Privacy Policy

1. Who we are

The Service is operated by AiGen LLC, doing business as AiGen. Pursue is an AI-assisted coaching application that helps users discover and pursue meaningful personal projects.

For privacy-related questions, access or deletion requests, or complaints, contact us at aigenapps@gmail.com or by mail at AiGen LLC, 285 3rd St, Unit 327, Cambridge, MA 02142, USA. We will respond within the timeframes required by applicable law.

2. Scope and important notices

This Policy applies to information we process when you use the Pursue app, visit our website, contact support, or otherwise interact with us about the Service.

The Service is intended only for adults aged 18 and older. It is not directed to anyone under 18, and we do not knowingly collect personal information from anyone under 18.

Pursue is a coaching and personal-project companion. It is not a medical device, clinical service, or emergency response system. Information you share about mood, goals, or wellbeing is treated as user content you choose to provide — not as protected health information we are regulated to handle as a healthcare provider.

If you use optional share features, you choose what to send through your device's native share sheet to third-party apps or contacts. We do not post on your behalf and do not receive a copy of what you share outside Pursue unless you send it to us directly (for example, by email).

3. Information we collect

We collect information in the categories below, depending on how you use the Service. We collect only what is reasonably necessary to operate, secure, and improve the Service.

• Account information: email address, display name, authentication identifiers, account creation date, language preference, and sign-in method (Apple Sign-In, Google Sign-In, or email/password via Supabase Auth). If you use Apple or Google Sign-In, those providers may share a stable identifier and, depending on your choices, name or email with us.
• Dream and project content: project titles, dream descriptions, "why" bullets, notes, reflections, roadmap steps, step edits, agent-proposed step changes, completion status, certificates, cover art selections, and other content you create in the app.
• Mood and check-in data: daily mood selections from the "How are you feeling?" check-in and related check-in fields.
• AI conversation data: messages you send to and receive from the Pursue coaching team, including Aria (Coach), Atlas (Planner), Sage (Specialist), and Spark (Celebrator) interactions, in text and voice-derived transcript form.
• Uploaded files: documents, images, audio, video, and other materials you upload for Specialist review or project work, plus derived text or analysis outputs.
• Voice data: if you use voice coaching, audio is processed in real time for transcription and response generation through our voice infrastructure. We do not store raw voice recordings. Text transcripts from voice sessions may be saved as messages in your account when a session ends.
• Subscription and purchase data: subscription tier, trial status, purchase and renewal history, product identifiers, store receipts metadata, and entitlement state processed through RevenueCat and Apple App Store or Google Play billing systems. We do not receive or store your full payment card number.
• Usage and analytics data: feature usage, screen views, session events, funnels, and product interaction data collected via PostHog to understand how the Service is used and improve it. Pursue does not use the iOS Identifier for Advertisers (IDFA) or App Tracking Transparency, and we do not track you across other companies' apps or websites.
• Device and technical data: device type, operating system version, app version, language settings, time zone, push notification tokens, IP address, and similar technical information needed to operate, secure, and debug the Service.
• Error and diagnostic data: crash reports, error logs, stack traces, and performance diagnostics collected via Sentry.
• Referral data: referral codes, referral relationships, and reward eligibility if you participate in referral features.
• Safety screening data: automated analysis of messages for crisis or safety signals; when triggered, we may log severity level, timestamp, and a brief reason code to crisis_events records. This data is used for safety and service integrity, not for advertising.
• Ambient companions data: we may use your project domain category (for example, "fiction writing") to show anonymous aggregate counts of other active users in the same domain. We never expose other users' identities, names, or project details.
• Support communications: information you provide when you contact us, including email content and attachments.

4. Sources of information

We collect information directly from you when you use the Service, from your device and app activity, from Apple or Google when you sign in or purchase through their stores, and from service providers that help us operate the Service (for example, crash reports from Sentry or subscription state from RevenueCat).

You are responsible for the accuracy of information you provide and for not submitting personal information about other people without lawful authority and their consent.

5. How we use your information

We use personal information to:

• Provide, operate, maintain, personalize, and improve the Service.
• Authenticate your account, enforce security, and prevent fraud or abuse.
• Generate AI coaching responses, roadmaps, feedback, celebrations, and related features.
• Store your progress, memories, embeddings, and project history within your account.
• Process subscriptions, trials, in-app purchases, and referral rewards.
• Send service-related communications and push notifications you have enabled.
• Detect, investigate, and respond to abuse, safety concerns, security incidents, or violations of our Terms.
• Provide customer support and respond to your requests.
• Analyze aggregated or de-identified usage to improve features, reliability, and user experience.
• Comply with legal obligations, respond to lawful requests, and establish or defend legal claims.
• Enforce our Terms and protect the rights, property, and safety of AiGen LLC, our users, and others.

