Privacy Policy

1. Who We Are

Greater Human Inc.

Email: info@greaterhuman.ai

If you have questions about this Privacy Policy or how your data is handled, contact us at the email above.

2. Data We Collect

We collect the following categories of personal data:

Account Data

• Name and email address (provided during sign-up via third-party authentication)

Session Data

• Messages you send to the AI Guide
• AI-generated responses and session summaries
• Session metadata (timestamps, session type)

Voice Data

When you use voice mode, your speech is streamed to Deepgram for transcription, converted to text, and discarded. We do not store audio recordings. Only the resulting text transcript is retained as part of your session data.

Onboarding Data

Responses you provide during onboarding (such as your background and goals), used to personalise your experience.

Technical Data

• Device type and operating system
• App version
• Crash reports and diagnostics (used solely for debugging and stability)

Payment Data

When applicable, we store subscription status, plan type, and billing period. Payment processing is handled entirely by third-party providers. We never receive or store your payment card details.

We do not sell your data, share it for advertising, or use it for commercial profiling. See Section 13 for how we handle what you share during sessions.

3. Lawful Basis for Processing

We process your personal data under the following lawful bases:

• Performance of a Contract — To provide the Greater Human service, maintain your account, and deliver AI-guided sessions.
• Consent — For optional uses we describe and ask you about separately (such as any future use of de-identified data for model improvement). Where we rely on consent, you may withdraw it at any time.
• Legitimate Interests — To maintain user safety, support quality assurance, review selected sessions, detect misuse, and improve the platform in ways that do not override your rights and freedoms.
• Legal Obligations — To comply with applicable laws, regulatory requirements, and safety-related obligations.

Quality and safety review is carried out under Legitimate Interest using anonymized session content. We do not review the identifiable content of your sessions without your request or approval (see Section 4).

4. How We Use Your Data

Your data is used solely to provide, maintain, and improve the Greater Human experience:

• AI Functionality: To give continuity across sessions and support the personalised responses of your AI Guide.
• User Safety: To ensure conversations comply with ethical and safety standards.
• Quality Review: To maintain quality and safety, we may review sessions in anonymized form, with identifying details removed. We do not review the identifiable content of your sessions unless you request it or approve it.
• AI Training: Your conversations are not currently used to train AI models. In the future, we may use fully anonymised, de-identified transcripts for model improvement. Anonymised data cannot be traced back to any individual. We will update this policy before any such use begins.
• Analytics: We collect product analytics (events such as which screens you view and when sessions start and end) to understand how the app is used and to improve the experience. We use PostHog (EU-hosted in Frankfurt) as our analytics provider. We do not use advertising trackers or share analytics data for marketing purposes.

We will never sell your data or share it with third parties for marketing or unrelated purposes.

5. Cookies and Tracking

We do not use cookies that track you across websites. The app may use standard device storage (such as authentication tokens) solely to keep you signed in and to support app functionality. We do not use tracking pixels or third-party advertising trackers.

6. Data Retention and Deletion

• Session Data: Your session transcripts are stored in your private account for as long as you choose. We do not automatically delete them.
• Account Deletion: You can delete your account at any time from the Profile screen in the app. Deletion is a soft delete: your account is deactivated immediately, and you have 30 days to sign back in and cancel. After 30 days, all your personal data is permanently removed.
• Account Data: Stored for as long as your account remains active. When deleted, personal data is removed in accordance with applicable data protection laws.

You may also request deletion by emailing info@greaterhuman.ai.

7. Data Storage and International Transfers

We use Google Cloud Platform to host and process your data.

• EU-Based Storage: Your account and session data is stored on servers in the European Union.
• AI Processing: We use Google's Gemini models to generate responses, through Google Cloud Vertex AI and the paid Gemini API. Under Google's terms for these paid services, Google does not use your prompts or responses to train its models. Your personal Google account settings never affect our system.

If limited data needs to be transferred outside the EU (for example, for email delivery or payment processing), we rely on the EU-US Data Privacy Framework, Standard Contractual Clauses, and strong encryption.

8. Third-Party Service Providers

We use trusted third-party providers to operate the service. Our current providers (which may change as we improve the service) include:

• Google Cloud Platform — cloud hosting, database, and infrastructure
• Google Gemini — AI processing of your conversation text to generate responses
• Deepgram — speech-to-text transcription (audio is processed in real time and not stored)
• ElevenLabs — voice synthesis for spoken AI responses
• Firebase Cloud Messaging — push notifications
• PostHog — product analytics (EU-hosted in Frankfurt; no advertising or cross-site tracking)
• Payment processing providers (we never receive your card details)
• Email providers (for delivering account-related communications)

All providers are bound by data protection agreements and process your data only on our instructions. They cannot use your data for their own purposes.

9. Data Security

We use multiple layers of security to protect your data:

• Encryption: All data is encrypted at rest (AES-256) and in transit (TLS/HTTPS).
• Access Controls: Only a small number of authorised team members can access production systems. All access is logged and monitored.
• Infrastructure Isolation: Our systems run within a private cloud project, isolated from other customers.
• Monitoring: Our cloud provider delivers continuous security monitoring, anomaly detection, and logging.

If a data breach occurs, we will notify affected users and relevant authorities as required by applicable law, including GDPR Articles 33 and 34.

10. Automated Decision-Making and AI

Greater Human uses AI to generate reflective prompts and guidance based on your inputs. The AI does not make decisions that produce legal or similarly significant effects on you.

The AI Guide does not provide medical advice, diagnosis, or treatment, and is not a substitute for professional mental health care.

You may raise concerns about any AI-generated output by contacting info@greaterhuman.ai.

11. Your Rights

Depending on your location, you may have the following rights:

• Access — Request a copy of your personal data
• Correction — Ask us to correct inaccurate information
• Deletion — Request deletion of your data (or use the in-app delete button)
• Restriction — Request that we limit how we process your data
• Portability — Request your data in a structured, machine-readable format
• Objection — Object to processing carried out under Legitimate Interest
• Complaint — File a complaint with your local Data Protection Authority

To exercise any of these rights, email info@greaterhuman.ai. We will not discriminate against you for exercising any of your privacy rights.

12. California Privacy Rights (CCPA/CPRA)

To the extent Greater Human is a “business” subject to the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), California residents have the rights described in Section 11, plus the right to opt out of the sale or sharing of personal information and the right not to be discriminated against for exercising these rights.

We do not sell or share your personal information for cross-context behavioural advertising. The information you share with us is personal; we use it only to provide the service you requested and do not use it to infer characteristics about you for any other purpose.

To make a request, email info@greaterhuman.ai.

13. Your Session Content

What you share during sessions is personal, and we treat it with care: we use it only to provide the service you requested, we never sell it, and we never share it for advertising. You can access or delete it — or delete your account — at any time by emailing info@greaterhuman.ai. Deleting your account stops further processing and removes the data after the retention period in Section 6.

14. Children's Data

Greater Human is not intended for individuals under 18. We do not knowingly collect data from minors.

If we learn that we have collected data from someone under 18, we will delete it promptly.

15. Changes to This Privacy Policy

If we make material changes to this Privacy Policy, we will notify you by email or in-app notification. Continued use of the app after notification constitutes acceptance of the updated policy.