Privacy Policy

Last updated: July 22, 2026

Enneagram Atlas is private by design: your profile, saved people, assessments, and analyses are visible only to you. This policy explains exactly what Licensing Unlimited LLC collects, how it's used, and the promises we make — including the specific promises we make to guests who take an assessment by invitation.

What we collect

Account: your email address (used for magic-link sign-in — we never see or store a password).
Your profile: the enneagram type, wing, and instinct you set or that your assessment produces.
People you save: names or labels you choose, and the types you assign them. You are responsible for what you record about others — we recommend first names or nicknames.
Assessments and analyses: your assessment reports, AI analyses you generate, and monthly pulse check scores.
Situations you describe: text you submit for AI analysis is stored with the resulting analysis only when the app saves it to your history; it is always sent to our AI provider to generate the response.
Billing: handled by Stripe. We never see or store your card number — we store only Stripe's customer and subscription identifiers and your plan status.
Usage: counts of AI queries and assessments, used solely to enforce plan limits.

We use no advertising trackers and no analytics cookies. The only browser storage we use is what's required to keep you signed in.

How AI analysis works

When you run an assessment, deep-dive, or group analysis, the relevant content (types, names or labels you've saved, and any situation text you provide) is sent to Anthropic, our AI provider, to generate the response. We use Anthropic's commercial API, under terms where inputs are not used to train their models. Analyses are generated on request and stored only in your account.

Guest assessments — our promise to guests

If you take an assessment through an invite link, no account is required, and we make you a structural promise:

Your raw answers — Likert ratings, forced-choice picks, and interview text — exist only in your browser and, transiently, in the AI prompts that score your assessment. They are never saved to our servers.
Only your finished report (type, wing, scores by type, and similar summary fields) is stored. The server-side code enforces this with a field whitelist — raw answers cannot be stored even by mistake.
The person who invited you sees your full finished report, but never your individual answers.
If you later create a free account and claim your report, it's copied to your account; the inviter keeps their copy.

Shared reports

You can choose to share an assessment report at a public link. Sharing is off by default and per-report: if you share, anyone with the link can view the report content and the first name you chose to display — never your email, answers, or account details. You can stop sharing at any time from the report page, which disables the link immediately. Viewers with an Atlas account can save your name and type to their own people list. If someone finds the Atlas through your shared report and takes the assessment, they can choose to share their result back with you — you’ll receive their first name, type, and report link by email, and they’ll be added to your people list.

Who processes your data

We share data only with the service providers required to run the product:

Supabase — database and authentication (hosted in the United States).
Vercel — application hosting.
Stripe — payment processing.
Anthropic — AI analysis generation.
Resend — transactional email (sign-in links) and occasional product update emails.

We never sell your data, never share it with advertisers, and never use it for any purpose other than operating the Service. From time to time we may email you about significant product updates — you can opt out of these at any time by replying to any such email or contacting us; this never affects sign-in emails, which are required to use the Service.

Your rights

Access and portability: you can view all of your data in the app; contact us for an export.
Deletion: contact us to delete your account. Deletion is immediate and cascades — your profile, people, assessments, analyses, credits, and invites are permanently removed.
Correction: everything we store about you is editable in the app.

If you're in the EU/EEA, UK, or California, these rights are backed by GDPR, UK GDPR, and CCPA respectively; we honor them for everyone regardless of location.

Retention and security

We keep your data for as long as your account exists. All data is encrypted in transit and at rest, and access is enforced at the database level — each row of your data is readable only by your authenticated session. Billing and usage records are writable only by our servers, never from a browser.

International transfers

We're a US company and your data is processed in the United States. If you use the Service from the EU/EEA, UK, or Switzerland, transfers to our processors are protected by their standard data-processing agreements, which incorporate Standard Contractual Clauses or an equivalent recognized safeguard.

Children

The Service is not directed at children under 13, and we don't knowingly collect their data. If you believe a child has created an account, contact us and we'll delete it.

Changes

If we materially change this policy, we'll notify you by email or in the app before the change takes effect.

Contact

Privacy questions or requests: hello@enneagramatlas.app