Privacy Policy

Control Your State, operated by Tonic Data Labs, collects the minimum needed to run the service: your account basics, your check-ins, and your subscription status. We don’t run ads, we don’t sell your data, and our AI provider does not train on it. Anonymous use stores nothing about you at all.

Account: your name, email, and — if you sign in with Google — basic Google profile info. Check-ins: your mood values and the free-text thoughts you choose to write. Billing: your subscription status from Stripe; we never store your card number. Technical: one essential authentication cookie and standard server logs.

Using the app anonymously (without an account) stores none of the above.

To provide the service: generate your reflections, remember your last 7 check-ins so each reflection can build on your baseline, and process your subscription. That’s it — no advertising, no profiling for third parties.

Your written thoughts are sent to our AI provider, Anthropic, to generate each response — this is automated processing by an AI system. Anthropic does not train its models on this data. Reflections are generated on the fly and are not used to build advertising or marketing profiles.

Only the processors that run the service, only for that purpose:

Supabase (database & authentication) · Anthropic (AI responses) · Stripe (billing) · Google (optional sign-in) · Vercel (hosting).

We do not sell your personal information, and there is no ad tracking.

Your data is encrypted in transit (TLS) and encrypted at rest in our database. Access is restricted by row-level security so your check-ins are readable only by your own authenticated session.

One cookie: the essential authentication-session cookie that keeps you signed in. No analytics cookies, no third-party trackers, no cookie banner needed.

Wherever you live, you can access, correct, and delete your data. Two deletion paths:

Clear My Baseline (in Settings) permanently deletes all your check-ins while keeping your account. For full account deletion, request it by emailing privacy@controlyourstate.com — we will delete your account and data promptly. A self-serve delete button is coming.

We keep your data while your account is active. When you clear your baseline or your deletion request is processed, the data is removed from our production database.

Control Your State accounts are for adults. You must be 18 or older to create an account, and the service is not directed at children.

For California residents (CCPA/CalOPPA) — and offered to everyone: the categories we collect are identifiers (name, email), and wellness check-in content you provide. You have the right to know, correct, and delete this data, as described above. We do not sell or share personal information for cross-context behavioral advertising, so there is nothing to opt out of. We honor deletion requests without discriminating against you for making them.

If this policy changes, we’ll update the “Last updated” date above and flag material changes in the app. Questions or requests: privacy@controlyourstate.com.