Pursuyt
Sign inMeet PURSUYT

Legal

Privacy Policy

Effective date: 2026-06-01

Pursuyt, Ltd. (“Pursuyt,” “we,” “us”), a company registered in the Republic of Seychelles, operates the Pursuyt web application and related services. This Privacy Policy explains what personal information we collect, how we use and share it, and the choices and rights available to you. It applies to visitors, waitlist sign-ups, and registered users.

Scope and controller

For the Pursuyt product and website, Pursuyt, Ltd., registered in the Republic of Seychelles, is the data controller for personal information described here, except where a separate agreement says otherwise (for example, a future enterprise customer agreement).

  • Registered address: Suite 9, Ansuya Estate, Royal Street, Victoria, Mahé, Republic of Seychelles.
  • This policy covers the public website, account registration, the authenticated app, support communications, and our systems that process your data.
  • It does not cover third-party websites or services you reach through links we do not control; those services have their own privacy policies.
  • Questions about this policy: privacy@pursuyt.com.

Personal information we collect

We collect information you provide, information generated when you use Pursuyt, and limited technical data needed to operate and secure the service.

  • Account and authentication: email address, password (stored by our auth provider as a secure hash, not plain text), session cookies, preferred language, optional beta invite code, and optional country.
  • Profile and onboarding: name, self-description, cognitive archetype, TIPI personality scores, selected values, optional personality questionnaire results, identity-related state, and optional consent for AI profile refinement on eligible plans.
  • Product content you create: life direction, themes, goals, tasks, execution blocks, reflections, focus sprints, vision board images, mobile companion signals and check-ins, coaching session outputs, and AI draft previews you have not yet accepted.
  • Billing: subscription tier, status, and Paddle customer and subscription identifiers. Payment card numbers are handled by Paddle; Pursuyt does not store full card numbers.
  • Waitlist and beta (before or without an account): email, optional name, preferred language, source metadata, and invite redemption records when applicable.
  • Technical and security: IP address, browser and device signals, request timestamps, and limited usage diagnostics that do not include the text of your reflections, goals, or other personal content.

Sources of information

We obtain personal information from the following sources.

  • Directly from you when you register, complete onboarding, use product features, contact support, or join the waitlist.
  • Automatically when you use the app, including cookies, session storage, local storage, server logs, and optional analytics described below.
  • From service providers that help us run Pursuyt (for example authentication, hosting, billing, email delivery, and AI inference), only as needed to provide their function.

How we use personal information

We use personal information to provide Pursuyt, keep accounts secure, bill eligible plans, and improve reliability. Where GDPR or UK GDPR applies, we rely on the legal bases noted in parentheses.

  • Provide the service you signed up for, including planning, reflection, drift and clarity insights, evolution views, and tier-gated coaching (contract; legitimate interests for security and abuse prevention).
  • Authenticate you, maintain sessions, enforce registration policy (open, invite-only, or disabled), recover passwords, and apply admin access controls including MFA for internal operators (contract; legitimate interests).
  • Process subscriptions, invoices, and billing support through Paddle (contract; legal obligation for tax and accounting records where applicable).
  • Send transactional email: account confirmation, password reset, security notices via our auth platform; waitlist acknowledgments and beta invites via our email provider when enabled (contract; legitimate interests).
  • Operate limited telemetry and diagnostics, such as coarse usage metrics and error signals that do not include your personal content, and optional Vercel Analytics / Speed Insights when enabled (legitimate interests; consent where required for non-essential cookies or tracking).
  • Respond to privacy requests, legal obligations, and disputes (legal obligation; legitimate interests).

AI and automated features

Pursuyt includes AI-assisted suggestions, summaries, drafts, coaching, and related guidance. AI is designed to support your judgment, not replace it.

  • When you use an AI feature, we send the context needed for that feature (for example goals, reflections, and identity summaries) to our AI systems, which may use third-party model providers under contract or Pursuyt-hosted inference infrastructure (including Ollama-based models operated by Pursuyt, not by you).
  • We limit what is sent to models and require your review before high-impact changes (such as applying drafts to goals or tasks) take effect in the product.
  • We do not use your content to train Pursuyt-owned machine learning models. Third-party providers process requests under their own terms and privacy policies.
  • Optional AI profile refinement on Momentum or Continuum requires your explicit consent in profile settings. We may store derived refinement metadata; we do not keep raw reflection text only for refinement storage.
  • AI outputs may be inaccurate or incomplete. They are not professional, medical, legal, or financial advice.
  • If you are in the EU or UK and automated processing produces legal or similarly significant effects, contact us at privacy@pursuyt.com to request human review where applicable law requires it.

Cookies and similar technologies

We use cookies and browser storage to run the site, remember preferences, and (when enabled) measure performance.

  • Strictly necessary: authentication session cookies required to keep you signed in.
  • Preferences: cookies and browser storage that remember your language, display preferences, and similar choices.
  • Analytics (optional): when enabled for our deployment, Vercel Analytics and Speed Insights may collect usage and performance data subject to Vercel’s policy.
  • We do not use a cookie consent banner today. Non-essential analytics are off unless we enable them for a given deployment. You can block or delete cookies in your browser; some features may not work without session cookies.