6. Legal bases for processing (EEA, UK, and Switzerland)

Where the GDPR or similar laws apply, we rely on one or more of the following legal bases:

• Contract: to provide the Service you request, including account features, AI coaching, and subscriptions.
• Legitimate interests: to secure and improve the Service, prevent abuse, understand aggregated usage, and communicate with you about the Service — balanced against your rights.
• Consent: where required, for example certain analytics, push notifications, or optional features. You may withdraw consent without affecting the lawfulness of processing before withdrawal.
• Legal obligation: to comply with applicable law, tax, accounting, or regulatory requirements.
• Vital interests and safeguarding: our automated safety screening analyzes messages for crisis or self-harm signals, which can involve inferences about your health — a special category of data under the GDPR. We process this to help protect your and others' safety and service integrity, relying on your voluntary provision of the content together with vital interests and, where applicable, the substantial-public-interest / safeguarding basis, and we direct at-risk users to professional emergency resources.

7. AI processing disclosure

Pursue uses artificial intelligence to power coaching conversations, planning, feedback, celebrations, and related features. When you interact with the AI team, your messages and relevant project context are transmitted to third-party AI providers to generate responses.

You are interacting with an AI system, not a human. Coaching replies, planning, celebrations, spoken voice responses, and generated project cover images are AI-generated. AI is a core part of the Service.

We use Anthropic (Claude API) to generate coaching responses. Under Anthropic's API terms, data submitted through the API is not used to train Anthropic's foundation models.

We use OpenAI for text embeddings used in memory and search features within your account, and to transcribe audio or video you choose to upload. Under OpenAI's API terms, data submitted through the API is not used to train OpenAI's models.

If you use voice features, your speech is sent to Google Cloud Speech-to-Text for transcription and spoken responses are produced with Google Cloud Text-to-Speech. Project cover images may be generated using Google Cloud Vertex AI (Gemini / Imagen) from your project details when no suitable stock photo is found.

AI outputs may be inaccurate, incomplete, biased, or inappropriate. They are generated probabilistically and may change for similar inputs. You should use your own judgment and not rely on the Service for professional medical, mental-health, therapeutic, legal, financial, employment, housing, insurance, or emergency advice.

Do not use the Service or AI outputs to make high-stakes decisions about yourself or others without appropriate human review and, where required, licensed professional advice.

We do not use your personal content to train our own or third-party foundation models for general-purpose AI training.

Automated processing in Pursue is designed to personalize coaching and safety screening. It does not produce legal effects or similarly significant effects about you in the sense of solely automated high-stakes decision-making; you remain in control of your projects, steps, and subscription choices.

8. How we share information

We do not sell your personal information. We do not share personal information for cross-context behavioral advertising. We share information only as described below:

• Service providers (processors): trusted vendors that process data on our behalf under contractual confidentiality and security obligations, listed in Section 9.
• App store and payment partners: Apple and Google process purchases, trials, and refunds according to their own policies when you subscribe through their platforms.
• Sign-in providers: Apple or Google when you choose those authentication methods.
• At your direction: when you use native share features, export content, or otherwise choose to send information to a third party outside Pursue.
• Legal and safety: when required by law, regulation, legal process, or governmental request; to protect the rights, property, or safety of AiGen LLC, our users, or others; or to investigate fraud, abuse, or security issues.
• Business transfers: in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to continued protection consistent with this Policy or notice to you where required by law.

9. Third-party service providers

We use the following categories of third-party processors. Each processes data only as needed to provide their service and under agreements that require appropriate safeguards:

• Supabase — authentication, database, and file storage (United States).
• Anthropic — AI response generation from conversation messages.
• OpenAI — text embeddings for memory and search, and transcription of audio or video you upload.
• Google Cloud (Speech-to-Text, Text-to-Speech) and LiveKit Cloud — voice transcription, synthesis, and real-time transport when you use voice features.
• Google Cloud Vertex AI (Gemini / Imagen) — generating a project cover image from your project details when no suitable stock photo is found.
• Unsplash — stock-photo search for project cover images; a short search query derived from your project is sent, without account identifiers.
• RevenueCat — subscription management and purchase validation.
• Apple and Google — sign-in and in-app purchase processing when you choose those providers.
• PostHog — product analytics.
• Sentry — crash reporting, error monitoring, and diagnostic context (stack traces, breadcrumbs, and app-navigation trail), which may incidentally include limited content or context from the screen where an error occurred.
• Langfuse — LLM trace and observability for debugging and cost tracking; it stores short (approximately 500-character) excerpts of AI conversation inputs and outputs. Not used to train models.
• Expo — push notification delivery infrastructure.
• Resend — transactional and lifecycle email delivery (for example, account, subscription, and reminder emails); some lifecycle and daily "morning" emails include AI-generated text derived from your activity, along with your name and email address.
• Google Cloud Platform — application hosting and related infrastructure.

