Draft — not legal advice. This page was AI-drafted from the actual codebase (what data is collected, where it's stored, which third parties process it) but has not been reviewed by a lawyer, and still has placeholder fields (legal entity name, business address, governing jurisdiction) marked like this. Do not publish this as final without review.
Privacy Policy
Privacy.
Last updated: July 23, 2026
Bearing ([LEGAL ENTITY NAME], "we," "us") operates getbearing.me, a self-reflection product built around a personality assessment (based on established research models, including the IPIP-NEO-120 and ECR-R attachment-style framework). This policy describes what information we collect, how we use it, who we share it with, and the choices you have.
Information we collect
We collect the following categories of information:
- Assessment responses. Your answers to the assessment questions, stored so your report can be generated and revisited. These are initially recorded without requiring an account; if you later sign in, they are linked to your account.
- Account information. Your email address, collected when you sign in via a passwordless "magic link" email. We do not collect or store passwords.
- Payment information. If you unlock the full report (a one-time €49 payment), payment is handled entirely by Stripe. We never receive or store your card number or bank details — we only receive confirmation that payment succeeded.
- Generated report content. The written descriptions in your report, generated from your assessment results and stored so your report persists across visits.
We do not use analytics, advertising, or tracking scripts of any kind — there is no Google Analytics, ad pixel, or similar tool anywhere in the product as of July 23, 2026.
How we use your information
- To generate and display your personality report.
- To authenticate you and keep your report tied to your account.
- To process payment for the full report unlock.
- To respond if you contact us for support.
We do not sell your data, and we do not use your assessment responses for advertising or share them with data brokers.
Third parties who process your data
We rely on the following processors to run the product:
- Supabase — hosts our database (your assessment responses, account record, and payment status) and handles magic-link authentication (sending sign-in emails, verifying your session).
- Stripe — processes the one-time €49 payment. Stripe collects and stores your payment details directly; we never see or store your card or bank account number.
- Anthropic (Claude API) — generates the written narrative in your report. We send Anthropic your derived trait scores (e.g. a trait name and a high/mid/low direction) — not your literal question-by- question answers, and not your name or email.
Each of these processors has its own privacy policy governing how it handles data on our behalf. Where any of these providers store or process data outside your country of residence, standard contractual safeguards should apply — confirm the specifics of each provider's data-transfer terms with a lawyer before relying on this statement.
Data retention
We currently retain assessment responses, report content, and account records indefinitely, for as long as your account exists — there is no automatic deletion schedule. [Confirm whether this is the retention policy you want, or whether a fixed retention/deletion schedule should be added.]
Your rights
You can request access to, correction of, or deletion of your data at any time by emailing support@bearing.me. Deletion requests are currently handled manually — there is no self-serve "delete my account" option in the product yet.
Depending on where you live, you may have additional rights under applicable law (for example, the GDPR if you're in the EU/EEA, or state privacy laws in the US). [A lawyer should confirm whether personality/assessment data of this kind is treated as a special/sensitive category under the laws that apply to your users, which would trigger additional obligations.]
Children's privacy
Bearing is not directed at children, and we do not knowingly collect information from anyone under 16. The product does not currently verify age. [Confirm minimum age and whether an age-gate is needed.]
Security
Your data is stored in Supabase's managed Postgres database with access controls restricting who can read or write it. Only your own account can read your own assessment/report data; only our payment-processing system can mark your account as paid. No method of storage or transmission is 100% secure, and we can't guarantee absolute security.
Changes to this policy
We may update this policy as the product changes. We'll update the "Last updated" date above when we do.
Contact
Questions about this policy, or a request about your data? Email support@bearing.me.