Privacy Policy
Last updated: July 2026
Your privacy matters to us. This policy explains what information we collect, how we use it, and the choices you have.
1. Information We Collect
We collect information you provide directly, such as:
- Your email address and password when you create an account
- Responses to quiz questions and reflection exercises
- Progress data, session activity, and preferences within the app
We also collect limited technical data automatically, including device type, browser, IP address, and usage patterns, to help us improve the service.
2. How We Use Your Information
We use your information to:
- Provide and personalise the Sombryn experience
- Send transactional emails such as account verification and password resets
- Understand how the service is used so we can improve it
- Communicate service updates or important notices
We do not sell your personal data to third parties.
3. Data Storage and Security
Your data is stored securely using industry-standard encryption. We use Supabase for database and authentication services, and Stripe for payment processing. These providers maintain their own security standards and privacy policies.
4. Cookies and Analytics
We use PostHog for product analytics to understand how users interact with Sombryn. This helps us improve the product. You can opt out of analytics tracking by disabling cookies in your browser settings.
5. Data Retention
We retain your data for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us at hello@sombryn.com.
6. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict certain types of processing
To exercise any of these rights, contact us at hello@sombryn.com.
7. Third-Party Services
Sombryn integrates with the following third-party services:
- Supabase — database and authentication
- Stripe — payment processing
- Resend — transactional email delivery
- PostHog — product analytics
- Vercel — hosting and infrastructure
Each of these services has its own privacy policy. We encourage you to review them.
8. Children's Privacy
Sombryn is not intended for users under 18 years of age. We do not knowingly collect personal data from children.
9. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of significant changes via email or a notice within the app.
10. Contact
If you have any questions or concerns about your privacy, please contact us at hello@sombryn.com.