Privacy Policy

We collect your email address and name when you sign up. When you use the app, we store the entries you create (watches, contacts, food logs, music) and the AI-generated insights associated with them. We collect anonymous analytics (page views, feature usage) via Plausible — a privacy-first analytics platform that stores no personal data and sets no cookies.

We use your data to provide and improve the Ipsomap service — generating taste profiles, recommendations, and insights. We do not sell your data to third parties, use it for advertising, or share it with anyone except as described in this policy.

We send a small number of emails that are part of running your account: confirming your address, resetting your password, confirming a change of address, a welcome message when you create the account, and replies to any support request you open. These are not marketing and cannot be switched off — they are how the service works. Optional emails, such as a periodic summary or AI insights, stay off unless you turn them on in Settings, and each one carries an unsubscribe link. We never sell or rent your address, and we never email you on behalf of anyone else. Security alerts about suspicious activity go only to our own administrators.

You can enable encryption for your entertainment and other sensitive data. When enabled, your entries are stored on our servers only as ciphertext, encrypted with a key that your passphrase unlocks. We never store your passphrase or your key, so we cannot read your stored data. To show you your data and to run taste profiles and recommendations, your device sends the key with each request and the data is decrypted temporarily in server memory, never written anywhere unencrypted. Losing your passphrase and recovery key means your encrypted data is permanently unrecoverable.

We use Supabase (database and authentication, EU region), Anthropic and OpenAI (AI inference — only the content you explicitly submit for analysis; neither provider trains their models on Ipsomap user data under their commercial API terms), and Cloudflare (CDN and bot protection). Payment processing is handled by Stripe. You can disable AI processing entirely from Settings → AI.

If you sign up after clicking a Google ad, we store the ad's click identifier. When your trial starts or converts to a paid subscription, we send Google a one-way cryptographic hash (SHA-256) of your email address together with that identifier — never your plaintext email. This lets Google tell whether the ad led to a subscription; it does not let Google identify you from the hash, and we never use it for retargeting or ad profiling. Legal basis: our legitimate interest in measuring advertising performance. No cookie or device storage is involved.

Your data is retained for as long as your account is active. You can export or delete your account and all associated data at any time from Settings.

We use a single session cookie for authentication and a locale cookie to remember your language preference. We use no advertising or tracking cookies.

Under GDPR and similar regulations, you have the right to access, rectify, export, and delete your personal data. You can exercise these rights directly in the app (Settings → Data) or by contacting us.

For privacy-related questions, reach us at the contact page.