Privacy Policy

This Privacy Policy explains how Introspection ("we," "us," or "our") handles personal information in connection with Axis, our web, desktop, and mobile application for personal self-exploration and well-being. We are committed to protecting your privacy and to complying with Québec's Act respecting the protection of personal information in the private sector (as modernized by Law 25) and, where it applies, the European General Data Protection Regulation (GDPR).

1. A Note on Your Private Content

Axis is designed so that the personal content you enter, your scans, behaviour logs, relational maps, dream journal, and reflections remains your private space. This content is stored for you and kept private. We treat it as confidential: we do not sell it, we do not use it for advertising, and we do not use it to train models. We access it only where necessary to operate, maintain, secure, or support the service, or where the law requires it. We provide the tool, and you remain in control of what you record in it.

One exception applies by design: in the professional version of Axis, a practitioner creates and manages profiles for their own clients and therefore has access to the information in those profiles. In that case, the practitioner is the party responsible for that information (see section 10).

2. Information We Collect

We collect only the limited information we need to provide Axis:

• Account information: your name and email address, and authentication data if you sign in with Google.
• Payment information: if you subscribe, payment is processed by Stripe; we do not store your full card details.

Separately from the information above, you enter and store your own content in Axis, your scans, behaviour logs, relational maps, dream journal, and reflections. This self-reported emotional, behavioural, and reflective content is entered by you and kept in your private space (see section 1). Because it concerns your inner and emotional states, it is sensitive by nature, and we treat it as confidential and protect it accordingly. We do not sell it, use it for advertising, or use it to train models.

3. Why We Use Your Information and Our Legal Basis

We use your account and payment information to create and secure your account, deliver and maintain Axis, process your subscription, and communicate with you about the service. We rely on your consent and on the performance of our contract with you as our legal bases.

Because the content you enter is sensitive, we ask for your express, specific consent when you create your account, separately from your general acceptance of the Terms. You may withdraw your consent at any time by contacting us or closing your account. Under Law 25 and the GDPR, we keep a record of the consent you provide.

4. Who We Share Information With

We do not sell your personal information and we do not share it for advertising. We rely on a small number of service providers who process limited information on our behalf, under agreements requiring them to protect it:

• Stripe — payment processing;
• Railway — hosting; Vercel — deployment;
• Resend — transactional email;
• Google — sign-in.

We may also disclose information if required by law. If our business is ever involved in a transfer such as a merger or acquisition, we will require any successor to continue protecting your information under this Policy and will inform you.

5. Where Your Information Is Stored (International Transfer)

Our service providers store and process information on servers located outside Québec, including in the United States. This means your information may be transferred to and processed in other countries whose laws may differ from those of your own. Before entrusting information to these providers, we assess that they offer an adequate level of protection, and we take reasonable measures to ensure your information remains protected in accordance with this Policy, Law 25, and the GDPR.

6. How Long We Keep Your Information

We keep your account information for as long as your account is active. When you close your account or ask us to delete your data, we delete or anonymize it within a reasonable period, unless we are required by law to keep it longer. We do not keep personal information longer than necessary for the purposes described here.

7. How We Protect Your Information

We use reasonable technical and organizational security measures appropriate to the sensitivity of the information, including access controls that limit who may access it and encryption of your data at rest. We continue to strengthen these measures over time. No system can be guaranteed perfectly secure, but we work to protect your information and to maintain a register of any confidentiality incident as required by Law 25. If an incident presents a risk of serious harm, we will notify the Commission d'accès à l'information and affected individuals as required by law.

8. Your Rights

Depending on where you live, you have rights over your personal information. In all cases, you may:

• access the personal information we hold about you;
• ask us to correct inaccurate information;
• ask us to delete your information;
• withdraw your consent; and
• request a copy of your information in a portable format (data portability).

To exercise any of these rights, contact us using the details in section 11. We will respond within the time required by applicable law. If you are in the European Union, you also have the right to lodge a complaint with your local data protection authority; in Québec, you may contact the Commission d'accès à l'information.

9. Children

Axis is intended only for people aged 18 and over. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected information from a person under 18, we will delete it.

10. The Professional Version

Axis offers a professional version in which a practitioner may create profiles for their own clients. When Axis is used this way, the practitioner, not Introspection, is responsible for the personal information they enter about their clients, including obtaining the necessary consent and meeting the privacy obligations that apply to their practice. Introspection remains responsible only for providing the platform securely.

11. Person in Charge of Protecting Your Information

We have designated a person responsible for the protection of personal information (the Person in Charge of the Protection of Personal Information under Law 25), who oversees our compliance and handles your requests and questions:

Alihasan Jeraj — Person in Charge of the Protection of Personal Information
Introspection
Email: hello@introspection.life