Privacy Policy — Understand

Understand ("we", "our") is a communication advice product. This policy describes what data we collect, how we use it, and how we protect it. By using the product, you agree to this policy.

Summary

We do not keep raw chat transcripts in account history.
We store only what is needed to run the service: your account info, person profiles, and the materials you add—and only you can access it.
We automatically mask obvious contact details (like emails and phone numbers) in text inputs before storage.
We do not sell or share your personal data with third parties for marketing.

How chat data is handled

We do not keep raw chat transcripts as part of your account history. During a chat, message content is processed in real time to generate responses and may be used to update the model's memory/summary quality. We avoid storing full chat logs as a separate permanent transcript.

What we collect and store

We store the following, on secure infrastructure (Supabase), over HTTPS, and with access controls so only you can read or change your own data:

Account: Your email address (for sign-in and account management).
Person profiles: The names, relations, and notes you create for each person you model.
Materials: The text, transcripts, or audio references you add (e.g. meeting notes, descriptions).
Derived data: The persona and report content we generate from your materials, so we can answer questions and show reports.
Subscription: Stripe customer and subscription identifiers only. We do not store payment card numbers or full payment details; Stripe handles those.

If you upload an avatar image for a person, it is stored in our file storage and is only available to you.

How we use your data

We use your data only to provide and improve the product: to build person profiles, generate advice and reports, manage your account and subscription, and fix errors. We do not sell, rent, or share your personal data with third parties for advertising or marketing. We do not use your content to train third-party AI models for purposes unrelated to serving you.

Third-party services

We use the following third parties; each has its own privacy practices:

Authentication and database (Supabase): Your account and all stored data above are held by Supabase. We use their authentication (e.g. magic link or social login) and database with row-level security so only you can access your rows.
AI providers (e.g. DeepSeek, OpenAI): When you add materials or ask questions, we send the content needed to generate responses (e.g. persona, question) to our AI provider. We do not send your email or account identifiers in these requests. Please refer to the provider's privacy policy for how they process data.
Stripe: For paid subscriptions we use Stripe. Payment details are entered on Stripe's pages and are not stored by us. We only store Stripe customer and subscription IDs to manage access and billing.
Google (optional): If we enable Google Ads, we may load scripts that report page views and anonymized events (e.g. that a sign-up or purchase occurred) to support advertising and analytics. We do not send your email or chat content to Google.
Sentry (optional): If we enable error monitoring, some errors and technical details (e.g. stack traces) may be sent to Sentry to help us fix bugs. We do not intentionally send personal content there.

We do not control these providers' policies. We choose them in line with common practice for security and privacy, but you should review their policies if you want full details.

Cookies and local storage

We use session cookies (via Supabase) so you stay signed in. These are necessary for the product to work. We do not use cookies for advertising. On the public "explore" demo pages (example figures), we may store your demo chat in your browser's local storage so you can continue the conversation during your visit; that data stays on your device and is not sent to our database.

Data isolation and security

Your data is isolated by account. Only you can read or change your own profiles, materials, and derived content. Our database enforces this with row-level security. We use HTTPS for all traffic. We do not use your data for any purpose other than providing and improving the service.

Retention and deletion

We keep your stored data until you remove it. You can delete individual person profiles (and their materials) from the app. If you delete your account, we remove all data associated with your account from our systems. Session and demo data in your browser are not stored by us and are cleared when you clear your browser data.

Your rights

Depending on where you live, you may have the right to access, correct, or delete your personal data, or to object to or restrict certain processing. To request access or deletion, or to ask questions about your data, contact us at contact@read-u.com.

Disclaimer

Understand is a communication advice tool only. It is not psychological or medical diagnosis, therapy, or legal advice. Do not rely on it for health, safety, or legal decisions. When in doubt, consult a qualified professional.

Changes and contact

We may update this policy from time to time. The current version is always on this page. If you have questions or concerns about privacy or your data, email us at contact@read-u.com.