Public notice · no course content
Privacy notice
Effective July 15, 2026
Google Sign-In data
When you choose Google Sign-In, the application requests the OpenID Connect openid, email, and profile scopes. Google provides your Google account identifier, verified email address, name, and profile image if available. We use this information only to authenticate you, match your invitation, create your member identity, and protect the private community. Personality Cultivation does not request or access your Gmail, Google Drive, contacts, calendars, Google password, or other Google content.
Information we keep
Supabase Auth processes your sign-in identity and session. We keep the verified email address, name, account identifier, invitation, and membership status needed to protect this private community. If you use the cultivation tools, we also keep the journal entries, check-ins, food logs, progress, questions, and community contributions you choose to create.
How we use information
We use information only to authenticate you, enforce invitation-based course access, provide the features you request, protect the community, prevent abuse, and improve service reliability. We do not sell personal information. We do not use Google account data, private journals, or member records for advertising or AI model training.
Service providers
Limited data is processed by service providers that operate the application: Vercel for hosting, Supabase for authentication and database services, Google when you choose Google Sign-In, and our transactional email provider when you request an email link. If you use the AI guide, your question and relevant approved wiki excerpts may be processed by our AI provider to produce an answer; your Google account identity is not included in that AI request. Providers receive only the data needed to perform their service and may not use it for our advertising.
Security
We use invitation checks, role-based access controls, secure session cookies, encrypted network connections, private-by-default application routes, and restricted administrative access to protect member data. No online service can eliminate every risk, so we review and improve these safeguards as the application develops.
Retention and deletion
We retain account identity and member-created records while your account is active or as needed to operate, secure, and meet legal obligations for the service. You may ask us to review, correct, export, or delete your account data. We will delete or de-identify data that is no longer needed, subject to reasonable backup and security-log periods. Some contribution and review records may be retained to preserve the integrity of the community change history, with personal access removed when appropriate.
Contact
For a privacy request or question, email phillip@hellophillipngo.com.