Privacy Policy

1. Overview

This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use Codessence (the “Service”). Codessence is an AI-powered personal development platform that includes journaling, assessments, community features, and AI-generated insights. If you do not agree with this policy, do not use the Service.

2. Notice at Collection (California)

At or before the point of collection, we collect the categories of personal information described below to operate the Service, provide AI features, support community functionality, prevent fraud, and comply with law. We do not sell personal information, and we do not share personal information for cross-context behavioral advertising unless disclosed and you are provided a right to opt out where applicable.

3. Information We Collect

A. Information You Provide

• Account and identity information (name, email address, password or login credentials, date of birth, profile details).
• Assessment data (values, beliefs, aspirations, preferences, and other responses).
• Origin Story and personal history inputs (if you choose to provide them).
• Journal content (text, images, audio, video, tags, and related metadata).
• AI conversations (messages and conversation history with the AI Wisdom Mentor).
• Community content (posts, comments, messages, circles, and shared entries).
• Support and communications (messages to us, feedback, survey responses).
• Payment and subscription information (processed by a third-party payment provider; we receive limited transaction metadata).

B. Automatically Collected Technical Data

• IP address, device identifiers, browser type, operating system, and settings.
• Usage and interaction data (pages viewed, clicks, session duration, feature usage).
• Approximate geolocation (country/region derived from IP).
• Cookies and similar technologies (see Cookies section below).

C. AI-Derived and Generated Data

• Blueprint profiles and summaries generated from your inputs.
• Pattern recognition and derived insights (themes, mood trends, alignment indicators).
• Recommendations (learning paths, prompts, suggested practices).
• Matching signals and scores for community resonance features.

4. Sensitive Data and Special Categories

Depending on what you choose to enter, the Service may process sensitive information (for example, journal entries about emotions or well-being, beliefs, spiritual or philosophical viewpoints, and personal challenges). Where required by law (including GDPR Article 9), we rely on explicit consent to process such data. You may withdraw consent at any time; however, withdrawal may limit your ability to use certain features.

5. How We Use Information

• Provide, maintain, and operate the Service (including account management and feature delivery).
• Generate AI outputs (Blueprints, prompts, recommendations, reflections) and personalize experiences.
• Enable community features, connections, and sharing controls you select.
• Process subscriptions and purchases, manage billing, and prevent fraud.
• Improve reliability, performance, safety, and security of the Service.
• Provide customer support and respond to inquiries.
• Communicate with you about service updates, security notices, and, where permitted, marketing (you can opt out of marketing).
• Comply with legal obligations and enforce our Terms.

6. Legal Bases (GDPR / UK GDPR)

If you are located in the EEA/UK, we process personal data under the following bases, as applicable: (a) performance of a contract, (b) consent (including explicit consent for sensitive data), (c) legitimate interests (such as security, analytics, and service improvement), and (d) compliance with legal obligations.

7. AI Processing Disclosures

Codessence uses artificial intelligence to generate content and insights. The AI Wisdom Mentor is a non-human system. AI outputs are informational and may be inaccurate. We do not provide medical, psychological, legal, or financial advice.

Model training and improvement. We may use aggregated and de-identified information to improve the Service. We do not use your identifiable journal content or AI conversations for external foundation model training without explicit opt-in consent. Where an AI vendor provides opt-out controls for training, we enable those settings where available.

8. Automated Decision-Making and Profiling

The Service performs profiling to create Blueprints, recommendations, and community matching signals. These features are intended to provide informational outputs and do not make decisions with legal or similarly significant effects. Where required, you may request information about the logic involved and request human review.

9. Sharing and Disclosure

We share information only as needed to operate the Service, including with service providers (“processors”) such as cloud hosting, AI providers, analytics, email delivery, and payment processing. We may also disclose information to comply with law, protect rights, prevent fraud, or in connection with corporate transactions. We do not sell personal information.

10. California — Do Not Sell/Share; Sensitive Use Limitation

We do not sell personal information. If we engage in any “sharing” as defined by California law for cross-context behavioral advertising, we will provide a clear opt-out mechanism (including honoring applicable browser-based signals where required). Where we process sensitive personal information, we use it to provide the Service, secure the Service, and comply with law. California residents may have a right to limit certain uses of sensitive personal information where applicable.

11. Cookies and Tracking

We use cookies and similar technologies for essential functionality and, with appropriate consent where required, analytics and performance measurement. If you are in the EEA/UK, non-essential cookies are disabled unless you opt in. California users may opt out of certain tracking where applicable.

12. International Transfers

If you access the Service from outside the United States, your data may be transferred to and processed in the United States and other locations. For EEA/UK transfers, we rely on appropriate safeguards such as Standard Contractual Clauses and supplementary measures where required.

13. Data Retention

We retain personal data as long as needed for the purposes described in this policy, unless a longer retention period is required by law. Retention periods vary by category (account, journal, conversations, community content, payment records, analytics). Upon account deletion, we delete or de-identify data subject to legal requirements, security backups, and dispute obligations.

14. Your Rights

EEA/UK

Access, rectification, erasure, restriction, portability, objection, and rights related to automated processing.

California and Other U.S. States

Rights to know/access, delete, correct, opt out of sale/sharing, and limit use of sensitive information where applicable.

You may exercise rights by emailing our privacy contact. We may need to verify your identity before fulfilling a request.

15. Marketing Preferences

You can opt out of marketing emails by using the unsubscribe link in the email or contacting us. We may still send you non-marketing messages about your account, security, or service changes.

16. Security

We implement reasonable administrative, technical, and organizational safeguards, including encryption in transit (TLS) and encryption at rest, access controls, and monitoring. No method of transmission or storage is 100% secure.

17. Children

The Service is intended for users 18 years of age or older. We do not knowingly collect personal information from children. If we learn that a child has provided personal information, we will delete it.

18. Contact; Complaints

If you have questions about this Privacy Policy or your personal data, contact us at:

If you are in the EEA/UK, you also have the right to lodge a complaint with your local supervisory authority.

19. Updates

We may update this Privacy Policy from time to time. We will post updates and change the Effective Date. Your continued use of the Service after the update means you accept the revised policy.