Privacy Policy

This policy is published by Being Me ("Being Me", "we", "us", or "our"), the operator of the Being Me personal development platform. Being Me is based in Australia.

We are the data controller for the personal information you provide to us. For requests, questions, or complaints relating to your personal information, see § 12, How to contact us.

We only collect information you choose to enter into Being Me. We do not track your activity outside the app and we do not use third-party analytics or advertising cookies.

We do not collect: precise location data, contacts, photos from your device, advertising identifiers, or biometric data.

Health and wellbeing information is the one sensitive kind of information Being Me asks about, and we collect it only with the consent you give when you join. Anything else sensitive, such as your religion, sexuality or political views, is held only if you choose to write it, and is treated in exactly the same way.

We use your personal information only for the following purposes:

• To run the coaching experience: your inputs are the entire substance of what Being Me does. Without them, the AI coach has nothing to coach on.
• To personalise AI coaching responses: when you talk to the coach, we include relevant context from your profile (your values, your goals, your recent check-ins) so the AI's response is specific to you, not generic.
• To help you see patterns: your check-in history is the basis for the longitudinal insight the coach surfaces, such as recurring obstacles or trending mood scores.
• To let you share with, and be supported by, other people: only what you choose to post in a circle, and only the goals you choose to share with a supporter.
• To keep circles safe: when someone reports a post or comment, a person at Being Me reads it, with the handle of the person who wrote it, the circle and, for a comment, the start of the post it replies to, to decide whether to hide it. They never see who made the report. A hidden post or comment disappears for other members; its author sees that Being Me removed it.
• To understand what kinds of goals members set: only if you switch on Help shape Being Me on your Account page. Software may suggest a category first; a person at Being Me then reads your goals' words, without your name, and decides. Neither happens unless you have switched this on. Anything we say about categories outside Being Me uses totals drawn from at least ten people. Turning it off removes your goals from anything waiting to be read, straight away; categories already given stay, as labels without your words.
• To suggest circles: the app matches the titles and life areas of goals you have made public to circles, and shows the suggestions only to you. Some circles are never suggested, including faith, recovery, grief, illness and neurodivergence.
• To share what members say has helped them: only where you have agreed to be quoted, as described in § 2.
• To tell members' stories in our own writing, such as a book about how people change, only if you switch on Your story, without your name, and never with your name or anything that identifies you.
• To operate and improve the platform: including security, fraud prevention, the automated safety check described in § 2, and totals that never identify anyone.
• To write to people on the waitlist about their place, when Being Me opens, and launch offers. Only to people who gave us their email for that on the waitlist form, and every email lets them unsubscribe.
• To confirm you are old enough to hold an account: your birth month and year are checked once, at signup, against our minimum age. That is the only purpose they serve.
• To meet legal obligations: for example, responding to lawful requests from regulators or law enforcement under valid legal process.

Your age is never sent to the AI coach and plays no part in what it says to you. It is not used to personalise your coaching, to segment you, or to decide what you are shown. It answers one question at signup and is then left alone.

Health and wellbeing information is used to coach you. Beyond that, it appears only in totals that never name anyone, such as how members' REACH ratings change over time, and, if you have switched on Help shape Being Me, as a category on a goal shown without its words or your name. It is never used for offers, and the Health & Wellbeing and Mindset goal categories can never be opened to offers: the database refuses it.

We never sell your data, never use ad networks or tracking, and never share your data with advertisers. What you write is never used to train AI, ours or anyone's, and is not used for research.

Offers matched to your goals are opt-in only, and you can turn them off at any time. If you turn them on, Being Me may match offers to your goals. The matching happens inside Being Me: the company making an offer never receives your personal information and never learns who you are. Opting in today records your preference and nothing more, because no offers are made yet.

We send you marketing emails only if you have agreed to receive them, and every one lets you unsubscribe. Emails about your account and invitations you ask us to send are not marketing.

Your coach is an AI. It can be wrong, and it is not medical, psychological or other professional advice. About the AI explains what it is and is not for.

The only third parties that ever receive any of your personal information are the service providers that make Being Me technically possible.

When you message the AI coach, the contents of your message, together with the relevant context from your Being Me profile, are transmitted to Anthropic (a public benefit corporation headquartered in San Francisco, California, United States) for the purpose of generating the coaching response. Anthropic provides the large language model that powers the coach.

