Privacy Policy

3.1 Information You Provide to Us Directly

This is information that you knowingly and actively provide to us when using our Services.

• Account and Profile Information: When you sign up for an account with the App, we collect your first name, last name, email, country, time zone, and, if you live in the United States or Canada, your state or province.
• Sensitive User Content: Our App is designed to help you navigate relationship breakups. To do this, we collect what you choose to write in the App — your journal entries, your answers to prompts and quizzes, and anything else you create there. This information is deeply personal and sensitive, and we treat it with the highest level of care and confidentiality.

  Your consent to this collection is the one consent the App cannot work without. Withdrawing it means deleting your account, after which your content is permanently deleted as set out in Section 7.2. Every other consent in this policy — feedback surveys, AI analysis, analytics, testimonials — is optional, and withdrawing those never affects your use of the App.

• Newsletter and Communications: We collect your email address when you sign up for our newsletter. Every newsletter email includes an unsubscribe link, and you may opt out at any time. We also collect any information you provide when you contact us for customer support, send us feedback, or communicate with us in any other way.
• Social Media Login Data: If you choose to register or log in using a third-party account (like Facebook), we receive certain profile information from that service as permitted by your settings with that service. This may include your name, email address, and profile picture.
• Beta Programme Applications: If you apply to join our beta programme via the Website, we collect your first name, your email address and your answers to the application questionnaire, including any free-text answers you choose to provide about your breakup and circumstances. For abuse prevention, we also collect your IP address and browser user-agent, and the form is protected by Cloudflare Turnstile (a bot-prevention check). Applications are stored securely in our Cloudflare-hosted database, copied to a Google Sheet (Google LLC, USA) that only our team can access, and delivered to our team by email through Amazon Web Services (Amazon SES). We collect this information with your consent, use it only to assess and administer your participation in the beta programme, and delete it when the programme concludes or upon your request. We send you a confirmation email when you apply, and email you about your application. If you also tick the optional "email me when the app launches" box, we use your first name and email address for one further purpose: to tell you when the App launches, including early-access pricing. This is a separate consent. You can apply without it, and you can withdraw it at any time by emailing [email protected].
• Payment Information: We use the third-party service Stripe to process payments for our Services. When you make a purchase, you will be directed to Stripe's secure checkout page to provide your payment details (such as credit card number, name, and billing address). This information is provided directly to Stripe and is subject to their privacy policy. We do not collect, store, or have access to your full credit card information. We do, however, receive transactional information from Stripe, which may include your name, email address, the date of the transaction, and what you purchased, to confirm your payment and grant you access to the Services.

3.2 Information We Collect Automatically

When you access our Services, we may automatically collect certain information about your device and your usage.

• Usage Data: We use services such as Google Analytics and PostHog (on our Website) and PostHog (in our App) to better understand how you interact with our Website and App. This may include details about the features you use, the pages you visit, the dates and times of your visits, how long you spend on each page, and your IP address (used to derive general location). We use pseudonymous identifiers, and we treat them as personal information. With your analytics consent, we may also record fully masked session replays of your visit to our Website: everything you type and all on-screen text is hidden from the recording before it leaves your browser. Replays help us understand where visitors encounter difficulty. Without analytics consent, no session replay is recorded at all. We collect this information only with your consent, which you can manage at any time through our website's cookie banner or within the App settings. Separately, and regardless of your cookie choice, we also collect anonymous, cookie-free statistics about visits to our Website that cannot identify you — see Section 4.6. Neither runs for visitors in the places listed in Section 4.5.
• Device and Technical Information: We collect information from your device, including your IP address, browser type, operating system, and device identifiers.
• Crash and Performance Data: We use services such as Sentry and Google Firebase Crashlytics to help us identify and fix bugs, crashes, and other performance issues in the App. To do this, these services may collect logs and technical data from your device (such as stack traces, device model, and operating system version). While we strive to prevent this, it is possible that some personal information from your User Content may be inadvertently included in these logs. We collect this information to keep the App secure, stable, and reliable.
• Push Notifications: With your permission, we may send push notifications to your mobile device to provide updates, reminders, and other relevant information. To send these messages, we collect and store a unique device token (FCM Token). You can manage your push notification preferences at any time in your device settings.
• Cookies and Mobile Identifiers:

  We use cookies on our Website and similar technologies (like mobile device identifiers) in our App to operate and analyse our Services.

