Privacy Policy

1. Overview

human.today, Inc. ("human.today," "we," "us," or "our") builds the Life OS—a personalized operating system that combines self-discovery modules, journaling, mood tracking, AI-guided insights, and community-driven practices to help you live intentionally in the age of AI. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you interact with the human.today marketing sites, the Life OS web application, research programs, and communications (including email, in-app messages, and customer support).

By using human.today, you agree to the practices described in this policy. If you have questions or would like to exercise your privacy rights, contact us at privacy@human.today.

2. Information We Collect

We collect the information needed to provide a tailored Life OS experience, operate our business, and communicate with you. The categories below reflect how human.today works today and the roadmap documented in our public product specifications.

Account & Authentication Data

• Name, email address, and authentication status managed through Clerk.
• Unique identifiers and security logs from our identity providers to prevent fraud and keep your workspace safe.

Profile, Onboarding & Preference Data

• Bio, location, interests, archetype quiz results, and onboarding selections that calibrate your Life OS journey.
• Personalization preferences (for example session length, learning modality, pace, and communication style).

Life OS Insights & Reflective Content

• Journals, prompts, reflections, gratitude entries, and breakthrough moments that you voluntarily add to the platform.
• Belief Archeology™ artifacts, value hierarchies, purpose statements, decision frameworks, transformation metrics, and module progress captured in your Life OS profile.
• Session interactions, AI-generated insights, and shareable moments created during guided experiences.

Usage, Device & Analytics Data

• Device information, log files, and diagnostics automatically collected when you access our services.
• Cookie identifiers, event data, feature usage, and funnel analytics captured through PostHog and our internal instrumentation (learn more in our Cookie Policy).
• AI token usage metrics and session telemetry that help us manage compute costs and ensure responsible AI behavior.

Payment & Subscription Data

• Stripe customer identifiers, subscription plan details, invoices, and payment method metadata (human.today never stores full payment card numbers).
• Records of promotions, referral codes, and billing support interactions.

Communications & Support Data

• Emails, surveys, and feedback you send to our team, including responses to research invitations or beta programs.
• Notification preferences for email, push, and in-app updates, along with records of opt-ins and opt-outs (see ourEmail & Communication Policyfor details).

Information from Integrations & Sharing

• Connections you authorize—such as social sharing or imported practices—and the metadata required to deliver those features.
• Aggregated or anonymized insights generated when you participate in community challenges or share achievements with others.

3. How We Use Personal Information

We process data to power a safe, personal, and continuously improving Life OS. Uses include:

• Delivering core functionality such as authentication, journaling, and mood tracking.
• Personalizing guidance, exercises, and AI-generated insights based on your inputs and Life OS profile.
• Maintaining account, payment, and subscription records.
• Sending transactional updates, progress summaries, and marketing communications in accordance with your preferences.
• Improving product experiences through analytics, research, and user testing.
• Monitoring platform health, preventing abuse, and securing our infrastructure.
• Complying with legal obligations, responding to lawful requests, and enforcing our policies.

Legal Bases for Processing (EEA/UK Users)

• Performance of a contract to provide the Life OS and related services.
• Your consent—for optional experiences, marketing, and analytics cookies.
• Legitimate interests—product improvement, security, and new feature development.
• Compliance with legal obligations—tax, accounting, and regulatory requirements.

4. How We Share Information

human.today does not sell personal information. We share data only when necessary:

• Service providers: Clerk (identity), Stripe (billing), Convex (data storage), Vercel (hosting), PostHog (analytics), Resend (email), and trusted partners who process data under our instructions.
• Collaborative features: When you explicitly share insights, downloadable artifacts, or social posts with others.
• Legal purposes: To comply with laws, protect our rights, or respond to valid requests from public authorities.
• Business transfers: In connection with a merger, financing, acquisition, or dissolution event.

We require every vendor to maintain robust security and confidentiality obligations, and we only authorize them to use personal data for the services they provide to human.today.

5. International Data Transfers

human.today operates from the United States. If you access the Life OS from outside the U.S., your information may be transferred, processed, and stored in the U.S. or other countries with different data protection laws. When we transfer personal data internationally, we rely on adequacy decisions, Standard Contractual Clauses, or your explicit consent, and we implement additional safeguards when necessary.

6. Data Retention

We keep personal information only for as long as it is needed to deliver the Life OS, comply with the law, or resolve disputes. Examples include:

• Account records: retained while your account is active and for up to 3 years after closure.
• Life OS artifacts (journals, modules, insights): deleted or anonymized within 30 days of a verified account deletion request, unless legal retention rules apply.
• Subscription and payment records: retained for at least 7 years to meet financial obligations.
• Analytics data: aggregated or de-identified as quickly as practical for trend analysis.

You may request deletion of your account at any time by visiting your in-product privacy settings or emailing privacy@human.today.

7. Cookies & Similar Technologies

We use cookies, device identifiers, and tracking pixels to remember preferences, secure your sessions, understand feature adoption, and measure marketing performance. Detailed information—including cookie lifespans and how to manage them—is available in our Cookie Policy. You can update your consent anytime through in-app privacy controls or your browser settings.

8. Email & Communication Preferences

We send transactional notices (such as onboarding tips, payment confirmations, and security alerts), product updates, research invitations, and marketing messages. You can manage your preferences through the Life OS privacy settings, unsubscribe links in our emails, or by contacting us. For a deeper look at how we manage communication, see our Email & Communication Policy.

9. Your Privacy Rights

Global Rights

You have the right to access, update, correct, export, and delete the personal data we hold about you.

Additional Rights for EEA/UK Users

• Right to restrict or object to processing based on legitimate interests.
• Right to withdraw consent at any time.
• Right to lodge a complaint with your local supervisory authority.

Additional Rights for California Residents

• Right to know the categories of personal information collected and disclosed.
• Right to request deletion of personal information (subject to legal exceptions).
• Right to correct inaccurate data and receive equal service even after exercising privacy rights.

To exercise these rights, email us at privacy@human.today. We may request verification information to protect your account.

10. AI-Specific Practices

human.today uses Google Gemini models via the Vercel AI SDK to generate personalized insights. We do not train foundation models using your identifiable data. AI interactions are logged to detect abuse, improve prompt quality, and surface breakthroughs back to you. You can export or delete these artifacts through your account settings.

11. Security

We implement technical and organizational safeguards including encryption in transit, access controls, regular security reviews, environment isolation, and vendor assessments. While no system is perfectly secure, we monitor for anomalies and maintain incident response procedures to address potential risks quickly.

12. Children’s Privacy

human.today is designed for individuals aged 13 and older. We do not knowingly collect personal data from children under 13. If you believe a child has provided information to us, contact privacy@human.todayso we can delete it.

13. Changes to This Policy

We may update this Privacy Policy to reflect product evolution, legal requirements, or feedback. If changes are material, we will provide notice via email or in-app messaging. Continued use of human.today after an update means you accept the revised policy.

14. Contact Us

Questions, feedback, or requests can be directed to:
human.today, Inc.
Privacy Team
privacy@human.today