The short version.

• Most of what you do in the app stays on your iPhone.

• If you sign in, our server keeps your account, a copy of what you earned, and each day's totals and score.

• Raw Apple Health data, your calendar, your notes and the titles of your to-dos are never sent to our server (with two small exceptions in fights, explained below).

• We do not sell your data. There are no ads and no tracking.

• You can delete your account in the app at any time: Settings, under Sign out, Delete account.

1. Who we are
   This policy covers the Human Design Academy app for iPhone and Apple Watch ("the app", "HDA"). The app is made by Human Design Academy ("we", "us"). Our website is humandesign.co.in.
   If you have a question about this policy or your data, email us at humandesign.dhamma@gmail.com.

2. What we collect and why
   We only collect what the app needs to work. We use it to run the app for you: to keep your account, to bring your progress to a new phone, and to let the people you choose see your day.
   When you sign in

• Sign in with Google: Google gives us your email address and your name. We do not get your Google password.

• Sign in with Apple: Apple gives us a private account identifier and, if you choose to share them, your name and email address. If you choose "Hide My Email", we get an Apple relay address instead of your real one.

• We use your email to keep your account and to check it against the Academy's own list of students, so students of the Academy are recognised. The app never asks you to type a cohort or a code. If you hide your email with Apple, the app cannot match you to that list.
  Things you create in the app

• Your name, profile picture (an emoji or a photo you pick), the "I am" and "I build" tags you choose, your house and your agent.

• Your awards, diamonds, skills, opened chests, Pro status and portfolio links.

• Your score for each day, as one number from 0 to 100.

• The emoji reactions you leave, who you follow, and which story pages you looked at.

• Fights you take part in with other people, and proof photos you choose to take for them.
  Your day
  While you are signed in, each day goes to our server: your score, the day's totals for steps, workouts, meditation, sleep, water and to-dos done, how many to-dos you planned, your streak, and a short list of what you finished and when. For a workout that list includes its type, minutes, and calories and distance if Health has them. For sleep it includes the minutes and when you went to bed. A to-do appears only as an id and a time, never its title.
  Notifications
  If you allow notifications, Apple gives your iPhone a push address (a token). We keep it on our server so we can tell you about your fights. The morning reminder is scheduled on your iPhone and sends nothing to us.
  What we do not collect

• No location. The Discover map is an invented world and never uses where you are.

• No contacts, no browsing history, no payment details.

• No advertising identifier, no analytics or crash-reporting tools, no tracking across other apps or websites.

3. Apple Health
   Apple Health is optional. If you allow it, the app reads:

• Steps, workouts, active energy, sleep, mindful minutes and water, to work out your daily Superhuman Score.

• Height, weight, date of birth and sex, to fill in your profile when you set it up. These stay on your iPhone and are never sent to our server.
  The app writes to Apple Health only the water and sleep you log in the app, and the guided meditation sessions you complete in it. Apple may sync these through iCloud.
  Only the daily totals and the short list of what you finished (described above) leave your iPhone, and only while you are signed in. Raw Health samples, heart data and body details never leave your iPhone.
  As Apple requires, data from Apple Health (HealthKit) is never used for advertising or marketing, never sold, and never shared with data brokers or advertising platforms. We use it only to provide the app's health and fitness features to you.
  The app also uses Motion and Fitness on your iPhone to count steps. You can change any of these permissions at any time in the Health app or in iPhone Settings.

4. What stays on your iPhone
   These are kept on your iPhone and are not sent to our server:

• Your to-dos and their titles, your projects and your agent notes.

• Your habit logs and their full history.

• Your calendar. The app reads your calendar to show your day and, if you turn calendar sync on, adds your to-dos to it. This happens on your iPhone only. Apple may sync your calendar through iCloud. One switch in Settings turns it off.

• Your body details read from Apple Health.

• Your Gemini API key and Figma token, if you add them. They are stored in the iPhone's Keychain.

• Your settings, such as appearance, haptics and the morning reminder.

