1. Introduction
Deep Personality ("we", "our", or the "App") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our personality assessment application.
Deep Personality Inc. is based in British Columbia, Canada. We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Canadian privacy laws. Where the EU General Data Protection Regulation (GDPR) or UK GDPR applies, the rights in section 8 also apply.
2. Information We Collect
Account Information
- Email address (for authentication)
- Account creation date
Assessment Data
- Your responses to personality assessment questions
- Calculated personality trait scores (Big Five, HEXACO, PID-5-SF)
- Dark Triad trait scores (Narcissism, Machiavellianism, Psychopathy)
- Mental health screening scores (GAD-7, PHQ-9, ACE, PCL-5, DSM-5 Social Anxiety, RMS bipolar screening) — optional; these screeners stay off until you give an explicit yes
- Substance use screening (AUDIT-C alcohol screening, DAST-10 drug screening) — optional, included only after that same explicit yes; you may still skip
- Eating disorder screening (SCOFF) — optional, same explicit yes; crisis resources are provided if concerns are detected
- Life satisfaction and relationship preference responses
- AI-generated personality analyses
Technical Information
- IP address (for security, abuse prevention, and — if you accept optional cookies — analytics)
- Browser user agent
- Access timestamps
- Advertising click identifiers (for example Meta
fbclid/_fbp, Redditrdt_cid) when you arrive from an ad
Sensitive Data Notice: Assessment data includes psychological, mental health, substance use, and eating disorder information which is considered highly sensitive personal information under PIPEDA and special-category data under GDPR. We apply additional safeguards to protect this data, including:
- Explicit yes before clinical / health screeners listed above (default off)
- Crisis resources provided when eating disorder concerns are detected
- Encryption at rest and in transit for all sensitive data
- No sharing with employers, insurers, or third parties except the processors listed in section 5
3. How We Use Your Information
We use your information to:
- Generate your personality profile and analyses
- Store your results so you can access them later
- Enable profile sharing features (only when you choose to share)
- Compare profiles with saved partners (at your request)
- Maintain audit logs for security and compliance
- Process payments and send transactional email
- If you accept optional cookies: measure product usage, diagnose errors, run support chat, and attribute advertising conversions
- Improve and maintain the App
4. Data Storage and Security
Your data is stored securely using Supabase, which provides:
- Encryption at rest for all stored data
- Encryption in transit (TLS/SSL)
- Row-level security policies to ensure you can only access your own data
- Regular security updates and monitoring
The App is hosted on Vercel.
5. International Data Transfers
Server Location: United States
Deep Personality Inc. is based in British Columbia, Canada. Our primary servers and infrastructure are located in the United States. When you use our service, your personal data is transferred to and processed in the United States. Some processors also operate in other countries. For GDPR / UK GDPR, these are restricted transfers. We rely on the processors' standard contractual clauses (or equivalent UK addenda) and remain accountable for the data.
Our processors include:
- Supabase — database and authentication (United States)
- Vercel — application hosting, Analytics, and Speed Insights (United States)
- Stripe — payments (United States)
- Resend — transactional email (United States)
- Anthropic — AI analysis (United States)
- OpenAI — AI analysis / verification (United States)
- PostHog — product analytics (United States; loaded only after you accept optional cookies)
- Meta — advertising pixel and conversion API (United States; loaded only after you accept optional cookies)
- Reddit — advertising pixel (United States; loaded only after you accept optional cookies)
- Intercom — customer support chat (United States; booted only after you accept optional cookies)
- Sentry — error monitoring (United States)
Under PIPEDA, we remain accountable for your personal information when it is transferred to third parties. We require processors to maintain comparable protection through contractual obligations (data processing agreements).
6. Data Sharing
We do not sell, rent, or trade your personal information for money.
Your data may be shared:
- By your choice: When you create a share link, anyone with that link can view the shared profile
- Service providers: With the processors listed in section 5, as needed to run the App
- Advertising measurement: If you accept optional cookies, hashed identifiers and conversion events may be sent to Meta and Reddit so we can measure ads
- Legal requirements: If required by law or to protect our legal rights
7. Data Retention
We retain your data until you delete your account. Upon account deletion:
- All your profiles and assessment data are permanently deleted
- All saved partner profiles are deleted
- All share links you created are deleted
- Audit logs are anonymized (user ID removed) but retained for up to 1 year for security purposes
8. Your Rights (PIPEDA and GDPR / UK GDPR)
Under Canadian privacy law (PIPEDA) you have the right to access, correct, and delete your personal information, and to withdraw consent.
If GDPR or UK GDPR applies, you also have the right to:
- Access: Get a copy of the personal data we hold about you
- Erasure: Ask us to delete your personal data
- Portability: Receive your data in a structured, commonly used format
- Objection: Object to processing based on legitimate interests, including analytics and advertising measurement
- Correction: Request correction of inaccurate information
- Withdraw consent: Reject optional cookies at any time (choose Reject on the cookie banner) and stop using the App
How to exercise these rights: In Settings you can download a full data package (PIPEDA / portability export) and permanently delete your account (erasure). To object to optional analytics and advertising cookies, choose Reject on the cookie banner. For access, correction, or other requests, email support@deeppersonality.app.
9. Your Rights (CCPA/CPRA - California)
If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with additional rights:
- Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected
- Right to Delete: You may request deletion of your personal information
- Right to Correct: You may request correction of inaccurate personal information
- Right to Opt-Out of Sale / Share: We do not sell personal information for money. If you accept optional cookies, we may share identifiers with Meta and Reddit for advertising measurement. Reject optional cookies to opt out of that sharing.
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
10. Geographic Availability
This service is available to users in Canada, the United States, the European Union, the European Economic Area, and the United Kingdom, and to visitors from other regions who reach the App.
We process personal data of EU/EEA/UK residents who use the App. That processing includes account data, assessment answers, and — only if you accept optional cookies — analytics and advertising measurement described in this policy.
11. Cookies and Tracking
We use essential cookies for authentication, session management, security, and remembering your cookie choice. Those are necessary for the App to work.
If you accept optional cookies, we also use advertising and analytics cookies and similar technologies: PostHog (product analytics and session replay with input masking), Meta Pixel, Reddit Pixel, Intercom messenger, and Vercel Analytics / Speed Insights. Until you accept, we do not initialize those tools. Rejecting optional cookies is treated the same as no choice: necessary cookies only.
You can change your mind by clearing site data for this domain and answering the banner again, or by emailing support.
12. Children's Privacy
This App is intended for adults (18 years of age or older) only. We do not knowingly collect personal information from children under 18.
In compliance with the U.S. Children's Online Privacy Protection Act (COPPA), we do not knowingly collect, use, or disclose personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice in the App. Your continued use of the App after changes constitutes acceptance of the updated policy.
14. Contact Us
If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at support@deeppersonality.app.
You also have the right to file a complaint with the Office of the Privacy Commissioner of Canada, and — if GDPR or UK GDPR applies — with your local supervisory authority (in the UK, the Information Commissioner's Office).