Privacy Policy

This Privacy Policy explains how Enchantra, Inc. ("Temperates," "we," "us") collects, uses, and shares information when you use our website, app, newsletter, and related services (the "Services"). Questions? Email [email protected].

Information we collect

• Account information. Email address and password (hashed) when you create an account. Optional display name or profile fields you choose to add.
• Subscription and billing. When you subscribe, our payment processor Stripe collects payment information directly. We receive a customer ID, plan, status, trial dates, and renewal/cancellation events. We do not see or store full card numbers.
• Content you create. Moments and drinks you log, next-day check-ins, goals, and messages you send to the Clair AI assistant.
• Communications. Email and contact-form messages you send us, and records of transactional emails we send you.
• Usage and device data. Pages viewed, scroll depth, time on page, referrer, approximate location derived from IP, browser, and device type. Used to improve the Services and measure performance.
• Referral data. If you use or share a referral code, we record the link between the referring and referred accounts to apply credits.

How we use your information

• To operate the Services, including authenticating you and saving your content.
• To process subscriptions, trials, and referral credits via Stripe.
• To generate AI-assisted reflections and insights using your moments, mornings, and chat history (processed by our model providers — see below).
• To send transactional and, with consent, marketing emails. You can unsubscribe at any time.
• To analyze usage, debug issues, prevent abuse, and improve the Services.
• To comply with legal obligations and enforce our Terms of Service.

Legal bases (EEA/UK users)

Where the GDPR or UK GDPR applies, we rely on: contract (to provide the Services you signed up for), legitimate interests (security, analytics, improving the Services), consent (marketing emails, where required), and legal obligation.

How we share information

We do not sell your personal information. We share it only with:

• Service providers under contract: Supabase (hosting, database, and authentication), Stripe (payments), Resend (email delivery), Cloudflare (DNS and edge), and AI model providers (Google Gemini, OpenAI) for Clair and insights features. These providers process data on our behalf under their own security and privacy commitments.
• Legal and safety: When required by law, subpoena, or to protect rights, safety, or property.
• Business transfers: If Temperates is involved in a merger, acquisition, or asset sale, your information may be transferred subject to this Policy.

AI features (Clair and Insights)

When you chat with Clair or use insights, the relevant content (your messages, recent moments, and morning entries) is sent to our AI model providers to generate a response. We do not authorize them to train their models on your inputs. AI outputs can be wrong or out of context and are not a substitute for professional advice.

Cookies and analytics

We use a small number of strictly-necessary cookies to keep you signed in and a first-party analytics tool to measure traffic. We do not run third-party advertising trackers. You can clear cookies in your browser at any time; doing so will sign you out.

Data retention

We keep your account and content for as long as your account is active. When you delete your account, we delete or anonymize your personal data within 30 days, except where we must retain it to comply with legal, accounting, or fraud-prevention obligations.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, object to or restrict certain processing, and withdraw consent. To exercise any of these rights, email [email protected]. You can also delete your account directly from the app's Profile screen.

EEA/UK residents have the right to lodge a complaint with their local data-protection authority. California residents may exercise rights under the CCPA/CPRA; we do not sell or share personal information for cross-context behavioral advertising.

International transfers

Our infrastructure is primarily hosted in the United States. If you access the Services from outside the US, your information will be transferred to and processed in the US under appropriate safeguards (such as Standard Contractual Clauses where required).

Security

We use industry-standard safeguards including encryption in transit, encrypted storage, row-level security on our database, and access controls. No system is perfectly secure; contact us promptly if you suspect a security issue.

Children

The Services are not directed to children under 18 and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us so we can delete it.

Changes to this policy

We will update this Policy as the Services evolve. When we make material changes, we will notify subscribers by email or in-app notice. The "Version" date at the top indicates when the Policy was last updated.

Contact

Enchantra, Inc.
Delaware, United States
[email protected]