Privacy Policy

Stratify ("we", "us", "our") is a software AI personality analysis service available at https://stratifydesign.com. We provide personalised personality profiles and personal development tools based on structured data you provide to us.

For privacy enquiries contact: admin@stratifydesign.com

We collect only what is necessary to provide the service:

• Account data — email address and username, collected at registration.
• Birth data — full name, date of birth, time of birth, and city of birth. Used solely to calculate your personality profile.
• Questionnaire answers — your responses to MBTI and socionics questions.
• Goal data — text descriptions of your "Point A" (current state) and "Point B" (desired outcome), used to personalise your strategic plan.
• Journal entries — daily goals, state ratings, emotions and free-text reflections. This is the most personal data in the Service and it is held that way: for you alone, never published, never visible to other users.
• Token transactions — records of token purchases and usage for billing accuracy.
• Technical data — IP address (for rate limiting and fraud prevention), session cookies for authentication management, and your device's time zone (so that "today" means your day rather than UTC).
• Notifications — if you allowed them: your device's delivery address (a technical identifier issued by the app store), the permission state, and which notification categories you left switched on.
• Activity counters — one row per DAY per account: whether you opened the app that day, and how many of those opens started from tapping a notification. We deliberately keep no timestamped event stream: days are enough to answer "do people come back", and a log of every open is surveillance.
• AI usage records — which feature, which model, and how many tokens were spent. Used for cost accounting; the text of prompts and answers is not stored in these records.

We do not collect or store any payment credentials — no card numbers, no bank details.

In the mobile apps, subscriptions are purchased through Google Play or the App Store. The payment happens entirely on the store's side; all we receive back is a purchase identifier and its status, which is what unlocks access. Separately, the website accepts USDT transfers on the Tron network: you send the transfer yourself and all we observe is that an amount arrived at our address.

• Contract performance (Art. 6(1)(b) GDPR) — processing birth data and questionnaire answers is necessary to generate your requested analysis and provide the Service.
• Consent (Art. 6(1)(a) GDPR) — you give explicit consent to data processing and cross-border transfer at registration. Consent may be withdrawn at any time.
• Legitimate interest (Art. 6(1)(f) GDPR) — technical data (IP, logs) is processed for security and fraud prevention purposes.
• Legal obligation (Art. 6(1)(c) GDPR) — transaction records are retained to comply with applicable financial regulations.

• To generate and display your personality profile, Path hypotheses, journal analysis and daily insights.
• To maintain your account and token balance.
• To send transactional emails (registration confirmation, technical notices). No marketing emails without your explicit consent.
• To prevent abuse, fraud, and unauthorised access.
• To match incoming USDT transfers to your account (amount and wallet address — public blockchain data).

We do not sell, rent, or share your personal data with third parties for marketing purposes.

Your birth data, questionnaire answers, Point A and Point B descriptions, your FAQ questions and the text of your Journal entries are sent to Anthropic's Claude API — an analysis cannot be written without them. Anthropic processes this data under their own privacy policy. Prompts are sent at the moment you ask for an analysis and are not retained beyond your Stratify account.

We name the Journal separately because it is the most personal thing you trust the Service with, and where that text goes should not require reading between the lines. The daily insight receives no Journal text at all — only counts and averages (how many days have entries, average energy, how often tiredness was recorded).

AI-generated reports are stored in your account and are accessible only to you. Your data is not used to train AI models and is not shared with other users.

Reminder: All AI outputs are intended solely for self-reflection and personal development — not professional advisory of any kind.

Your data is stored in a PostgreSQL database managed by Supabase, hosted in the USA. We implement industry-standard security measures: HTTPS (TLS), server-side session management, row-level security policies (RLS), and rate limiting.

No security measure is 100% guaranteed, but we take all reasonable steps to protect your information.

We retain different categories of data for the following periods:

• Account data (email, username) — until account deletion + 30 days for recovery purposes.
• Birth data and personality profile — until account deletion.
• Token transaction records — 3 years from the date of transaction (financial record-keeping requirement).
• Technical logs and IP addresses — no more than 30 days.
• Session data — until logout or session expiry.

You may request deletion of your account and all associated data at any time by emailing admin@stratifydesign.com. Transaction records may be retained for mandatory retention periods under applicable law.

Your data is transferred to the following providers required to operate the service (all USA-based unless noted):

• Supabase — database and authentication (supabase.com/privacy)
• Anthropic — generates the analyses; receives birth data, answers, goals and Journal text (anthropic.com/privacy)
• Resend — transactional email delivery (resend.com/privacy)
• Railway — application hosting (railway.app/legal/privacy)
• Google Play and the App Store — take subscription payments in the mobile apps. Payment credentials stay with the store and never reach us; we call their APIs to confirm a purchase is genuine and active.
• TronGrid — reads public Tron network transactions to confirm payment (trongrid.io). No personal data is sent: we only query the public transfer history of our own wallet address.

The legal basis for transfers is your explicit consent given at registration and the necessity of contract performance. Each provider operates under their own data processing agreements.

You may withdraw consent at any time, which will result in account deletion as the service cannot operate without these data transfers.

Depending on your jurisdiction, you may have the right to:

• Access (Art. 15 GDPR) — obtain a copy of the personal data we hold about you.
• Rectification (Art. 16 GDPR) — correct inaccurate data.
• Erasure (Art. 17 GDPR) — request deletion of your data ("right to be forgotten").
• Portability (Art. 20 GDPR) — receive your data in a structured, machine-readable format.
• Objection (Art. 21 GDPR) — object to processing based on legitimate interests.
• Restriction (Art. 18 GDPR) — request restriction of processing in certain circumstances.
• Withdrawal of consent — withdraw consent to processing at any time without affecting the lawfulness of prior processing.

To exercise any right, email admin@stratifydesign.com. Response time: 7 business days. If you are unsatisfied with our response, you have the right to lodge a complaint with the data protection authority in your country.

We use strictly necessary cookies only. See our Cookies Policy for details:

• Session cookies — to keep you logged in during your visit.
• Auth cookies — set by Supabase to maintain your authentication state.

We do not use advertising cookies, tracking pixels, or third-party analytics that follow you across the web.

We do keep counters of our own, described in section 2: days of activity and notification-open counts, inside your account. They do not follow you across other sites and are not shared.

Our service is not directed at children under 14. Purchases are only permitted for users aged 18 and over. We do not knowingly collect data from minors. If you believe a minor has provided us with personal data, contact us at admin@stratifydesign.com and we will delete it promptly.

We may update this policy from time to time. Changes take effect when the updated version is published, the same way they do in the Terms of Use. Registered users will be told about material changes at their next sign-in — by an in-app notice or by email. The current version is always available at https://stratifydesign.com/privacy, with its effective date at the top. Continued use of the service after publication constitutes acceptance of the updated policy.

For any privacy-related questions, requests, or complaints:
Email: admin@stratifydesign.com
Website: https://stratifydesign.com