Privacy Policy

This policy is published by Being Me ("Being Me", "we", "us", or "our"), the operator of the Being Me personal development platform. Being Me is based in Australia.

We are the data controller for the personal information you provide to us. For requests, questions, or complaints relating to your personal information, see § 12 — How to contact us.

We only collect information you choose to enter into Being Me. We do not track your activity outside the app and we do not use third-party analytics or advertising cookies.

We do not collect: precise location data, contacts, photos from your device, advertising identifiers, biometric data, or special-category data unless you explicitly choose to enter it into a free-text field.

We use your personal information only for the following purposes:

• To run the coaching experience — your inputs are the entire substance of what Being Me does. Without them, the AI coach has nothing to coach on.
• To personalise AI coaching responses — when you talk to the coach, we include relevant context from your profile (your values, your goals, your recent check-ins) so the AI's response is specific to you, not generic.
• To help you see patterns — your check-in history is the basis for the longitudinal insight the coach surfaces, such as recurring obstacles or trending mood scores.
• To operate and improve the platform — including security, fraud prevention, and aggregate analytics that never identify individual users.
• To meet legal obligations — for example, responding to lawful requests from regulators or law enforcement under valid legal process.

We never use your data for advertising, profiling for marketing, or sale to third parties.

The only third parties that ever receive any of your personal information are the service providers that make Being Me technically possible.

When you message the AI coach, the contents of your message — together with the relevant context from your Being Me profile — are transmitted to Anthropic (a public benefit corporation headquartered in San Francisco, California, United States) for the purpose of generating the coaching response. Anthropic operates the Claude large language model that powers the coach.

Anthropic is bound by its own privacy commitments and, under its API terms, does not use customer API data to train its models. Anthropic's own privacy policy is available at anthropic.com/legal/privacy.

Account information and personal data entered into Being Me will be stored in a database hosted by Supabase (Delaware, United States), with Row Level Security configured so that one user cannot access another user's data. This applies once the platform launches publicly; until that point, your data is stored locally on your device while you use the app.

The web pages of the Being Me application are served from Netlify (California, United States). Netlify receives standard server log information but not the substance of your coaching content.

We do not share your personal information with any other third parties. We do not engage in any form of data brokerage or sale.

Anthropic, Supabase, and Netlify are all based in the United States. This means your personal information will be transferred to, and processed in, the United States.

Where you are located in the European Union or the United Kingdom, this transfer is made on the basis of Standard Contractual Clauses approved by the European Commission and (for UK transfers) the International Data Transfer Addendum. Each of our service providers maintains industry-standard safeguards.

Where you are located in Australia, this transfer is made in accordance with Australian Privacy Principle 8 ("Cross-border disclosure of personal information"). By using Being Me you acknowledge that your information will leave Australia for these processing purposes.

We take reasonable steps to protect your information from misuse, interference, loss, unauthorised access, modification, and disclosure. These include:

• Encryption in transit using TLS 1.2 or higher.
• Encryption at rest for stored data, once Supabase is in place.
• Row Level Security in the database, so each user can only access their own data.
• Restricted administrative access, limited to the small number of people who need it to keep the platform running. Administrative access is logged.
• No surfacing of personal data in admin interfaces — administrators see anonymised or aggregate data only.

No method of internet transmission or electronic storage is 100% secure. We cannot guarantee absolute security, but we can — and will — apply the controls above and notify you of any breach that is likely to result in serious harm, in accordance with the Notifiable Data Breaches scheme under the Australian Privacy Act.

We keep your personal information for as long as your account is active. If you ask us to delete your data, we will permanently remove it from our active systems within 30 days of receiving your request, except where we are required to retain it for legal reasons (for example, financial records of subscription payments, which we are required to keep for seven years under Australian tax law).

Server logs are retained for no more than 30 days unless a specific security investigation requires longer retention.

You have the following rights over your personal information. They apply regardless of where you live; some jurisdictions add further rights on top.

• Access — see exactly what we hold about you.
• Correction — fix anything that is inaccurate or out of date.
• Deletion — request permanent erasure of your data.
• Portability — download a copy of your data in a structured, machine-readable format (JSON).
• Withdraw consent — at any time, for any processing that relies on your consent.

You have the rights set out under the 13 Australian Privacy Principles. If you believe we have mishandled your information, you may complain to us in the first instance (see § 12) and, if unresolved, to the Office of the Australian Information Commissioner at oaic.gov.au.

You have the rights set out under Articles 15–22 of the GDPR (or UK GDPR), including the right to object to processing, the right to restrict processing, and the right to lodge a complaint with your local supervisory authority.

You have the right to know what personal information we have collected, the right to delete, the right to correct, the right to opt out of sale or sharing (we do not sell or share, but you have the right regardless), and the right to non-discrimination for exercising any of the above.

To exercise any of these rights, contact us at the address in § 12. We will respond within 30 days.

Being Me is not intended for use by anyone under the age of 16. We do not knowingly collect personal information from anyone under 16. If you believe a child under 16 has provided personal information to us, please contact us and we will delete it.

Being Me does not use third-party advertising cookies, analytics cookies, or social media tracking pixels.

We use local storage in your browser to remember that you have completed onboarding, to keep you signed in within a session, and to store your data while you are using the app before it is saved to the database. This is functional, not tracking.

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page and increment the version number. If a change is material — for example, a new category of data, a new third-party recipient, or a meaningful change in how we use your data — we will notify you in the app and require you to re-consent before the change takes effect for your account.

For any question, request, or complaint relating to your personal information — including to exercise the rights set out in § 8 — please contact us:

If you are not satisfied with our response, you have the right to complain to your local privacy regulator. For Australian users, that is the Office of the Australian Information Commissioner.