1. Introduction
Deep Personality ("we", "our", or "the App") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our personality assessment application.
We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Canadian privacy laws.
2. Information We Collect
Account Information
- Email address (for authentication)
- Account creation date
Assessment Data
- Your responses to personality assessment questions
- Calculated personality trait scores (Big Five, HEXACO, PID-5-SF)
- Dark Triad trait scores (Narcissism, Machiavellianism, Psychopathy)
- Mental health screening scores (GAD-7, PHQ-9, ACE, PCL-5, DSM-5 Social Anxiety, RMS bipolar screening)
- Substance use screening (AUDIT-C alcohol screening, DAST-10 drug screening) — optional, you may skip these questions
- Eating disorder screening (SCOFF) — with crisis resources provided if concerns detected
- Life satisfaction and relationship preference responses
- AI-generated personality analyses
Technical Information
- IP address (for security and audit purposes)
- Browser user agent
- Access timestamps
Sensitive Data Notice: Assessment data includes psychological, mental health, substance use, and eating disorder information which is considered highly sensitive personal information under PIPEDA. We apply additional safeguards to protect this data, including:
- Opt-in consent for substance use screening
- Crisis resources provided when eating disorder concerns are detected
- Encryption at rest and in transit for all sensitive data
- No sharing with employers, insurers, or third parties (except service providers)
3. How We Use Your Information
We use your information to:
- Generate your personality profile and analyses
- Store your results so you can access them later
- Enable profile sharing features (only when you choose to share)
- Compare profiles with saved partners (at your request)
- Maintain audit logs for security and compliance
- Improve and maintain the App
4. Data Storage and Security
Your data is stored securely using Supabase, which provides:
- Encryption at rest for all stored data
- Encryption in transit (TLS/SSL)
- Row-level security policies to ensure you can only access your own data
- Regular security updates and monitoring
The App is hosted on Vercel with enterprise-grade security measures.
5. International Data Transfers
Server Location: United States
Deep Personality Inc. is based in British Columbia, Canada. However, our servers and infrastructure are located in the United States. When you use our service, your data is transferred to and processed in the United States.
Our service providers include:
- Supabase (database hosting) — United States
- Vercel (application hosting) — United States
- OpenAI (AI analysis) — United States
- Anthropic (AI analysis) — United States
Under PIPEDA, we remain accountable for your personal information when it is transferred to third parties. We ensure our service providers maintain comparable levels of data protection through contractual obligations (Data Processing Agreements).
6. Data Sharing
We do not sell, rent, or trade your personal information to third parties.
Your data may be shared:
- By your choice: When you create a share link, anyone with that link can view the shared profile
- Service providers: With Supabase (database), Vercel (hosting), and OpenAI (AI analysis) as necessary to provide the service
- Legal requirements: If required by law or to protect our legal rights
7. Data Retention
We retain your data until you delete your account. Upon account deletion:
- All your profiles and assessment data are permanently deleted
- All saved partner profiles are deleted
- All share links you created are deleted
- Audit logs are anonymized (user ID removed) but retained for up to 1 year for security purposes
8. Your Rights (PIPEDA - Canada)
Under Canadian privacy law, you have the right to:
- Access: View all personal information we hold about you
- Correction: Request correction of inaccurate information
- Deletion: Request permanent deletion of your data
- Withdraw consent: Stop using the App at any time
To exercise your rights: You can delete your account and all associated data directly from the App dashboard. For other requests, please contact us.
9. Your Rights (CCPA/CPRA - California)
If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with additional rights:
- Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected
- Right to Delete: You may request deletion of your personal information
- Right to Correct: You may request correction of inaccurate personal information
- Right to Opt-Out of Sale: We do not sell your personal information
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
Notice: We do not sell, share, or use your personal information for targeted advertising. We do not have actual knowledge that we sell or share the personal information of consumers under 16 years of age.
10. Geographic Availability
This service is available to users in Canada and the United States.
European Union Notice: This service is not available to residents of the European Union, European Economic Area, or United Kingdom. We do not process personal data of EU/EEA/UK residents and access from these regions is blocked. If you believe you have accessed this service from a restricted region, please contact us.
11. Cookies and Tracking
We use essential cookies for authentication and session management. We do not use advertising cookies or third-party tracking.
12. Children's Privacy
This App is intended for adults (18 years of age or older) only. We do not knowingly collect personal information from children under 18.
In compliance with the U.S. Children's Online Privacy Protection Act (COPPA), we do not knowingly collect, use, or disclose personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice in the App. Your continued use of the App after changes constitutes acceptance of the updated policy.
14. Contact Us
If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at support@deeppersonality.app.
You also have the right to file a complaint with the Office of the Privacy Commissioner of Canada if you believe your privacy rights have been violated.