Deep Personality

1. Introduction

Deep Personality ("we", "our", or "the App") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our personality assessment application.

We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Canadian privacy laws.

2. Information We Collect

Account Information

Email address (for authentication)
Account creation date

Assessment Data

Your responses to personality assessment questions
Calculated personality trait scores (Big Five, HEXACO, PID-5-SF)
Dark Triad trait scores (Narcissism, Machiavellianism, Psychopathy)
Mental health screening scores (GAD-7, PHQ-9, ACE, PCL-5, DSM-5 Social Anxiety, RMS bipolar screening)
Substance use screening (AUDIT-C alcohol screening, DAST-10 drug screening) — optional, you may skip these questions
Eating disorder screening (SCOFF) — with crisis resources provided if concerns detected
Life satisfaction and relationship preference responses
AI-generated personality analyses

Technical Information

IP address (for security and audit purposes)
Browser user agent
Access timestamps

Sensitive Data Notice: Assessment data includes psychological, mental health, substance use, and eating disorder information which is considered highly sensitive personal information under PIPEDA. We apply additional safeguards to protect this data, including:

Opt-in consent for substance use screening
Crisis resources provided when eating disorder concerns are detected
Encryption at rest and in transit for all sensitive data
No sharing with employers, insurers, or third parties (except service providers)

3. How We Use Your Information

We use your information to:

Generate your personality profile and analyses
Store your results so you can access them later
Enable profile sharing features (only when you choose to share)
Compare profiles with saved partners (at your request)
Maintain audit logs for security and compliance
Improve and maintain the App

4. Data Storage and Security

Your data is stored securely using Supabase, which provides:

Encryption at rest for all stored data
Encryption in transit (TLS/SSL)
Row-level security policies to ensure you can only access your own data
Regular security updates and monitoring

The App is hosted on Vercel with enterprise-grade security measures.

5. International Data Transfers

Server Location: United States

Deep Personality Inc. is based in British Columbia, Canada. However, our servers and infrastructure are located in the United States. When you use our service, your data is transferred to and processed in the United States.

Our service providers include:

Supabase (database hosting) — United States
Vercel (application hosting) — United States
OpenAI (AI analysis) — United States
Anthropic (AI analysis) — United States

Under PIPEDA, we remain accountable for your personal information when it is transferred to third parties. We ensure our service providers maintain comparable levels of data protection through contractual obligations (Data Processing Agreements).

6. Data Sharing

We do not sell, rent, or trade your personal information to third parties.

Your data may be shared:

By your choice: When you create a share link, anyone with that link can view the shared profile
Service providers: With Supabase (database), Vercel (hosting), and OpenAI (AI analysis) as necessary to provide the service
Legal requirements: If required by law or to protect our legal rights

7. Data Retention

We retain your data until you delete your account. Upon account deletion:

All your profiles and assessment data are permanently deleted
All saved partner profiles are deleted
All share links you created are deleted
Audit logs are anonymized (user ID removed) but retained for up to 1 year for security purposes

8. Your Rights (PIPEDA - Canada)

Under Canadian privacy law, you have the right to:

Access: View all personal information we hold about you
Correction: Request correction of inaccurate information
Deletion: Request permanent deletion of your data
Withdraw consent: Stop using the App at any time

To exercise your rights: You can delete your account and all associated data directly from the App dashboard. For other requests, please contact us.

9. Your Rights (CCPA/CPRA - California)

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with additional rights:

Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected
Right to Delete: You may request deletion of your personal information
Right to Correct: You may request correction of inaccurate personal information
Right to Opt-Out of Sale: We do not sell your personal information
Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

Notice: We do not sell, share, or use your personal information for targeted advertising. We do not have actual knowledge that we sell or share the personal information of consumers under 16 years of age.

10. Geographic Availability

This service is available to users in Canada and the United States.

European Union Notice: This service is not available to residents of the European Union, European Economic Area, or United Kingdom. We do not process personal data of EU/EEA/UK residents and access from these regions is blocked. If you believe you have accessed this service from a restricted region, please contact us.

11. Cookies and Tracking

We use essential cookies for authentication and session management. We do not use advertising cookies or third-party tracking.

12. Children's Privacy

This App is intended for adults (18 years of age or older) only. We do not knowingly collect personal information from children under 18.

In compliance with the U.S. Children's Online Privacy Protection Act (COPPA), we do not knowingly collect, use, or disclose personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice in the App. Your continued use of the App after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at support@deeppersonality.app.

You also have the right to file a complaint with the Office of the Privacy Commissioner of Canada if you believe your privacy rights have been violated.