Anthropic is bound by its own privacy commitments and, under its API terms, does not use customer API data to train its models. Anthropic's own privacy policy is available at anthropic.com/legal/privacy.

Account information and personal data entered into Being Me will be stored in a database hosted by Supabase (Delaware, United States), on servers in the United States (Amazon Web Services, US East), with Row Level Security configured so that one user cannot access another user's data.

So that the app keeps working if your connection drops, a copy of what you have written, your settings, and a record of any crisis support the app has shown you are also kept in your browser's storage on each device you use. It is removed when you sign out. Your vision board is the exception for now: it is kept only on the device where you make it, and is not yet stored with us.

The web pages of the Being Me application are served from Netlify (California, United States). Netlify receives standard server log information but not the substance of your coaching content.

The emails Being Me sends are delivered by Resend (United States): the emails that confirm and secure your account, and invitations you ask us to send. Resend receives the recipient's email address and the content of that email. For an invitation, that is your display name and your message, never your goal. When we write to people on the waitlist, Resend will receive their email address and that email too.

Some vision board images are served by Unsplash. Your browser fetches these directly, so Unsplash receives your IP address and basic browser information when one of its images loads. It never receives anything you write. The typeface Being Me uses is served from our own site, so no font service receives anything.

Other members are not service providers, but they can see some of what you do: what you post or comment in a circle is seen by its members, and a supporter sees the goal you invited them to and the updates you share on it. Nothing else you write is visible to any other member.

We do not share your personal information with any other third parties. We do not engage in any form of data brokerage or sale.

The service providers named in § 4 are based in the United States. This means your personal information will be transferred to, and processed in, the United States.

Where you are located in the European Union or the United Kingdom, this transfer is made on the basis of Standard Contractual Clauses approved by the European Commission and (for UK transfers) the International Data Transfer Addendum. Each of our service providers maintains industry-standard safeguards.

Where you are located in Australia, this transfer is made in accordance with Australian Privacy Principle 8 ("Cross-border disclosure of personal information"). By using Being Me you acknowledge that your information will leave Australia for these processing purposes.

We take reasonable steps to protect your information from misuse, interference, loss, unauthorised access, modification, and disclosure. These include:

• Encryption in transit using TLS 1.2 or higher.
• Encryption at rest for stored data.
• Row Level Security in the database, so each user can only access their own data.
• No one at Being Me reads what you write: your coaching conversations, check-ins, REACH, Why or goals. The exceptions are when you send something to us yourself, for example in an email asking for help; when the law requires it; goals you have agreed may be read, under Help shape Being Me (§ 3); and a post or comment in a circle that someone has reported (§ 3).
• Restricted technical access. Direct access to the database is limited to the people who keep the platform running (today, the founder), and is used only to keep it running and to fix faults, never to read what members write. It is separate from the admin screens below, and is not part of their record.
• Admin screens without your words, except a reported post. Administrators see goals without their words or their owner; totals; quotes you have agreed to share; a post or comment someone has reported, with the handle of the person who wrote it, but never who reported it; and, to protect signup, the network addresses that repeatedly try wrong signup codes. The admin screens need a password and a second step, a code from an authenticator app. Every admin screen records who used it, which screen, when and how many rows, never the content. That record is kept for two years, and the admin screens cannot show, change or delete it.

No method of internet transmission or electronic storage is 100% secure. We cannot guarantee absolute security, but we can, and will, apply the controls above and notify you of any breach that is likely to result in serious harm, in accordance with the Notifiable Data Breaches scheme under the Australian Privacy Act.

We keep your personal information for as long as your account is active. If you ask us to delete your data, we will permanently remove it from our active systems within 30 days of receiving your request, except where we are required to retain it for legal reasons (for example, financial records of subscription payments, which we are required to keep for seven years under Australian tax law).

Server logs are retained for no more than 30 days unless a specific security investigation requires longer retention.

An invitation to someone who is not a member lasts 14 days. When it is used, withdrawn or expires, their email address is deleted. Records of signup-code attempts are deleted after seven days. Records of when you used the coach are deleted after 48 hours, and at once if your account is deleted. The safety record on your device is deleted after 12 months, and when you sign out. The record of admin screen use is kept for two years; it holds nothing you wrote. A post or comment Being Me hides after a report is kept, out of sight, for 12 months as the record of what happened, then deleted; while it is hidden you cannot edit or delete it yourself, but deleting your account deletes it straight away.