5. What goes to our server
   Only while you are signed in. Our server runs on Supabase (see section 6).
   What Why Who can see it
   Your account: email, name, account id To sign you in and recognise Academy students Only you (and us, to run the service)
   Your saved progress: name, picture, tags, house, agent, awards, diamonds, skills, chests, Pro, portfolio, and one score per day So it can follow you to another phone Only you
   Your public card: name, picture, tags, house, agent, cohort, latest score and streak So people can find and follow you Anyone signed in to the app
   Your days: score, totals and what you finished, with a made-up line in place of every to-do The Friends timeline, Race, stories and the map You and the people who follow you
   Your story facts: awards, companions, chests opened, perfect days Your story You and the people who follow you
   Follows, emoji reactions and story views Connect and Activity The people involved
   Fights with other people: who, the prize, the stake, and when each side ticked a to-do So both phones agree on who won The two sides; once it starts, the people who follow either side
   Push address (token) To send you fight notifications No one; used only to send
   The two exceptions for to-do titles

• A public fight or a fight with a referee. If you make a fight public, your three fight to-dos go to our server and anyone watching that fight can read them. Fights are private unless you switch this on. In a fight with a referee, both sides' three to-dos are kept on the server where nobody can read them. If the loser objects, the referee can read them. They are deleted once the referee has ruled, or a day after the result if nobody objected.

• Proof photos. In a fight with another person, you can take a photo as proof of one of your three to-dos. It is camera only, never your photo library. The photo is made small on your iPhone (320 pixels on its long side) and its location and camera details are removed. It goes to our server with a small sticker cut from it. To check it, the photo and that to-do's title are sent to Google Gemini, which says whether the photo matches and describes it in a few words. The title is used for that one check and is not stored or logged. The other side of the fight sees your photo, sticker and check result; a referee sees them only if the loser objects; people watching the fight do not. Proof is always optional and never changes who wins.

6. Third parties
   We share data only with the services below, only for the reasons given, and never to sell it.

• Supabase hosts our database, file storage and server functions. It stores the server data described in section 5 on our behalf.

• Google Sign-In confirms who you are when you choose Continue with Google. Google's privacy policy applies to your Google account.

• Sign in with Apple confirms who you are when you choose Continue with Apple. Apple's privacy policy applies to your Apple Account.

• Google Gemini, for proof checks. Our server sends a proof photo and its to-do title to Google's Gemini API for the check described in section 5.

• Google Gemini, for your agent. If you add your own Gemini API key, an agent note you ask to be planned goes straight from your iPhone to Google, with your key, along with its project's description and links and the outline of any Figma file linked to it. This does not pass through our server. Your agreement with Google covers that key.

• Figma. If you add your own Figma token and link a Figma file, your iPhone opens it at Figma to read its pages and frames. This does not pass through our server.

• Apple Push Notification service delivers fight notifications. A notification carries a first name and a number, never a to-do, a score or a result.

• Links you add. A link you add to your portfolio is fetched once by your iPhone, for its title and picture. The links to follow us on Instagram, YouTube and X open those services, which have their own privacy policies. The app only remembers that you opened each link.

7. Retention and deletion

• Your account and everything kept for it stay on our server until you delete your account.

• Delete account is in Settings, under Sign out. It removes your account from our server for good: your profile, saved progress, days, follows, reactions, story views, fights, push address and the pictures in your folder. It cannot be undone.

• Deleting your account does not remove what is on your iPhone. To remove that, delete the app. Data the app wrote to Apple Health stays in Apple Health until you remove it there.

• Proof photos and their check results are deleted from the server once no fight can need them: soon after the result, after a referee's ruling, or a day after the result if nobody objected.

• Referee to-dos are deleted as described in section 5.

• Waiting notifications are deleted from the server within a day.

• Your push address is removed when you sign out, turn notifications off, or delete your account.

• A profile photo you replaced, or a portfolio picture you removed, stays in your private folder on the server until you delete your account.

• Data may remain in our hosting provider's routine backups for a short time before those backups are replaced.

• If you are a student, the Academy keeps its own list of students separately from the app. Deleting your app account does not remove you from that list. Email us if you want that changed.

8. Children
   The app is not directed at children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child under 13 has given us personal data, email humandesign.dhamma@gmail.com and we will delete it.

9. Your rights
   Depending on where you live, you may have the right to see, correct, delete or get a copy of your personal data, and to object to how we use it. You can:

• See and change your name, picture and tags in the app.

• Delete your account and its server data in the app, at any time.

• Turn off Apple Health, Calendar, Camera and notifications at any time in iPhone Settings.

• Email humandesign.dhamma@gmail.com to ask for a copy of your data or anything else. We will reply within 30 days.
  You can also complain to your local data protection authority.

10. Changes to this policy
    If the app starts collecting something new, we will update this policy and the Privacy page in the app (Settings, Privacy) before or with that update, and change the effective date above. If a change is significant, we will tell you in the app.

11. Contact
    Human Design Academy
    Email: humandesign.dhamma@gmail.com
    Website: humandesign.co.in
    2026 Human Design Academy