Privacy Policy

Connections between saved check-ins

If you enable “Connect my saved check-ins” in your Personal Map, OpenAI can use summaries from up to six recent saved moments and follow-ups to suggest a shared pattern, helpful condition or possible underlying need after at least two distinct experiences. This feature does not read raw past-visit history. Saved AI summaries can be mistaken; they are not treated as independent confirmation of a pattern or a hidden truth.

Connections update when you return to your dashboard or Personal Map after saving new experiences. Editing or deleting a source clears the previous connections. You can inspect their sources, correct the saved moments, or turn off and delete connections in your Personal Map. They are included in your account export and removed with your account. Requests already sent to OpenAI cannot be recalled. If no clear connection is supported, or AI is unavailable, your individual saved observations remain available.

Optional browser drafts

If you choose “Keep a draft in this browser,” your current check-in writing, reflection, corrections and choices are stored on this browser for up to 24 hours. Later changes are kept while the check-in tab remains open. The draft is not sent to our servers or synced to another browser or device by this feature. A separate AI request or account-save action still follows the processing described below.

Anyone using this browser profile can restore the draft. Saving locally is not a private account lock. You can delete it in the check-in; deleting the browser draft leaves the current tab’s writing in memory until you leave. Expired drafts cannot be restored and are removed when the site is next open. Clearing this site’s browser data also removes the draft. Signing out or deleting an account does not delete a separate browser draft.

Scope

This policy applies to the Toast & Fig Jam website, guest Guided Moment, passwordless accounts, saved Personal Maps, paid membership, and support tools. Research, wearable, and practitioner features are not currently active. We will update this policy and provide any required notice or consent before new practices begin.

Information processed when you visit

Our hosting, network, and security providers may process standard request information needed to deliver and protect the site. This can include an internet protocol address, browser and device information, requested page, referring page, and date and time. We do not use this information to infer a health condition or nervous-system state.

Account check-in history

Where account history is available, we explain its scope before you enable it. After that, submitted check-in writing, corrections and suggested reflections are kept automatically, including visits you leave unfinished. Saving a takeaway is separate. Unsent typing, safety answers and module conversations are not added to this history.

You can independently turn off new saving or the use of past writing, exclude or correct a visit, and choose not to save the current visit. Relevant past user reports may be sent to OpenAI when you request AI support under the expanded notice. You can inspect the context used. Suggestions are not treated as confirmed facts or learning about you.

History remains until you delete it or close your account. Turning off a setting does not delete existing visits. Deleting, excluding or correcting a source clears stored check-in reflections that relied on it. Requests already sent to a provider cannot be recalled, and independently saved Personal Maps must be managed separately. The account export includes retained visits and settings. Opening the home does not display old stories.

Guest Guided Moment information

Most Guided Moment selections remain in your browser tab. When you request a reflection, the service receives the moment writing and the choices needed to produce that response. Raw moment writing is not added to your Personal Map or stored in the product database. If you explicitly choose the AI option for that reflection, OpenAI may process the text. You can instead choose the reviewed non-AI reflection. When AI is disabled, denied, or unavailable, the service also uses that reviewed deterministic response.

Requesting an updated reflection and support plan sends the original check-in and the added context you enter to the same service and, with your AI permission, to OpenAI. Added context is not stored in the product database or AI usage ledger. It stays in your tab and is included in an optional browser draft if you chose to keep one. Separately saving a result keeps only the reviewed reflection and plan, which may include details from that context.

If you choose to keep a completed map before creating an account, we may hold only the final reflection you reviewed, selected need and capacity, reviewed support, and next step with access expiring after no more than 24 hours. Expiry prevents retrieval; physical deletion of unclaimed copies follows a separate purge schedule that is still being finalized. The raw moment writing is not part of that handoff. A single-use claim is stored in a protected browser cookie so the same browser can attach the map after email confirmation.

Account and saved Personal Map information

If you create an account, our authentication provider processes your email address and account-access records. We record that you confirmed the current account requirements, including being at least 18 and living in the United States, together with the versions of the Terms and Privacy Policy you accepted. We do not collect a birthdate, identity document, or precise location for this confirmation.

When you explicitly save, we store the reflection you confirmed or corrected, selected pathway, need and capacity, reviewed support, next step, and technical version records. If you save a moment, its displayed conditions, pattern and desired direction also become editable roadmap notes. Selecting “Update my Personal Map” on a follow-up automatically saves the generated summary and learning, including supported conditions and desired direction, alongside your chosen outcome and next direction. These inferences are not recorded as user-confirmed facts. Raw outcome writing remains transient. You can correct, export, or delete these records in the account experience.

If ongoing support is available to your account, we keep only the focus details you confirm: your situation, chosen direction, practical constraints, optional check-ins, background or learning notes, connected saved records, and plans you accept. These can include sensitive relationship or health information. Background is optional; you do not need to describe traumatic experiences in detail. You can correct or remove these details, disconnect records, delete a focus, or include them in your account export.

