Draft for review. Not yet in force. Bracketed items are still to be decided. Last updated [date].
[Legal name of the business], [business mailing address], reachable through the contact form, is responsible for the personal information described here.
Your preview code, your sessions, presets, uploads, history and snapshots are stored in your browser’s local storage on this device. They stay until you clear them — Setup has a “Clear everything” button — or clear your browser’s site data.
Your sessions, when you have a code. With a preview code or a membership, your sessions — each with when it was played and for how long — are also kept on our server (Cloudflare), so they and your History are the same on every device where you enter the code. Before a session leaves your browser it is scrambled (encrypted) with a key made from your code, and it is filed under a scrambled form of the code — with no name and no email. Because the site issues the codes, we do not say that only you could read them; we do not open them. A session you delete is kept 30 days so you can put it back (Recently deleted), then removed. Without a code, your sessions and History stay in this browser only. Your presets, uploads and snapshots are never synced.
What you type into an AI feature, with your preview code, goes to our server and from there to Anthropic, the company whose AI answers it. The server adds the site’s instructions, sends the request under the site’s own Anthropic account, and returns the answer to your browser. The server keeps a count of calls and token figures per preview code so that monthly allowances can be applied; it does not store what you typed or what came back, and no API key is ever in your browser. Anthropic processes the request under its API terms; it is not used to train its models.
✦ Create Summary sends the names, your request lines and a few phrases of the sessions you choose, for that one answer — nothing is stored.
The portals (a page of ours on its own web address, such as acupuncture.naturalisthome.com) use the same path: what is typed or spoken there goes to our server and on to Anthropic for the one answer, and the server keeps counts and the plain focus labels a session showed (never its phrases). One exception, by your own choice: when a practitioner presses Send on a portal's "Does this session make sense?" screen, their rating, note, the client's words as typed (no name or initials — the client field never leaves the device) and the focus shown are kept on our server as a test case for the AI, under the practitioner's code, until deleted on request.
A snapshot measures how you type, move the mouse and speak — timing and energy figures only. The microphone is used only when you press Record. Recordings and words are never stored or sent; only the figures are kept, in your browser. A snapshot goes to the AI as a few summary lines when you use a feature that reads it.
When you press share, the session is stored on our server (Cloudflare) under a short code so the link can open it: its phrases, tones and settings, and — when they exist — the session’s name, the pen name you chose, the note you wrote for the person and the one-line request the Generator’s summary opens with. No preview code, no email address, no history. Session links expire after [90] days. A client-snapshot link carries only the snapshot figures — anonymous, no personal data included — and expires after [14] days.
Community submissions. When you submit a session to Practitioner Shared Sessions, the set you send — its name, your pen name, your note, the phrases and, when there is one, the summary — is stored on our server and, once approved, published on the Community page under your pen name. It is kept until it is unpublished; write to us to have it taken down.
When you enter a preview code, your browser sends the code to our server, which answers with the level it carries. The code and the level are kept in your browser. Pressing “Forget this code here” removes them from this browser. The server records the month’s AI use against the code — counts and figures, never content.
Lemon Squeezy is the merchant of record for purchases. It collects your payment details, billing address and email and shares with us your name, email, country and what you bought, so we can provide the membership and answer questions. See Lemon Squeezy’s privacy policy.
When you finish a Guided chat on the Generator, the text of that chat, a test id and the build number are sent to us so we can improve the phrases. No preview code and no name are included; when the chat used a snapshot, the record says only which of the snapshot’s channels were in use (typing, mouse, voice) — never its figures and never a recording. It is kept 90 days (section 10). This stops when the site opens to the public. [Remove this section at launch.]
The site is hosted by Cloudflare. Like any web host, it keeps short-lived server logs (such as IP address and pages requested) for security and running the service. If you use the contact form, we receive your email address (optional for feedback), the topic and your message, and technical details that help us find problems (the site's build number, your browser type and window size, which of the site's pages and AI tasks ran recently and whether they worked, recent error messages, and counts of what is saved in your browser — never your preview code, chats, phrases or snapshot). The message is stored in the site’s own database on Cloudflare together with a hashed form of your network address, used only to limit how many messages can come from one place in ten minutes, and is forwarded to us by email; we use it only to reply to you, and it is deleted after 90 days (section 10).
Visit counts. We use Cloudflare Web Analytics to count visits to each page and how quickly pages load. It sets no cookies, stores nothing in your browser, and does not fingerprint you or follow you from site to site; we see totals only (such as pages visited, referring sites, countries and browser types), never who you are.
Error reports. When something on a page breaks, the page sends a technical report to Sentry (sentry.io), the service we use to find and fix problems: the page, the build number, your browser type and window width, your access level (visitor, preview code or membership — the level, not the code) and the error itself. It carries no phrases, snapshots, preview code or name, and Sentry is set not to store IP addresses. Reports are kept for 30 days.
Share links: until they expire. Community submissions (section 5): until unpublished. Purchase records: as long as tax law requires [typically 6–7 years]. Emails: as long as needed to help you. Preview chats (section 8) and contact messages kept on our server: 90 days, then deleted. Error reports (section 9): 30 days. Synced sessions (section 2): until you delete them, then 30 days; sync device identifiers (a random id per device and when it last synced, under the scrambled code): one year; [all of a code’s sessions are removed [90] days after the code ends]. Nothing else is kept by us.
You can ask what we hold about you, ask us to correct or delete it, or object to how we use it, through the contact form. Depending on where you live (for example the EU, UK or California) you have further rights, including complaining to your data-protection authority. We do not sell or share personal information for advertising.
The site is not meant for children under [16].
We will update this page when anything here changes, and change the date at the top.
See also: Terms of Use · Refund Policy