How we share information

We do not sell your personal information. We do not share it for cross-context behavioral advertising. We disclose information only as described below.

  • Service providers (processors) that help us operate Pursuyt, including providers for authentication, database, hosting, payments (Paddle), email delivery, and AI features when you use them.
  • Professional advisers, regulators, or law enforcement when required by law or to protect rights, safety, and security.
  • Business transfers: if Pursuyt is involved in a merger, acquisition, or asset sale, personal information may transfer subject to this policy or notice to you.
  • Aggregated or de-identified data that cannot reasonably identify you may be used for product and operations analysis.

International data transfers

Pursuyt, Ltd. is registered in the Republic of Seychelles. We operate the Service globally. Our service providers may process data in the Republic of Seychelles, the United States, the European Union, and other countries where they maintain facilities.

  • If you are in the European Economic Area, United Kingdom, or Switzerland, your information may be transferred to countries that may not provide the same level of data protection as your home country.
  • Where required, we rely on appropriate safeguards such as the EU Standard Contractual Clauses, the UK International Data Transfer Addendum, or adequacy decisions (including the EU-U.S. Data Privacy Framework for certified U.S. recipients where applicable).
  • You may request more information about transfer mechanisms by emailing privacy@pursuyt.com.

Data retention

We keep personal information only as long as needed for the purposes described in this policy, unless a longer period is required by law.

  • Account and product data: retained while your account is active and for a reasonable period afterward to support billing disputes, security, and legal obligations.
  • Waitlist and invite records: retained while the beta or waitlist program needs them and as required for operational and legal purposes.
  • Server and security logs: retained for a limited operational period appropriate to security and debugging.
  • Internal administrative records: subject to automatic cleanup after about 90 days where implemented.
  • Billing records: retained as needed to prevent duplicate charges and support disputes.

Security

We use technical and organizational measures designed to protect personal information, including encryption in transit, database access controls, session validation, rate limiting, protections against common web attacks, and restricted access for administrative tools.

  • No method of transmission or storage is completely secure. You are responsible for keeping your login credentials confidential.
  • Report suspected security issues to privacy@pursuyt.com.

Your choices and privacy rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or port your personal information, and to object to certain processing.

  • Access and update: you can view and edit much of your profile and product content in the app through your account settings.
  • Portability: authenticated users may export certain identity information from the app where that feature is available. A full account export is not yet available self-serve; contact privacy@pursuyt.com for assistance.
  • Deletion: self-serve account deletion is not yet available in the product. You may request deletion by emailing privacy@pursuyt.com. We will verify your request and delete or anonymize information subject to legal retention requirements.
  • AI refinement consent: Momentum and Continuum subscribers can enable or disable optional AI profile refinement in profile settings.
  • Marketing: we do not send promotional newsletters today. Transactional messages related to your account, security, waitlist, or beta access may still be sent.
  • Complaints: EEA users may lodge a complaint with your local supervisory authority. UK users may contact the ICO. We encourage you to contact us first so we can try to resolve your concern.

California and U.S. state privacy rights

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the CPRA, may provide additional rights.

  • Categories collected (last 12 months): identifiers (email, user ID), customer records (name, billing status), commercial information (subscription tier), internet or network activity (logs, telemetry event names), and user-generated content you enter in the product. Sensitive personal information: we do not intentionally collect government IDs, precise geolocation, or financial account numbers; login credentials are processed for authentication only.
  • Business purposes: provide the service, security, debugging, billing, transactional communications, and product improvement via bounded telemetry.
  • We do not sell personal information and do not share it for cross-context behavioral advertising as defined by the CPRA.
  • Rights: know, access, delete, correct, and non-discrimination for exercising privacy rights. Submit requests to privacy@pursuyt.com. We may verify your identity before responding.
  • Authorized agents may submit requests on your behalf with proof of authorization as required by law.
  • Residents of Colorado, Virginia, Connecticut, Utah, Texas, Oregon, and other states with comprehensive privacy laws may have similar rights; contact us at the same address.

Children's privacy

Pursuyt is not directed to children and is intended for adults managing their personal goals and reflection.

  • We do not knowingly collect personal information from anyone under 16. If you believe a child under 16 has provided us information, contact privacy@pursuyt.com and we will take steps to delete it.
  • If we ever introduce features subject to COPPA or similar laws, we will update this policy and implement age-appropriate controls before doing so.

Changes to this policy

We may update this Privacy Policy when our practices, providers, or legal requirements change.

  • We will post the revised policy on this page and update the effective date above.
  • For material changes, we may also notify you by email or in-app notice where appropriate.
  • Continued use of Pursuyt after the effective date of an update constitutes acceptance of the revised policy where permitted by law.

Contact

For privacy questions, requests, or complaints:

  • Email: privacy@pursuyt.com
  • Controller: Pursuyt, Ltd., Suite 9, Ansuya Estate, Royal Street, Victoria, Mahé, Republic of Seychelles
  • Include enough information for us to verify your account (for example the email address you use with Pursuyt) when submitting access, correction, or deletion requests.