Privacy Policy.

Last updated: August 19, 2026

At The Spiritual School ("we," "our," or "us"), we believe that personal reflection, spiritual inquiry, and daily journaling require uncompromising privacy. We treat your personal check-ins and journal entries as confidential by design.

This Privacy Policy explains what data we collect, how it is processed, and your rights over your information.

Principles of Data Privacy

01
Never Sold or Monetized: We do not sell, rent, or trade your personal data or reflection entries to data brokers or third-party advertisers.
02
Never Used for Public AI Training: Your reflections, journals, and check-ins are never used to train public generative AI models.
03
Row-Level Isolation: All stored entries are protected by strict Row-Level Security (RLS) within our database infrastructure, ensuring only your authenticated session can access your data.

Information We Collect

Category	Specific Data	Purpose
Account Information	Email address, name, profile image (if using Google OAuth)	To create and manage your secure account.
Reflective Content	Daily check-in text, journal entries, grounded intentions (manifestations), kept passages	To generate your cited reflections, identify 14-day recurring themes, and display your personal history.
Usage & Practice Data	Meditation timer completions, streak counts, theme history counts	To maintain your streak metrics and personalized contemplative rhythm.
Technical Telemetry	IP address, browser type, anonymous page interaction metrics (via GA4 / PostHog)	To diagnose platform bugs, ensure page performance, and improve navigation.

Category

Account Information

Specific data

Email address, name, profile image (if using Google OAuth)

Purpose

To create and manage your secure account.

Category

Reflective Content

Specific data

Daily check-in text, journal entries, grounded intentions (manifestations), kept passages

Purpose

To generate your cited reflections, identify 14-day recurring themes, and display your personal history.

Category

Usage & Practice Data

Specific data

Meditation timer completions, streak counts, theme history counts

Purpose

To maintain your streak metrics and personalized contemplative rhythm.

Category

Technical Telemetry

Specific data

IP address, browser type, anonymous page interaction metrics (via GA4 / PostHog)

Purpose

To diagnose platform bugs, ensure page performance, and improve navigation.

How We Process AI Reflections

When you complete a check-in or journal entry:

01
Server-Side Routing: Your input is sent securely over HTTPS to our server-side Supabase Edge Function (reflect). API keys are never exposed on your client browser.
02
Theme Classification & Grounding: A lightweight, secure API call determines the thematic tag (e.g., Restlessness, Purpose, Grief) and matches it against our database of public-domain literature.
03
Commercial AI Terms: All generative calls are executed via enterprise/commercial AI APIs (Anthropic Claude). Under our commercial terms of service:
- Your inputs are processed in real-time to generate your reflection and practice.
- Prompts are automatically deleted after transient processing (standard 30-day security/abuse log retention, after which they are expunged).
- Your data is never fed into public training sets.

Third-Party Service Providers

We rely on trusted infrastructure providers to operate the Service:

Database, Authentication & Edge Functions: Supabase (PostgreSQL with encrypted connections and Row-Level Security).
AI Processing: Anthropic Claude API (Commercial endpoint, strictly no model training).
Analytics: Google Analytics 4 & PostHog (for aggregated, anonymized usage insights).
Email Delivery (Optional / Opt-in): Resend (used strictly for sending password resets and user-enabled weekly Keepsake digests).
Hosting: Emergent Cloud / Custom Domain routing.

Data Retention & Deletion Rights

Retention: We retain your check-ins and journal entries for as long as your account remains active so you can review your history and Keepsake constellations.
Export & Deletion: You have the right to request a full export of your personal data or request permanent deletion of your account and all associated entries at any time by emailing lakshay@thespiritualschool.com. Upon confirmation, all user records and journal entries are permanently purged from our primary database.

Security Measures

We use industry-standard encryption protocols (TLS/HTTPS) for all data in transit and database-level isolation policies (Row-Level Security) to prevent unauthorized cross-account access.

Children's Privacy

The Service is not directed to children under the age of 16. We do not knowingly collect personal information from minors.

Changes to This Policy

We may update this Privacy Policy from time to time. Any material changes will be communicated via email or through a clear notice on our website.

Contact & Inquiries

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact:

The Spiritual School
Email: lakshay@thespiritualschool.com