Adulthood 2.0 app privacy notice

Version: Adulthood 2.0

Controller and contact

Blain Bertrand, Rummelsberger Weg 94, 90537 Feucht, Germany.

Email: blainbertrand@gmail.com. Telephone: +49 171 2866186.

This notice describes the Adulthood iPhone app. The website has a separate privacy notice.

Local guides and personal entries

Guides work offline. Journal entries, saved reflections, goals, values, transitions, actions and the selected age group remain in the app's protected local data file, excluded from backups. They are not automatically sent to the Companion. You can manage local entries in Me. Removing the app may remove these entries. Calendar, Reminders and sharing exports occur when you choose them; copies must be managed in their destination apps.

Optional adult AI Companion

Before a conversation starts, the app explains online processing and asks for your agreement. Supabase then creates a pseudonymous account without asking for a name or email. Authentication credentials are held in device-only Keychain storage. Your conversation, selected age group and language pass through the Supabase gateway to OpenAI for safety checks and generation. Do not include names, addresses, account numbers or other identifying details. The Companion is educational AI, not a therapist or emergency service. You can stop using it at any time; offline features remain available.

Data use and storage

The service keeps the pseudonymous account identifier, daily request count, date and last-request time for authentication, usage limits and abuse prevention. The application database does not store conversation text. Usage rows dated earlier than the current UTC day minus seven days are removed when a subsequent quota request runs; this is not an exact seven-day scheduled deletion guarantee. An aggregate daily service counter is also kept.

Supabase hosts this project's database in eu-central-1. Online infrastructure and authentication can generate technical records, including timestamps, IP addresses, user-agent details and authentication events. The current Free plan lists one-day API/database log retention and one-hour Auth audit-log access. Writing Auth audit logs to this project's database is disabled. The dashboard access periods do not establish deletion periods for all provider security or legal records.

OpenAI requests use store:false. This does not mean zero retention. OpenAI documents that API content is not used for training by default unless the customer opts in. Optional API input/output sharing, Playground feedback sharing and evaluation/fine-tuning sharing are disabled in our inspected OpenAI organization. Disabling sharing applies going forward and does not retract any data previously shared while an opt-in was enabled. Its standard Responses abuse-monitoring records may contain prompts and replies for up to 30 days, with longer retention exceptions for legal requirements or preventing harm. Its moderation endpoint lists no abuse-monitoring or application-state retention. Provider security retention is separate from temporary chat storage in the app.

Deletion and choices

Chats are temporary and cleared when you leave the Companion. Only reflections you choose to save remain in your local journal. Me > Companion privacy lets you delete the pseudonymous online identity and its associated usage counters. Apple purchases and local journal entries are kept. This does not retract information already processed by providers or promise deletion of their independent security records. Using the Companion again creates a new identity after agreement.

Teen features

The 13–17 group can use offline personalization. Online Companion requests for this group are blocked in the client before account creation or text transmission. The server also retains a separate teen gate. Teen online conversations are not offered in this release.

Purchases, advertising and tracking

Premium purchases and restores use Apple StoreKit. Apple processes payments under its policies. The app adds no advertising or behavioral analytics and does not use Companion data for cross-app advertising tracking.

Your privacy requests

Contact the controller above about access, correction, deletion, restriction, portability or objections where applicable. Where processing is based on consent, you can withdraw it for future processing; this does not reverse processing that already occurred. You may complain to a competent data-protection authority, including Bavaria's BayLDA.

Legal bases

We rely on your consent for the optional adult Companion conversation processing (Article 6(1)(a) GDPR). You can withdraw that consent for future conversations by stopping use of the Companion. We process information necessary to provide purchased features under Article 6(1)(b) GDPR. Authentication, service limits and abuse prevention serve our legitimate interests in providing a secure, reliable service under Article 6(1)(f) GDPR. Where retention or disclosure is required by law, Article 6(1)(c) GDPR applies.

International processing

The project's database is hosted in Frankfurt, Germany. That location does not mean all processing stays in the EU. OpenAI and Supabase may process data in other countries, including the United States. Their data-processing terms provide applicable international-transfer safeguards, including standard contractual clauses where required. Contact the controller for information about the safeguards applicable to your data. This notice does not promise EU-only processing or zero provider retention.

Changes

We update this notice when the app's processing changes.