  Website Cookies: We use essential cookies to securely operate our Website and store your preferences (such as your cookie consent choices). With your explicit permission, we also use third-party analytics cookies provided by Google (such as _ga and related identifiers) to help us understand how you use our Website. These analytics cookies are only set if you accept them via our cookie banner and may persist on your device for up to 2 years to distinguish unique users and sessions.

  Record of your consent setting: So that we can honour your analytics setting from the cookie banner, your browser also keeps a small record of it — our consent-preferences cookie and a single opt-in/opt-out flag in local storage. The flag keeps analytics switched off unless you opt in, so it is present even before you make a choice. These store your analytics setting only; they contain no identifier and are not used to measure or track you.

• Google Tag Manager: We use Google Tag Manager (GTM) to manage and deploy tracking tags on our Website. GTM itself does not collect personal data, but it loads the Google Analytics tags described above when you have given consent. We do not use it to load advertising tags.

3.3 Information Processed for Specific Purposes

• AI Analysis for App Improvement:

  With your explicit and separate consent, we use Artificial Intelligence (AI) to help us understand if our journaling prompts are effective.

  How it works: We do not read your journal entries. Instead, we use an AI provider to analyse your response and generate technical metadata about the entry. Specifically, your response is scored by the Anthropic Claude model running on Amazon Web Services (AWS) Bedrock in Frankfurt, Germany. Under AWS Bedrock's terms, your text is not stored by the AI service after processing and is never used to train AI models. The AI produces only numeric scores (for example, how well the prompt was understood and the overall sentiment of the response) — these scores, never your text, are stored by us and sent as pseudonymous statistics to our analytics provider PostHog (hosted in Frankfurt, Germany).

  What we see: Our team only sees aggregate insights, such as "The user found this question confusing" or "The user wrote a detailed response." We do not see a summary of your personal story, secrets, or specific situation.

  The Goal: This allows us to fix confusing questions and improve the "Breakup Course" without ever invading your privacy.

  Participation in this analysis is entirely optional, and you can withdraw your consent at any time without affecting your use of the App (Settings → AI Analysis Settings). Withdrawing consent stops all future analysis immediately and deletes the derived scores we hold; the pseudonymous aggregate statistics already produced are deleted when you delete your account. We have done a privacy impact assessment to identify and reduce the risks of this AI processing.

4.1 To Provide the App

• Your account: We use your account information (name, email, country, state or province, time zone) to create your account, deliver the features of the App, and confirm that you live where the App is offered.
• Your content: Our App's core service is a private place for personal reflection through journaling and guided exercises. To deliver it, we store the User Content you write, such as journal entries and quiz answers. Because this information is sensitive, we collect it only with your consent. This consent is essential for the App to function. Without it, the App cannot operate, and you must delete your account.

4.2 To Keep the App Secure and Working

We use Sentry to monitor the App for bugs, crashes, and performance issues. This helps us diagnose and fix technical problems so that the App stays reliable and secure.

4.3 To Improve the App (Optional)

We are always looking for ways to make our App more effective. This use is entirely optional and is not required for the core features of the App.

• Purpose: We use an AI provider to analyse your response and generate technical metadata about the entry. Our team only sees aggregate insights, such as "The user found this question confusing" or "The user wrote a detailed response." We do not see a summary of your personal story, secrets, or specific situation.
• Safeguards: AI processing is automated. Our team only reviews technical metadata and aggregate insights, never raw entries or detailed summaries of your situation. Access is restricted and logged, and all processing occurs on secure, controlled systems.
• Transparency: Although we take strong precautions, AI processing of sensitive text always carries a residual risk. We disclose this risk openly so that you can make an informed choice.
• Your choice: We perform this analysis only with your explicit, specific, and optional consent. It is separate from the consent required for the core journaling service. The App remains fully functional if you do not consent, and you can withdraw this consent at any time without affecting your use of the App.

4.4 To Communicate With You and Meet Legal Obligations

• Communications: We may use your contact information to respond to your inquiries or send important service updates.
• Legal Compliance: We may use any of your information where necessary to comply with the law, such as responding to a court order or a lawful request from a government authority.

