How Being Me collects, stores, and uses your personal information — and the rights you have over it.
This is a policy. It has to be precise to be useful, and the precise version is below. Here is the honest summary first:
This policy is published by Being Me ("Being Me", "we", "us", or "our"), the operator of the Being Me personal development platform. Being Me is based in Australia.
We are the data controller for the personal information you provide to us. For requests, questions, or complaints relating to your personal information, see § 12 — How to contact us.
We only collect information you choose to enter into Being Me. We do not track your activity outside the app and we do not use third-party analytics or advertising cookies.
We do not collect: precise location data, contacts, photos from your device, advertising identifiers, biometric data, or special-category data unless you explicitly choose to enter it into a free-text field.
We use your personal information only for the following purposes:
Your age is never sent to the AI coach and plays no part in what it says to you. It is not used to personalise your coaching, to segment you, or to decide what you are shown. It answers one question at signup and is then left alone.
We never use your data for advertising, profiling for marketing, or sale to third parties.
The only third parties that ever receive any of your personal information are the service providers that make Being Me technically possible.
When you message the AI coach, the contents of your message — together with the relevant context from your Being Me profile — are transmitted to Anthropic (a public benefit corporation headquartered in San Francisco, California, United States) for the purpose of generating the coaching response. Anthropic operates the Claude large language model that powers the coach.
Anthropic is bound by its own privacy commitments and, under its API terms, does not use customer API data to train its models. Anthropic's own privacy policy is available at anthropic.com/legal/privacy.
Account information and personal data entered into Being Me will be stored in a database hosted by Supabase (Delaware, United States), on servers in the United States (Amazon Web Services, US East), with Row Level Security configured so that one user cannot access another user's data.
So that the app keeps working if your connection drops, a copy of what you have written is also kept in your browser's storage on each device you use. It is removed when you sign out. Your vision board is the exception for now: it is kept only on the device where you make it, and is not yet stored with us.
The web pages of the Being Me application are served from Netlify (California, United States). Netlify receives standard server log information but not the substance of your coaching content.
We do not share your personal information with any other third parties. We do not engage in any form of data brokerage or sale.
Anthropic, Supabase, and Netlify are all based in the United States. This means your personal information will be transferred to, and processed in, the United States.
Where you are located in the European Union or the United Kingdom, this transfer is made on the basis of Standard Contractual Clauses approved by the European Commission and (for UK transfers) the International Data Transfer Addendum. Each of our service providers maintains industry-standard safeguards.
Where you are located in Australia, this transfer is made in accordance with Australian Privacy Principle 8 ("Cross-border disclosure of personal information"). By using Being Me you acknowledge that your information will leave Australia for these processing purposes.
We take reasonable steps to protect your information from misuse, interference, loss, unauthorised access, modification, and disclosure. These include:
No method of internet transmission or electronic storage is 100% secure. We cannot guarantee absolute security, but we can — and will — apply the controls above and notify you of any breach that is likely to result in serious harm, in accordance with the Notifiable Data Breaches scheme under the Australian Privacy Act.
We keep your personal information for as long as your account is active. If you ask us to delete your data, we will permanently remove it from our active systems within 30 days of receiving your request, except where we are required to retain it for legal reasons (for example, financial records of subscription payments, which we are required to keep for seven years under Australian tax law).
Server logs are retained for no more than 30 days unless a specific security investigation requires longer retention.
Your birth month and year are kept for as long as your account exists, and are deleted with it. We keep them rather than discarding them after the signup check so that we can demonstrate, if asked, that the account was checked — and so that a future change to the minimum age can be applied to accounts that already exist.
You have the following rights over your personal information. They apply regardless of where you live; some jurisdictions add further rights on top.
You have the rights set out under the 13 Australian Privacy Principles. If you believe we have mishandled your information, you may complain to us in the first instance (see § 12) and, if unresolved, to the Office of the Australian Information Commissioner at oaic.gov.au.
You have the rights set out under Articles 15–22 of the GDPR (or UK GDPR), including the right to object to processing, the right to restrict processing, and the right to lodge a complaint with your local supervisory authority.
You have the right to know what personal information we have collected, the right to delete, the right to correct, the right to opt out of sale or sharing (we do not sell or share, but you have the right regardless), and the right to non-discrimination for exercising any of the above.
To exercise any of these rights, contact us at the address in § 12. We will respond within 30 days.
Being Me is for people aged 18 and over.
This is enforced when an account is created, not discovered afterwards. If you tell us a birth month and year that puts you under 18, no account is created at all — there is no record to hold and nothing for us to delete, because nothing was written. Your email address and password are never sent to us.
The check is made once, at signup, and cannot be edited afterwards. It relies on what you tell us; we do not verify it against any external source, and we do not ask you to prove your age with a document.
We have set the minimum at 18 rather than 16 deliberately. Being Me involves an AI coach and a community of other members, and doing either of those well for a sixteen or seventeen year old means building things we have not built yet. We would rather not admit people we cannot yet serve properly. If that changes, this section will change with it and the change will be recorded below.
If you believe someone under 18 holds an account, please contact us at the address in § 12 and we will close it and delete the data associated with it.
Being Me does not use third-party advertising cookies, analytics cookies, or social media tracking pixels.
We use local storage in your browser to remember that you have completed onboarding, to keep you signed in within a session, and to store your data while you are using the app before it is saved to the database. This is functional, not tracking.
We may update this policy from time to time. When we do, we will update the version number and the "Last updated" date at the top of this page, and add an entry to the changelog at the foot of it saying what changed and why.
Not every change deserves the same interruption. A policy that stops you at the door for a corrected typo teaches you to dismiss the notice without reading it, and then the notice that matters gets dismissed too. So we treat changes in three tiers:
Product announcements and feature news are never delivered through this mechanism. If we interrupt you about a policy, it is because of a policy.
Every superseded version of this policy stays available at a permanent link in the changelog, so that if you agreed to an earlier version you can always read exactly what you agreed to.
For any question, request, or complaint relating to your personal information — including to exercise the rights set out in § 8 — please contact us:
If you are not satisfied with our response, you have the right to complain to your local privacy regulator. For Australian users, that is the Office of the Australian Information Commissioner.
Every version of this policy is listed here, newest first, with what changed and whether it required you to agree again. Superseded versions stay readable at the links below.