Privacy Policy

Last updated: September 16, 2026

This Privacy Policy explains how Reality Surfer (“we”, “us”, “our”) collects, uses, and protects your information when you use the Reality Surfer website and mobile applications (the “Service”), and the rights you have over your information. We aim to comply with global privacy laws including the EU/UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA).

1. Information We Collect

We collect only what we need to provide the Service:

  • Account information: your email address, an optional display name, and a securely hashed password.
  • Content you create: goals, journal/ledger entries, meditation sessions, coaching conversations, and forum posts and reactions.
  • Usage information: pages viewed, features used, and progress within the app, used to operate and improve the Service.
  • Device and technical data: IP address, device/browser type, and similar information collected automatically for security and reliability.
  • Communications: messages you send us, for example to support.

We do not intentionally collect special-category (sensitive) data. Please do not submit health, financial, or other sensitive personal data through free-text or AI features.

2. How We Use Your Information

  • To create and secure your account and verify your email address;
  • To provide, personalise, and improve the Service and its features;
  • To generate AI coaching, meditations, and reflections you request;
  • To maintain safety, prevent fraud and abuse, and enforce our Terms;
  • To respond to your requests and provide support;
  • To comply with legal obligations.

3. AI Processing

When you use AI-powered features, the text you provide and relevant context are sent to our AI service providers to generate a response. We instruct providers to process this data only to deliver the feature. Avoid entering information you would not want processed in this way.

5. How We Share Information

We do not sell your personal information. We share it only with trusted service providers who help us run the Service (such as cloud hosting, database, email delivery, and AI providers), under contracts that require them to protect your data; when required by law or to protect rights and safety; and in connection with a business transfer such as a merger or acquisition.

6. Data Retention

We keep your information for as long as your account is active or as needed to provide the Service, and thereafter only as required to meet legal, security, or dispute-resolution needs. When you delete your account, we delete or anonymise your personal data within a reasonable period, except where retention is legally required.

7. Security

We use technical and organisational measures to protect your information, including encryption in transit, hashed passwords, and access controls. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

8. Your Privacy Rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal data; to object to or restrict certain processing; and to withdraw consent. If you are in California, you have the right to know, delete, and correct your information, and not to be discriminated against for exercising these rights; we do not sell or share personal information for cross-context behavioural advertising.

To exercise any right, contact us at [email protected]. You may also lodge a complaint with your local data-protection authority.

9. International Data Transfers

Your information may be processed in countries other than your own, including where our service providers operate. Where we transfer data internationally, we use appropriate safeguards such as standard contractual clauses to protect it.

10. Children’s Privacy

The Service is not directed to children under 16 (or the age of digital consent in your country). We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

11. Cookies & Similar Technologies

We use essential cookies and similar technologies to keep you signed in, remember preferences, and keep the Service secure. You can control cookies through your browser settings; disabling essential cookies may affect functionality.

12. App Store Data Disclosures

Consistent with Apple’s App Privacy and Google Play’s Data Safety requirements, the data we collect (such as your email, app content, and usage/diagnostics data) is used to provide the Service, for app functionality, and for security. We do not use it for third-party advertising or tracking, and we do not sell it.

13. Changes to this Policy

We may update this Privacy Policy from time to time. We will update the “Last updated” date and, for material changes, provide additional notice where appropriate.

14. Contact Us

For privacy questions or to exercise your rights, contact the data controller, Reality Surfer:

Privacy & Support: [email protected]