4.5 Cookie-Based Website Analytics (With Your Consent)

• Purpose: We use Google Analytics (loaded via Google Tag Manager) and PostHog to understand how visitors use our Website across visits, measure traffic, and improve our content.
• Consent-only: The cookie-based analytics described in this subsection, including session replay, only run after you explicitly accept them via our cookie banner. If you decline, no analytics cookies are set, no session replay is recorded, and we collect no analytics data that could identify you. The anonymous, cookie-free measurement described in Section 4.6 is separate and continues either way, except in the places listed in the next point.
• Not in the EU, the UK or Switzerland: We do not run any website analytics for visitors our content delivery network places in the European Union, the European Economic Area, the United Kingdom or Switzerland, or whose location it cannot determine. Those visitors see no cookie banner. Google Tag Manager and Google Analytics are never loaded. PostHog's code is part of our Website's own files, but it is never started for them, so it stores nothing on their device and sends nothing to PostHog. Neither the analytics in this subsection nor the anonymous measurement in Section 4.6 runs. As for every visitor, Cloudflare, which hosts our Website, records each request as part of serving it; we see only the total visit counts it reports, never a record about you.
• Withdrawal: You may withdraw consent at any time by clicking the "Cookie Settings" link in the footer of our Website.
• Consent Mode v2: We implement Google Consent Mode v2, which adjusts the behaviour of Google tags based on your consent choices, ensuring no analytics data is sent to Google without your approval. Advertising signals are always set to "denied".

4.6 Anonymous Measurement, No Cookies

Regardless of your cookie choice, we collect anonymous usage statistics using PostHog's cookieless mode, except for visitors in the places listed in Section 4.5, for whom it does not run. This works without storing anything on your device — no cookies, no identifiers, and nothing stored on your device beyond the record of your own consent setting. Instead, PostHog's servers in Frankfurt, Germany briefly process your IP address and browser type to compute an anonymous daily hash; the ingredient that would make this hash traceable (a random daily salt) is deleted every day, so these statistics cannot be linked to you, your device, or any account — not even by us or PostHog. We use these statistics only to understand aggregate website traffic. Declining analytics cookies does not stop this anonymous counting, but it does prevent all cookie-based analytics, session replay, and any data that could identify you.

That consent record is the only thing this anonymous measurement keeps in your browser, and it exists solely so that we can honour your analytics setting: our consent-preferences cookie and a single opt-in/opt-out flag in local storage, as described in Section 3.2. The flag records your current consent setting — analytics stays off until you opt in — and neither entry holds an identifier or is used for measurement.

4.7 Feedback Surveys (With Your Consent)

From time to time the App invites you to complete an optional feedback survey about your experience with the program.

• What we collect: Your answers to the survey questions, which may include free-text descriptions of your situation and how you are feeling. Survey answers are encrypted at rest like all other User Content.
• Who sees it: Unlike the AI analysis described in Section 4.3 — where our team only ever sees aggregate insights — your survey answers are read directly by our team. We use them to understand what is and isn't working and to improve the program.
• Your choice: We collect survey answers only with your explicit, specific, and optional consent, which we ask for the first time you start a feedback survey. Surveys are entirely optional and not required for any core feature of the App.
• Withdrawal: You can withdraw this consent at any time in Settings → Survey Feedback — which also permanently deletes the survey answers you have given — or by emailing [email protected]. Withdrawal does not affect your use of the App. One exception: if you separately gave us permission to publish part of an answer as a testimonial, that quote is covered by the separate permission described in Section 5.4, and withdrawing here does not retract it. To withdraw the testimonial permission too, just email us.
• Quick activity feedback: After an activity you can give a quick thumbs-up/down rating. The rating itself is lightweight product feedback that we use to improve the program — it is a button press, not written content. The optional written comment that can accompany a thumbs-down is part of your feedback-survey content: the App only offers the comment box if you have given the consent described in this section, and comments are handled exactly like survey answers — including deletion when you withdraw consent or use the delete option in Settings. That same deletion also removes the ratings themselves; their retention is described in Section 7.2.
• Testimonials: Some surveys separately ask whether we may quote your written feedback to promote the App. That is a further, separate choice, explained in Section 5.4.