A waitlist entry is kept until you unsubscribe or ask us to remove you, or until you create an account, when it is deleted. Anyone still on the waitlist 12 months after Being Me opens to everyone is removed. The scrambled network address kept to stop the form being misused is deleted after one day.

When an account is deleted, we keep one line about it, so we can understand how long members stay: the month it was created, its plan, how many days it lasted, and the date it was deleted. It holds no name, no email address and nothing written.

If you turn off Help shape Being Me, your goals leave the review queue at once. If you turn off Your story, without your name, we will not use your story in anything new.

If you withdraw your agreement to be quoted, we stop using the quote. Anything already published is removed from our own pages.

Your birth month and year are kept for as long as your account exists, and are deleted with it. We keep them rather than discarding them after the signup check so that we can demonstrate, if asked, that the account was checked, and so that a future change to the minimum age can be applied to accounts that already exist.

You have the following rights over your personal information. They apply regardless of where you live; some jurisdictions add further rights on top.

• Access: see exactly what we hold about you.
• Correction: fix anything that is inaccurate or out of date. Most things can be changed directly in the app; your email address and your birth month and year are corrected on request (see § 2 and § 12), and we will make the correction for you.
• Deletion: request permanent erasure of your data.
• Portability: ask for a copy of your data, from your Account page, in a structured, machine-readable format (JSON).
• Withdraw consent: at any time, for any processing that relies on your consent. The three choices in § 2 are switches on your Account page.

You have the rights set out under the 13 Australian Privacy Principles. If you believe we have mishandled your information, you may complain to us in the first instance (see § 12) and, if unresolved, to the Office of the Australian Information Commissioner at oaic.gov.au.

You have the rights set out under Articles 15–22 of the GDPR (or UK GDPR), including the right to object to processing, the right to restrict processing, and the right to lodge a complaint with your local supervisory authority.

You have the right to know what personal information we have collected, the right to delete, the right to correct, the right to opt out of sale or sharing (we do not sell or share, but you have the right regardless), and the right to non-discrimination for exercising any of the above.

To exercise any of these rights, contact us at the address in § 12. We will respond within 30 days.

Being Me is for people aged 18 and over.

This is enforced when an account is created, not discovered afterwards. If you tell us a birth month and year that puts you under 18, no account is created at all: there is no record to hold and nothing for us to delete, because nothing was written. Your email address and password are never sent to us.

The check is made once, at signup, and cannot be edited afterwards. It relies on what you tell us; we do not verify it against any external source, and we do not ask you to prove your age with a document.

We have set the minimum at 18 rather than 16 deliberately. Being Me involves an AI coach and a community of other members, and doing either of those well for a sixteen or seventeen year old means building things we have not built yet. We would rather not admit people we cannot yet serve properly. If that changes, this section will change with it and the change will be recorded below.

If you believe someone under 18 holds an account, please contact us at the address in § 12 and we will close it and delete the data associated with it.

Being Me does not use third-party advertising cookies, analytics cookies, or social media tracking pixels.

We use local storage in your browser to keep you signed in on that device until you sign out, to remember that you have completed onboarding, to keep a copy of what you have written so the app works if your connection drops, to hold changes that have not reached us yet, to keep the day's coach greeting, and to keep the safety record described in § 2. This is functional, not tracking. It is removed when you sign out, except your theme, your region and your vision board, which stay on that device.

We may update this policy from time to time. When we do, we will update the version number and the "Last updated" date at the top of this page, and add an entry to the changelog at the foot of it saying what changed and why.

Not every change deserves the same interruption. A policy that stops you at the door for a corrected typo teaches you to dismiss the notice without reading it, and then the notice that matters gets dismissed too. So we treat changes in three tiers:

Product announcements and feature news are never delivered through this mechanism. If we interrupt you about a policy, it is because of a policy.

Every superseded version of this policy stays available at a permanent link in the changelog, so that if you agreed to an earlier version you can always read exactly what you agreed to.

For any question, request, or complaint relating to your personal information, including to exercise the rights set out in § 8, please contact us:

If you are not satisfied with our response, you have the right to complain to your local privacy regulator. For Australian users, that is the Office of the Australian Information Commissioner.

Every version of this policy is listed here, newest first, with what changed and whether it required you to agree again. Superseded versions stay readable at the links below.