Privacy Policy
Last updated: April 2026
Who we are
IAM is operated by Bodygraph LLC, a Wyoming limited liability company (the “Company”). You can reach us at [email protected] for anything privacy-related. We are a fully remote operation with no fixed office address; postal correspondence can be sent to our Wyoming registered agent on request.
What we collect
Account data: your email, a hashed password (never plaintext), and your display name. Birth data: date, time, and place of birth, which you provide during onboarding so we can calculate your Human Design chart. Practice data: your journal notes, favorited sparks, streaks, notification settings, focus preferences, and your theme / voice choices. Technical data: your browser’s push-notification subscription (if you opt in), basic server logs, and a session cookie that keeps you logged in.
What we do not collect
We do not use third-party analytics, advertising trackers, or behavioral profiling. We do not sell your data. We do not share your data with advertisers, data brokers, or social platforms. There are no third-party tracking cookies anywhere in the app.
How we use your data
We use your email to sign you in and send transactional messages (welcome, password reset, weekly recap if you opt in). We use your birth data to calculate your chart and to pick sparks that match your design. We use your practice data to render your archive, streaks, and tailored delivery. That is the whole list.
Third-party processors
We send birth data to Simple Chart Calculator (simplechart.io) to produce the Human Design chart. We send spark text to ElevenLabs to generate the audio you hear on the home screen. Transactional emails are delivered through our SMTP provider, Kasserver (All-Inkl). Each of these receives only the minimum data needed to do its job, and none of them receive your journal notes, favorites, or practice history.
Where your data lives
Data is stored on servers located in Germany, operated by Hetzner. Data in transit is encrypted (HTTPS). We do not transfer your data to other regions except via the third-party processors listed above, each of which is bound by its own contractual terms. If you are in the EU/UK, be aware that ElevenLabs and Simple Chart Calculator may process limited data outside the EEA under their own safeguards.
How long we keep it
We keep your account data as long as your account is active. You can delete your account at any time from your profile, which removes your user record, birth data, journal notes, favorites, streaks, notification subscriptions, and practice logs. Transactional email logs may persist at our SMTP provider for up to 30 days before rotation.
Push notifications
If you enable push notifications, your browser’s push subscription (a public endpoint URL and two public keys) is stored server-side so we can send your daily spark. No push content is stored after delivery. You can turn notifications off at any time from your profile, and we delete the subscription when you do.
Your rights
Regardless of where you live, you can: (1) access a copy of your data, (2) correct it, (3) delete your account and all associated data, (4) export your journal notes and favorites, (5) opt out of any non-essential email. Email [email protected] with your request and we will respond within 30 days.
California residents
Under the CCPA/CPRA you have the rights listed above, plus the right not to be discriminated against for exercising them. We do not sell or share personal information for targeted advertising, and we do not use or disclose “sensitive personal information” beyond what is necessary to provide the service you asked for. Submit CCPA requests to [email protected].
EU / UK residents
The lawful bases we rely on are: contract (to run the service you signed up for), consent (for push notifications and any optional emails), and legitimate interest (basic security logging, abuse prevention). You may lodge a complaint with your local supervisory authority. We do not have an EU establishment; requests can still be sent to [email protected].
Children
IAM is not intended for anyone under 16, and we do not knowingly collect data from children. If you believe a child has signed up, write to [email protected] and we will delete the account.
Changes
When we change this policy in a meaningful way, we update the “Last updated” date below and, for existing users, send a heads-up email before the change takes effect.
Contact
Questions or requests: [email protected]. Operator: Bodygraph LLC, a Wyoming limited liability company. Registered agent details available on written request.