5.1 With Our Service Providers

We engage third-party companies to perform services on our behalf to help us operate and improve our Services. These service providers have access to your personal information only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose. Our providers include:

• Authentication Services: We use Google Firebase Authentication to manage user accounts and securely handle sign-ins (including Facebook Login).
• Payment Processors: We use Stripe to process payments. They handle your payment information directly according to their own privacy policies. You can view Stripe's privacy policy at stripe.com/privacy.
• Analytics Providers: We share data with analytics providers to help us understand usage patterns and improve our Services. This includes pseudonymous identifiers and data about your interactions with our App and Website. While this data does not include direct identifiers like your name or email, we treat it as personal information, and we only collect it with your consent. The one exception is the anonymous, cookie-free website measurement described in Section 4.6, which carries no identifier. Our analytics providers are:
  • Google Analytics / Google Analytics for Firebase (Google LLC, USA) — policies.google.com/privacy
  • Google Tag Manager (Google LLC, USA) — manages how analytics scripts are loaded on our Website and does not itself collect personal data.
  • PostHog (PostHog Inc., hosted on PostHog EU Cloud, Frankfurt, Germany) — collects pseudonymous in-App product usage events under your analytics consent, and — separately, only if you opt in to AI analysis — the numeric AI answer scores described in Section 3.3. On our Website it also collects pseudonymous product-analytics events tagged as website-sourced (page views, UTM and referrer parameters, call-to-action clicks, and beta-form funnel events), and, with your analytics consent, fully masked session replays — everything you type and all on-screen text is hidden from the recording before it leaves your browser. From Website visitors outside the places listed in Section 4.5, including those who decline analytics cookies, it also receives the anonymous, cookie-free statistics described in Section 4.6. Never receives your name, email, or any journal text. posthog.com/privacy
• AI Processing Provider: If you opt in to AI analysis (Section 3.3), your journal responses are processed by the Anthropic Claude model via AWS Bedrock in Frankfurt, Germany. AWS acts as our service provider; your text is not retained by the service after scoring and is never used for AI training.
• Error and Performance Monitoring Services: We use Sentry and Google Firebase Crashlytics to help us identify and fix technical issues in our App. These services may process diagnostic data and device information as described in Section 3.
• Infrastructure and Hosting Providers: We use Amazon Web Services (AWS) for secure cloud hosting of the App's servers and database. We use Cloudflare for content delivery (CDN), static website hosting, web application firewall (WAF) protection, bot prevention (Turnstile), and secure storage of beta programme applications. We also use AWS Key Management Service (KMS) to manage the cryptographic keys that protect your data. While AWS manages the master keys, they do not have access to the data keys or your actual journal entries (User Content), which remain encrypted at all times.
• Communication Providers: We use Amazon Web Services (Amazon SES) to deliver essential service-related emails (such as account verification, course updates and beta application emails). We also use third-party services to send newsletters (if you opt in) and push notifications (via Google Firebase Cloud Messaging).

5.2 For Legal Reasons

We may disclose your personal information if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, court order, or a lawful request from a government authority.
• Protect and defend the rights, property, or safety of Resilience Labs PTY LTD, our users, or the public.
• Prevent or investigate possible wrongdoing in connection with the Services.

5.3 In a Business Transfer

If Resilience Labs PTY LTD is involved in a merger, acquisition, or sale of all or a portion of its assets, your personal information may be transferred as part of that transaction. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.

5.4 Anonymised and Aggregated Data, and Testimonials

We may share or publicly disclose information that has been aggregated and anonymised in a way that it cannot reasonably be used to identify you — for example, statistical insights about our user base.

If you give us your explicit consent through a feedback survey, we may also publish short quotes from your written survey feedback as testimonials to promote the App. You choose whether a quote appears anonymously or with your first name. Before publishing, we review every quote and remove details that could identify you or anyone else. We keep a minimal record of your permission (who consented, to what, and when) so that we can prove consent and honour withdrawal. You can withdraw this permission at any time by emailing [email protected]; we will then stop using your quotes and remove them from the surfaces we control going forward. If you delete your account, quotes we have already published and the minimal permission record are retained so we can evidence your consent; everything else is deleted as described in Section 7.2, apart from the deletion record described there.

7.1 Security Measures

We have implemented a range of security measures to prevent your personal information from being accidentally lost, used, accessed in an unauthorised way, altered, or disclosed. These measures include:

• Encryption: Your personal information is encrypted when in transit between your device and our servers (using TLS/SSL). We use a multi-layered approach to protect your data when it is at rest. In addition to standard platform-level encryption, we utilise Envelope Encryption architecture. This means your sensitive User Content is encrypted with a unique data key, which is itself encrypted using a master key managed by AWS Key Management Service (KMS). This ensures that even if our database were compromised, the data would remain unreadable without the strictly controlled master keys.
• Access Controls: We limit access to your personal information to those employees and third-party service providers who have a business need to know. They will only process your personal information on our instructions, and they are subject to a duty of confidentiality.
• Secure Development: We build our Services with privacy and security principles in mind from the start.

