the underlying infrastructure.

Access is protected by row-level security: the database itself enforces that each person's rows are only readable by that person. You can't accidentally see someone else's data, and neither can we through the app.

The honest exception: the founder (John) can access underlying records for moderation (the Commons) and support (helping you when something breaks). This access is not used for anything else. When it's used for moderation, it's to keep the Commons a safe place — never to surface anyone's identity publicly.

AI, stated plainly. Your assessment answers, journal entries, and reflections are processed by AI language models (Google's Gemini, via Lovable's AI gateway) to generate your syntheses, mirror readings, and plans. This is how the reflections are produced. Your inputs are sent to the model only to generate your own outputs — not to train it, and not shared with other users.

Email. Sign-in and account emails (magic links, password resets, confirmation) go through our email provider (Resend, via Lovable's managed email infrastructure) solely to deliver the message.

Analytics. We don't run third-party site analytics, ad pixels, or tracking scripts. The only usage data we look at is internal counts we compute from our own database — how many people have completed a module, for example — never tied to a name or shown outside our own view.

Nothing about you is public unless you deliberately create a share link. Share links are read-only snapshots of one section of your Blueprint, frozen at the moment you share — later changes you make don't leak into them. You can revoke any share at any time from My shares.

In the Commons, posts show only your auto-generated pseudonym (something like "Golden Spore"). Your account email and identity are never attached to what you write there.

There isn't a one-tap delete button in the app yet — and we'd rather say that plainly than pretend there is. If you'd like your account and data removed, email john@joinmycelium.net and we'll take care of it, personally, within a few days. You can also open a prefilled request from your Living Profile.