Account Information
Email, display name, sign-in method. No passwords stored — sign-in is OAuth or one-time codes.
Preferences
Topics, followed creators, report frequency, notification settings.
Activity
Episodes viewed, reports accessed, saved items, notebook entries.
Subscription
Plan and billing status. Card numbers are stored by Stripe, never by us.
US-Hosted Database
Supabase Postgres on AWS in the United States (us-east region).
Encryption
TLS 1.3 in transit, AES-256 at rest.
Backups
Encrypted with separate keys, automatically aged out.
Access Controls
Row-level security, scoped service keys, audit logs.
Export Your Data
Download everything we hold about you, in a readable HTML file.
Delete Your Account
Permanently remove your account and data. Completed within 30 days.
Update Your Information
Change your email, name, and preferences directly.
Unsubscribe from Email
Opt out of digests and reports with one click; transactional email stays on while your account is active.
Data Protection Officer
Full Legal Policy