Privacy Policy

1. Introduction

Psyvera ("we," "our," or "us") is a behavioral wellness intelligence platform based on Dr. Janet Hranicky's Pleasure-Freeze Theory and psychoneuroimmunology (PNI) research. This Privacy Policy describes how we collect, use, store, and protect your personal information when you use our platform at psyvera.ai (the "Service").

We are committed to protecting your privacy and handling your data responsibly. By using the Service, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your email address and password (managed securely through our authentication provider).

2.2 Profile Information

During onboarding and use, you may provide your name, wellness domains of interest, and personal preferences.

2.3 Assessment & Instrument Data

When you complete wellness assessments, we collect your responses, which are scored using our machine learning engine to generate personality archetype profiles, stress response patterns, and wellness insights.

If you choose to complete optional validated self-report instruments (for example PSS-10, a perceived-stress scale, or GAD-7, an anxiety screener), we store your item responses and the resulting scores. These instruments are used to help us calibrate and evaluate the accuracy of our wellness signals over time. Participation is voluntary and controlled by a research opt-in toggle in your settings; you can decline or withdraw at any time.

2.4 Wellness Information

You may voluntarily provide wellness-related information including:

• Personal documents such as wellness notes, journals, and reference materials
• Medication and supplement tracking information (name, dosage, frequency)
• Life events and lifestyle data (exercise, diet, sleep, stress levels)

2.5 Biometric Data

With your consent, the platform may analyze voice recordings (for stress patterns) and facial expressions (for emotional state indicators). Facial-only analysis is performed locally in your browser. In Voiceprint standard or deep mode, derived facial landmarks and forehead color signals may be sent to our biometric analysis service for multimodal stress analysis; raw video is not stored or transmitted. Voice recordings may be stored for session continuity and to let you replay a reading; you can delete them, and they are removed when you delete your account (see Sections 7 and 8).

Exploratory signals. Our voice- and facial-derived stress indicators are exploratory and have not been clinically validated. They are presented to help you notice patterns, not to diagnose any condition. We are actively working to calibrate these signals against validated instruments, and we label them as exploratory throughout the product.

2.6 Conversation Data

When you interact with our AI coaching system, your messages and the AI's responses are stored to provide continuity, personalization, and improvement of the coaching experience.

2.7 Tracking and Journal Data

Check-ins, somatic maps, trigger logs, mindwork journal entries, and behavioral signal data you create within the platform.

2.8 Usage Data

We collect standard web analytics including pages visited, session duration, and feature usage to improve the platform experience.

3. How We Use Your Information

We use your information to:

• Provide and personalize the wellness assessment and coaching experience
• Generate assessment reports, analytics, and wellness insights
• Power AI-driven coaching conversations tailored to your profile
• Track your wellness progress over time
• Send proactive wellness notifications and check-in reminders
• Improve and develop the platform
• Ensure security and prevent abuse

4. AI Data Processing

Important: Your data is processed by artificial intelligence systems to provide personalized wellness insights. Specifically:

• Your assessment responses are scored by our proprietary machine learning engine
• Your coaching conversations, wellness context, and profile data are processed by AI language models to generate personalized responses
• Your wellness data may be used to generate embeddings (numerical representations) for knowledge retrieval purposes

We use enterprise-grade AI services with contractual data protection agreements. Your data is not used to train third-party AI models. We continuously evaluate and select AI providers that meet our data protection standards.

5. Data Storage and Security

• Encryption in Transit: All data transmitted between your browser and our servers is encrypted using TLS/HTTPS.
• Encryption at Rest: Data stored in our database is encrypted at rest using industry-standard encryption provided by our infrastructure partners.
• Access Controls: Row-level security policies ensure that users can only access their own data. Administrative access is restricted and logged.
• Authentication: We use secure, industry-standard authentication with encrypted sessions.

6. Third-Party Services

We use the following categories of service providers who may process your data:

• Cloud Infrastructure: Database hosting, file storage, and application hosting
• AI Processing: Language model providers for coaching and analysis features
• Error Monitoring: Application error tracking (configured to exclude personal health information)

All third-party service providers are selected based on their security practices and data protection commitments.

7. Data Retention

We retain your personal data for as long as your account is active. You may request deletion of your data at any time (see Section 8). Upon account deletion, your data will be permanently removed from our active systems within 30 days. Backup copies may persist for up to 90 days before being automatically purged.

8. Your Rights

You have the right to:

• Access: Request a copy of all personal data we hold about you
• Correction: Update or correct inaccurate personal data
• Deletion: Request permanent deletion of your account and all associated data
• Export: Download your data in a portable format
• Withdraw Consent: Stop using optional features (e.g., biometric analysis) at any time

To exercise these rights, use the data management options in your account settings or contact us at the address below.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We do not use your assessment, biometric, journal, or coaching data to serve ads.

8.1 U.S. State Privacy Rights (including California / CPRA)

Depending on your state of residence, you may have additional rights to know, access, correct, delete, and obtain a portable copy of your personal information, and to not be discriminated against for exercising them. Some of the information we process — health-related and biometric data — is treated as sensitive personal information; we use it only to provide the wellness features you request and for the calibration/research purposes described above, not to infer characteristics for advertising. To exercise a request, use your account settings or email privacy@psyvera.ai.

8.2 EU/UK Rights (GDPR)

If you are in the EU/UK, our legal bases for processing are your consent (for biometric analysis and optional research instruments), performance of a contract (to deliver the Service you signed up for), and our legitimate interests (security and product improvement). You may withdraw consent, object to processing, and lodge a complaint with your local supervisory authority. Where data is processed outside your region, we rely on appropriate safeguards such as Standard Contractual Clauses.

9. Biometric Information Notice

This section applies to biometric identifiers and biometric information (for example, a voiceprint derived from your voice recordings) and is intended to align with biometric privacy laws such as the Illinois Biometric Information Privacy Act (BIPA) and the Texas Capture or Use of Biometric Identifier Act (CUBI).

• Consent: We collect and process biometric identifiers only after you enable a biometric feature (Voiceprint check-ins) and provide your consent. You may decline, and you may stop at any time.
• Purpose: Biometric data is used solely to recognize that a recording is yours (voiceprint matching) and to derive exploratory stress/emotional-state signals for your own self-tracking. It is not used for identification of any other person.
• No sale or disclosure: We do not sell, lease, trade, or otherwise profit from your biometric identifiers, and we do not disclose them except to the service providers that operate the Service on our behalf, or as required by law.
• Retention & destruction: We retain biometric identifiers only as long as needed for the purposes above. We permanently destroy them when you delete the data or your account, when you withdraw biometric consent, or within a defined period after your last use of a biometric feature — whichever occurs first. (Default destruction window: 1 year of biometric-feature inactivity; subject to finalization with counsel.)
• Storage: Biometric data is stored with the encryption and access controls described in Section 5. Raw video is never stored or transmitted; voice recordings may be stored for replay/session continuity and are deleted on your request or account deletion.

10. Data Breach Notification

We maintain safeguards designed to protect your data. In the event of a data breach affecting your personal information, we will notify affected users and applicable authorities as required by law and without undue delay.

11. Cookies & Analytics

We use strictly necessary cookies for authentication and session management, and limited first-party analytics to understand feature usage and improve the Service. We do not use third-party advertising or cross-site tracking cookies.

12. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Psyvera
Email: privacy@psyvera.ai