Privacy Policy

Last updated: July 15, 2026. This is a placeholder document — please consult a lawyer for the final version.

1. Data We Collect

Account data: Email address, display name, authentication tokens (managed by Supabase Auth).

Usage data: Chat messages with Symy, challenge results (pass/fail), spending reflections, Dream Fund goals, Gacha stories, hourly rate setting, and buddy state (vitality, tokens, XP, streak).

Email receipts (optional): If you connect your email, we scan for purchase receipts to help you see spending patterns. Email credentials are encrypted and never shared.

2. How We Use Your Data

Your data is used to: (a) provide the Symy companion experience; (b) personalize AI reflections and stories; (c) track your progress (vitality, streaks, savings); (d) improve the Service anonymously.

3. AI Processing

Your chat messages and spending reflections are sent to our AI provider (Letta AI / GLM) for generating personalized responses. The AI provider may temporarily process your data to generate responses, but does not use your data for training. Your Letta Agent's memory is isolated per user.

4. Data Storage

Data is stored in Supabase (PostgreSQL) with Row-Level Security (RLS) — you can only access your own data. AI conversation history is stored in Letta's managed infrastructure, isolated per user agent.

5. Data Retention

Your data is retained as long as your account is active. You can request data export or account deletion at any time from Settings → Account. Deletion removes all your data within 30 days.

6. Your Rights (GDPR/CCPA)

You have the right to: (a) access your data (export); (b) delete your data ("right to be forgotten"); (c) correct inaccurate data; (d) object to processing; (e) data portability. To exercise these rights, use the in-app data export/deletion tools or email support@symy.ai.

7. Cookies

We use essential cookies for authentication (Supabase Auth session tokens). We do not use third-party tracking cookies or advertising cookies.

8. Children's Privacy

The Service is not intended for users under 13. We do not knowingly collect data from children. If you believe a child has provided personal data, contact us for immediate deletion.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or in-app notification.

10. Contact

Questions about privacy? Email us at support@symy.ai