Requesting AI guidance separately authorizes sending the current focus details, up to four connected saved records, and up to twelve confirmed notes to OpenAI for that response. Other focuses and raw reflection history are excluded. Unaccepted drafts and possible connections are not saved to your account. Stopping a request cannot recall information already sent for processing. Saving or editing a focus by itself does not call AI.

In a guided module, Continue with AI sends only that plan’s saved reflection and goal, module guidance and the replies in the open module to OpenAI. Replies stay in the open module and are not saved to your account; closing or refreshing it clears them. Beginning a plan keeps the accepted result. Continuing from the practical module’s closing page keeps the displayed next step, which you can adjust first. Continue without writing uses prepared guidance without sending a reply.

To recommend support options, your browser also uses your current writing or correction, or the current focus details shown to you. This matching does not make another AI request or send your writing to resource directories. Viewing recommendations does not save them; the support fields in a map are retained only when you choose to save the reviewed result. External resource sites have their own privacy practices.

Information you provide by phone or email

If you contact us, we may receive your email address or phone number, message or call time, message content, and any information you choose to provide. Please do not leave sensitive state, health, relationship, safety, or crisis information in an email or voicemail. Email and phone calls are not emergency or clinical support channels.

How information is used

• Deliver, maintain, secure, and troubleshoot the website.
• Send requested passwordless account-access emails.
• Save, display, export, correct, or delete records you direct us to keep.
• Confirm current account eligibility and policy acceptance.
• Respond to a request you make by phone or email.
• Prevent misuse, fraud, or security incidents.
• Comply with applicable legal obligations.

How information is disclosed

Service providers may process limited information on our behalf to host, transmit, secure, authenticate, email, or maintain the service. These currently include Vercel for hosting, Supabase for authentication and database services, Cloudflare for abuse prevention, and Resend for account-access email. Google Workspace processes business email when you contact us, including your email address and message content. An approved AI provider may process the writing described on screen when a controlled live AI task is available. Stripe processes your payment details, billing contact information, subscription and transaction records when you purchase or manage membership. We send Stripe your account email and an internal account identifier; we do not send your check-in writing, saved reflections, or health information. We store Stripe customer and subscription identifiers, membership status, and paid-access dates, not your full card details. We may disclose information when required by law, to protect rights or safety, or in connection with a business transaction subject to applicable notice and legal requirements.

We do not sell personal or sensitive data. We do not use check-in answers for behavioral advertising. We do not use session replay on check-in, support, account, or payment surfaces.

Cookies and similar technology

The service does not use advertising cookies. We and our infrastructure providers use strictly necessary cookies or similar signals for account sessions, a short-lived map handoff, a short-lived pseudonymous AI allowance, delivery, security, and abuse prevention. Any optional analytics or marketing technology must receive privacy review and any legally required choice before activation.

Retention

Unless you opt into a browser draft, unsaved selections are held in the current page, not intentionally written to browser storage. A browser or device may retain its own history or restored tabs. Copies you choose to download or copy remain on your device until you remove them. A pending reviewed map becomes inaccessible after no more than 24 hours; this is not a promise that every expired copy or backup is physically deleted within 24 hours. The pending copy is deleted from the active table when successfully claimed, and the saved map remains in your account. Account and user-saved records remain until deletion, subject to a limited security, dispute, backup, or legal retention period. Billing records may be retained as required for tax and accounting. Technical and contact records may be kept for limited operational, security, legal, or provider-defined periods. A final category-specific retention schedule remains under review before public launch.

Your choices and requests

Account holders can export saved Personal Maps, confirmed outcomes, learning progress, basic account details, and recorded account requirements and policy acceptances. You can correct or delete individual maps and learning records. Deleting a map does not delete your account, acceptance records, or copies you downloaded. Whole-account deletion and provider-held records require a separate privacy request; they are not one-click controls in the service. Depending on where you live, you may also have rights to request access, correction, deletion, or information about certain disclosures, and to withdraw consent where processing depends on consent. Email privacy@toastandfigjam.com or call us at (314) 254-2647 and say that you are making a privacy request. We may need to verify your identity before acting.

Children

Accounts and paid services are limited to adults age 18 and older. The service is not designed for children, and we do not knowingly collect personal information from a child. We do not ask guest visitors for a birthdate. If you believe a child provided personal information, contact us so we can review and delete it where appropriate.

Security and service boundary

We use administrative, technical, and organizational safeguards appropriate to the information and current product stage. No method of storage or transmission is completely secure. Toast & Fig Jam is not currently offered as a HIPAA-covered healthcare service.

Changes to this policy

We will update the date above when this policy changes. If a change materially affects how previously collected information is used, we will provide additional notice and seek consent when required.

Contact

Email privacy@toastandfigjam.com or call us at (314) 254-2647 for privacy questions or requests.