Privacy Policy

This page is maintained by SelfForward and explains what data we collect, why, and how you can control it. It is not a certification.

What we collect

• Account: email address, display name, and (if you sign in with Google) the profile fields Google shares with us.
• Content you create: photos you upload for your future-self portrait, voice samples if you choose to clone your voice, letters, decisions, habits, journal entries, check-ins, and any places you save.
• Usage: basic logs of the requests you make (page loads, feature use, errors) so we can keep the service running.
• Billing: if you subscribe, Stripe handles your card details. We store only the subscription status, plan, and renewal date.
• Push subscriptions: if you enable habit reminders, we store the push endpoint your browser gives us so we can deliver notifications.

What we don't collect

• We don't sell your data.
• We don't run advertising trackers on the site.
• We don't scan your photos or voice for anything except the AI features you explicitly use.

Who processes your data (sub-processors)

• Supabase — database, authentication, and file storage (managed by Lovable Cloud).
• Google (Gemini) and OpenAI — via the Lovable AI Gateway, used to generate letters, images, and text replies.
• ElevenLabs — voice cloning and text-to-speech, when you use those features.
• HeyGen — live streaming avatar, when you use the "Go Live" feature.
• Stripe — subscription billing.

Each of these providers processes only the data required to deliver its part of the service, under their own privacy policies.

How long we keep it

We keep your data for as long as your account exists. When you delete your account, we delete your profile, letters, photos, voice samples, habits, check-ins, decisions, and simulations from our database and storage. Backups roll off within 30 days.

Deleting your account

Go to Settings → Danger Zone → Delete my account. You'll be asked to type DELETE to confirm. Deletion is immediate and cannot be undone.

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data. You can do most of this from Settings. For anything else, contact us and we'll respond within 30 days.

Cookies

We use a small number of first-party cookies and local-storage entries to keep you signed in and remember your preferences. No third-party ad or analytics cookies are set by us.

Security

Data is stored on managed infrastructure with encryption in transit and at rest. Access to your data is scoped to your account through database row-level security. No system is perfectly secure — if we ever discover a breach that affects you, we will notify you promptly.

Children

SelfForward is not for children under 16.

Contact

Questions or requests? Email Michelle directly. It will open your email app with the address already filled in.