10. International data transfers

The Service is operated from the United States. If you access the Service from outside the United States, your information may be transferred to, stored in, and processed in the United States and other countries where we or our service providers operate. Those countries may have data protection laws different from those in your country.

Where required by applicable law (including for EEA, UK, and Swiss users), we implement appropriate safeguards for international transfers, such as Standard Contractual Clauses or equivalent mechanisms, and assess transfer risks.

11. Data retention

We retain your information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements.

If you delete your account in the app (Profile → Delete account) or request deletion at aigenapps@gmail.com, we will delete or anonymize your account data, including project content, conversations, uploads, safety-screening records, and associated memory embeddings, within 30 days, except where retention is required by law, needed to complete an open transaction, resolve disputes, enforce agreements, or protect our legal rights.

Subscription records may be retained longer where required for tax, accounting, or fraud prevention.

Aggregated or de-identified data that cannot reasonably identify you may be retained longer for analytics and service improvement.

Backups containing deleted data are purged on a rolling schedule within a reasonable period after deletion is processed.

12. Security

We implement reasonable administrative, technical, and organizational safeguards designed to protect your information, including encryption in transit (TLS) and at rest, access controls, and secure cloud infrastructure. The Service does not use end-to-end encryption; we and our processors can access content as needed to operate and provide the Service.

No method of transmission or storage is completely secure. You use the Service at your own risk. If you believe your account has been compromised, contact us immediately at aigenapps@gmail.com.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and regulators as required by applicable law.

13. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or port your personal information, and to withdraw consent where processing is consent-based.

You can update some account information in the app. To exercise your rights, email aigenapps@gmail.com with the subject line "Privacy request" and enough information for us to verify your account. We may need to verify your identity before fulfilling requests. We will not discriminate against you for exercising privacy rights where prohibited by law.

You can cancel push notifications in your device settings. You can cancel subscriptions through your Apple or Google account settings; deleting the app does not cancel a subscription.

If you are in the European Economic Area, United Kingdom, or Switzerland, you may lodge a complaint with your local supervisory authority. Our lead contact for GDPR-related inquiries is aigenapps@gmail.com.

14. Region-specific disclosures

We provide the Service globally and aim to honor rights granted by applicable local law. The subsections below supplement this Policy where required.

14a. California (CCPA/CPRA)

If you are a California resident, you may have the right to know the categories of personal information collected, the purposes of use, the categories of recipients, and the right to delete, correct, and opt out of sale or sharing.

We do not sell or share personal information for cross-context behavioral advertising as defined under California law.

Sensitive personal information we may process includes account credentials, content you voluntarily share about mood or wellbeing, and information revealing mental or physical health, including automated safety-screening signals. We use sensitive information only to provide the Service and for purposes permitted by CPRA without offering a "limit" right that applies to our current uses.

To exercise California privacy rights, email aigenapps@gmail.com with "California privacy request." You may designate an authorized agent where permitted by law.

14b. Other U.S. state privacy laws

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and other states with comprehensive privacy laws may have similar rights to access, delete, correct, and opt out of certain processing. Contact aigenapps@gmail.com to exercise applicable rights. If we deny a request, you may appeal by replying to our response.

14c. Brazil (LGPD)

If you are in Brazil, you may have rights under the Lei Geral de Proteção de Dados, including confirmation of processing, access, correction, anonymization, portability, deletion, and information about sharing. Contact aigenapps@gmail.com.

14d. China and other jurisdictions

If you are in mainland China or another jurisdiction with data localization or cross-border transfer rules, you are responsible for ensuring your use of the Service complies with local law. Where local law grants additional rights, contact aigenapps@gmail.com and we will respond consistent with applicable requirements.

15. Children's privacy

The Service is intended for adults aged 18 and older. It is not directed to children or anyone under 18, and we do not knowingly collect personal information from anyone under 18.

If you are a parent or guardian and believe someone under 18 has provided us personal information, contact aigenapps@gmail.com and we will take steps to delete it. Where app stores provide age signals, we intend to honor restrictions required by applicable law and store policies.

16. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will notify you by email, in-app notice, or by posting the updated Policy with a new "Last updated" date before or when the change takes effect, as required by law.

Your continued use of the Service after the effective date of an updated Policy constitutes acceptance where permitted by law. If you do not agree, stop using the Service and delete your account.