While we are committed to securing your data, it is important to remember that no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, while we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. If a data breach is likely to cause you serious harm, we will notify you and the relevant regulator as the law requires.

7.2 Data Retention

We will only retain your personal information for as long as is reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements.

• Account Information and User Content: We retain your account information and all User Content (such as journal entries and quiz answers) for as long as your account is active. This is necessary to provide you with the core functionality of the App. If you choose to delete your account, we will permanently delete this information within 30 days of account deletion. The small number of records that survive deletion — published testimonial quotes, their permission records, and the deletion record itself — are described below and in Section 5.4.
• Other Information: We may retain other information, such as anonymised analytics data and crash logs, for a limited period necessary to fulfil the purposes outlined in this policy (for example, 90 days for crash logs).
• Google Analytics Data: 2 years (Google's default retention; data is pseudonymous and subject to Google's own deletion schedule).
• AI Analysis Scores: Retained while your AI-analysis consent is active; deleted immediately when you withdraw that consent. Pseudonymous score events in PostHog are retained for a maximum of 13 months and are deleted when you delete your account.
• Website Analytics & Session Replay: Pseudonymous website analytics events are retained on the same basis as our other PostHog analytics data (a maximum of 13 months). Masked session replays are retained for 30 days, after which they are automatically deleted.
• Anonymous Website Measurement: The daily salt used to compute the anonymous hash described in Section 4.6 is deleted every day. The resulting anonymous statistics are retained on the same basis as our other PostHog analytics data (a maximum of 13 months); they carry no identifier, so they cannot be traced back to you.
• Beta Application Data: Retained for the duration of the beta programme and deleted when the programme concludes or upon your request, including the Google Sheet copy and our team's notification emails. If you opted in to the launch email, we keep your first name, your email address and the date you opted in (our record of your consent), and nothing else from your application, after the beta concludes, in the contact list of the service we use to send that email, until we send it or you withdraw your consent, whichever comes first. Deleted application data can remain in our database provider's restore history (Cloudflare D1) for up to 30 days. Our email provider (Amazon SES) does not keep a copy of the emails it sends for us; if an email to you bounces or is reported as spam, it keeps your address, the reason and the date on a suppression list until we remove it.
• Cookie Consent Record: 1 year (your consent preferences stored in a browser cookie). The accompanying opt-in/opt-out flag in local storage remains until you clear your browser storage or change your choice.
• Feedback Survey Answers: Kept while your survey-feedback consent is active. They are permanently deleted when you withdraw that consent in Settings → Survey Feedback, and in any case within 30 days of deleting your account. If you answered surveys before we introduced this consent, those older answers stay stored — encrypted, and never read by our team — until you turn feedback surveys on (they are then covered by Section 4.7), delete them in Settings → Survey Feedback, or delete your account. A quote you separately allowed us to publish as a testimonial follows the testimonial rules below instead.
• Quick Activity Feedback (Thumbs Ratings): Your thumbs-up/down ratings are simple product feedback (see Section 4.7), so we keep them while your account is active even if you have not turned on feedback surveys. Whenever you withdraw survey-feedback consent or use "Delete my survey answers" in Settings, we also delete all the ratings you have given up to that point; ratings you give afterwards are kept again until your next deletion request. All ratings are deleted within 30 days of account deletion.
• Testimonial Permission Records: If you agree to a testimonial, we keep the published quote and a small permission record (who consented, to what, and when) while the quote is in use and for 6 years after we last use it — even if you delete your account — so that we can prove your consent.
• Deletion Records: When you delete your account we keep a small record of the deletion — your account identifier and the deletion date — for as long as we operate the App, because it is what stops the deleted identifier being used again. While a published testimonial quote's permission record from your account still needs it, that record also holds a one-way fingerprint of your email address — never the address itself, and never your name — so that we can match a later request from you, such as withdrawing that quote, to that record. The fingerprint is removed as soon as the last permission record is deleted.
• Legal Requirements: We may be required to retain certain information for longer periods to comply with our legal obligations, resolve disputes, or enforce our agreements. For example, records related to payments may be kept for several years as required by financial laws.

Once we no longer need your personal information for these purposes, we will either delete or de-identify it.