Hu.Be privacy policy
What Hu.Be collects, why, and the protections around it. Personal reflection stays private; team insight is aggregated.
- Effective date
- the 31st of Aug, 2025
- Document version
- 1.4
- Controller
- Wise Humanity Limited
Data we collect and purpose
| Category | Examples | Purpose |
|---|---|---|
| Account Data | Name, e‑mail, password hash | Create & secure your account |
| Usage Data | Login timestamps, feature clicks | Analyse engagement, improve Hu.Be |
| Survey & Tool Data | Pulse scores, team‑dynamic answers, behaviours chosen | Provide personalised EQ recommendations |
| Chat Content | Messages you send to Hu.Be and the AI’s replies | Generate responses via our AI provider (see Sub-Processors below). Your conversations are never shared with employers or used for advertising. |
| Cookies / Device Info | Auth tokens, Google Analytics IDs | Session management, product analytics. You can turn analytics off at any time in your settings. When off, we stop sending new usage data to analytics providers. |
| Journal Entries & Voice Recordings | User-authored reflections, including audio | Record your personal reflections and support your coaching journey. Voice recordings are transcribed to text for your review. Content is processed by our AI provider to generate personalised insights (see Sub-Processors below). Never shared with anyone. |
| Wellness Tracking | Symptom ratings, breathing sessions | Track patterns in your wellbeing over time and surface personalised insights. This data is only visible to you. |
| Progress Data | Streaks, milestones, ritual completions | Show your progress, maintain motivation, and personalise your Hu.Be experience. |
1.1 Not-therapy disclaimer
- Hu.Be is not a medical or mental health service.
- It does not replace professional therapy, diagnosis, or treatment.
- In crises, users should contact appropriate emergency or crisis services.
1.2 Wellness tracking transparency note
You choose what to share with Hu.Be. We treat any health or wellbeing information you provide as sensitive and apply extra protections: it is encrypted at rest, never shared with employers or third parties beyond our AI provider (for generating responses), and permanently deleted when you delete your account.
2.2 Children’s privacy
Hu.Be is not directed to anyone under 18 years of age. We do not knowingly collect personal information from minors. If we learn that a minor has created an account, we will delete the account and associated data. Parents or guardians who believe their child has provided us information may contact info@wisehumanity.com.
Lawful bases (UK GDPR)
- Contract (Art 6 (1)(b)) – to deliver the Service.
- Legitimate Interests (Art 6 (1)(f)) – security, analytics, product improvement.
- Consent – for optional marketing e‑mails (can be withdrawn anytime).
Retention
Upon account deletion, all personal data is permanently removed immediately. Temporary export files are deleted within 24 hours.
Sharing and sub‑processors
| Provider | Purpose | Location | Safeguard |
|---|---|---|---|
| Supabase | Database & authentication | EU (Ireland) | GDPR compliant |
| Lovable | Cloud hosting & deployment | EU | GDPR compliant |
| Google Analytics (GA4) | Product analytics | EU & US | IP-anonymisation + SCCs |
| Resend | Transactional email | US | SCCs |
| Anthropic, PBC | Language-model processing | US | SCCs |
| OpenAI, L.L.C. | Voice-to-text transcription | US | EU Standard Contractual Clauses (under OpenAI’s Data Processing Addendum) |
We do not sell personal data.
4.1 Where we store your data
- Supabase (Ireland) hosts all your information securely in the EU under GDPR standards.
- Be is built and served using Lovable’s proprietary cloud environment.
- All data is encrypted in transit and at rest. Only authorized team members have access under strict role-based controls.
International transfers
When data is transferred outside the UK/EEA we rely on Standard Contractual Clauses and supplementary measures (encryption, access controls).
Security
TLS 1.2+, AES‑256 at rest, role‑based access controls, staff training, daily backups, and annual penetration testing.
Your rights
You may access, correct, delete, or port your data; object to or restrict processing; and lodge a complaint with the UK ICO. Contact info@wisehumanity.com. We respond within 30 days.
You can turn analytics off at any time in your settings. When off, we stop sending new usage data to analytics providers.
You may request data deletion or export by email in-app via Settings. Download/export is machine-readable JSON or CSV.
Changes
We may revise this Privacy Policy from time to time. We will email all registered account‑holders and display an in‑app banner at least 30 days before changes take effect. If you continue to use the Service after the effective date, you accept the revised Privacy Policy.
Contact
Data‑protection queries: info@wisehumanity.com
Postal: address above.
Changelog
Version 1.4 (08 July 2026)
Added OpenAI
Version 1.3 (15 April 2026)
Added journal entries, voice recordings, wellness tracking (symptom ratings, breathing sessions), and progress data (streaks, milestones, ritual completions) to the Data We Collect table. Added transparency note that health and wellbeing information is treated as sensitive, encrypted at rest, and never shared with employers. Updated data export and deletion descriptions to reflect self-service features now available in Settings. Updated retention section to reflect immediate deletion on account removal. Added Resend (transactional email) to sub-processors. Removed OpenAI, Usersnap from sub-processors. Removed OpenRouter.
Version 1.2 (27 November 2025)
Added provisions for Public Features (unauthenticated access); added Anthropic as AI provider; updated sub-processors table.
Version 1.1 (17 October 2025)
Hu.Be rebranding.
Version 1.0 (31 August 2025)
Initial publication.