Privacy Policy
Last updated: 9 July 2026
At Numina, your privacy and the security of your information are fundamental. This policy explains, in clear terms, what we collect, how we use it, and the choices you have.
Scope
This Privacy Policy applies to the Numina platform, including our web application and related services that reference this policy.
Information we collect
1) Personal information
When you create an account, we collect:
- Email address
- Basic profile information you choose to provide during onboarding
2) Journey content
To provide personalised guidance and maintain context across sessions, we store:
- Journal entries and reflections
- Uploaded documents and attachments
- Conversation history with the AI companion
3) Usage data
To improve the platform experience, we collect:
- Interaction data (e.g., feature usage, session metadata)
- Device and technical information (e.g., browser type, general performance metrics)
We do not sell your data, and we never use it for advertising or to train AI models. Your journey content is processed only by the trusted service providers listed below, solely to provide Numina to you.
How we use your information
AI processing
Your content is processed to generate personalised insights, guidance, and responses, allowing a tailored experience for your personal transformation journey.
Service improvement
We analyse aggregate usage patterns to enhance functionality, reliability, and user experience.
Communication
We may contact you to provide service updates, respond to your enquiries, or share important information about the platform.
Who processes your data
To run Numina, we rely on a small number of carefully chosen service providers (subprocessors). Each one processes your data only to provide the service — never for advertising, and never to train AI models:
- OpenAI — generates AI responses and classifies imported content via API. Under OpenAI's API terms, data sent through the API is not used to train their models.
- Supabase — hosts our database and file storage, encrypted at rest and in transit.
- Vercel — hosts the Numina application.
- Resend — sends transactional emails (e.g., account and service notices).
- Google Analytics — helps us understand site usage.
- Memory-index provider (Mem0 or Zep, if configured) — indexes memories so your companion can recall context.
Data security
We use industry‑standard safeguards to protect your information, including:
- Infrastructure-level encryption — TLS in transit and encrypted storage at rest. Application-layer encryption of sensitive fields is in development.
- Secure authentication and database row-level security, so your records are scoped to your account
- Regular security reviews and good‑practice operational processes
Your personal journey content is stored securely and accessed only to provide the service to you.
Your rights
You are in control of your information. You can:
- Access your personal information
- Update or correct your details
- Export your data from Account settings
- Delete your account and all personal data from Account settings, or remove individual memories from the Memory dashboard
You can manage these options in Account settings or by contacting us. We are committed to GDPR principles and will process requests promptly and securely.
Updates to this policy
We may update this policy from time to time. If we make significant changes, we will notify you by email or within the platform. Continued use of Numina after changes take effect means you accept the updated policy.
Contact us
If you have questions about this Privacy Policy or our data practices, contact us:
Email: privacy@numinacontinuum.org