Privacy policy

PAU is made by Everseed Ventures, based in Calgary, Alberta, Canada (“we”, “us”). We decide how your personal information is used in the PAU app and on this website, which makes us responsible for it.

Our privacy officer is responsible for how we protect personal information and for answering your requests. You can reach them at team@everseedventures.com.

Here is what we collect:

• Account details: your email address (to send your sign-in codes) and the name you give us. If you sign in with Apple or Google, they give us your email address (with Apple you can hide it behind a private relay address) and your name, and we keep a record that your account uses them. We never get your Apple or Google password.
• Your preferences: language, voice, sound, meditation length, and whether you want an evening reminder.
• What you tell PAU: the feelings you pick, the words you write when you check in, and your reflections after a meditation (how you feel now, and any note), with the date and time of each.
• Your meditations: the script written for you, its audio, its title and tone, and technical details of how it was made (which AI models, how long it took, what it cost us, and any error).
• Purchases: whether your PAU Plus subscription is active, its plan, whether it's in its free trial, its renewal or end date, and a purchase ID that links it to your account. Apple handles your payment details, and we never see your card number.
• Technical data: your IP address, device and browser type, app version, and the time and result of each request, which our hosting, database and AI providers log automatically to keep PAU secure and working.

We don't collect your location, contacts, calendar, photos or microphone, and we don't use analytics tools that track how you use the app.

Your check-ins, feelings and reflections can say something about your wellbeing, so we treat them as sensitive information, and in some places the law treats them as health data. We use them only to make and show your meditations and your history in PAU, and to keep the service safe.

Sharing it is always your choice: PAU works with a feeling you pick, and you decide what, if anything, to write. We use it only because you give it to us to make your meditation. You can stop at any time by not checking in, or ask us to erase it (see deleting your data). Please don't include things you'd rather not share, such as medical details or information about other people.

We never sell this information, never use it for advertising, and never share it with advertising partners. If you're in the US, our consumer health data privacy policy explains this in more detail.

• to write, voice and play your meditations, and keep your history of moments,
• to run your account, sign you in, and manage your subscription,
• to answer you when you write to us,
• to keep PAU safe: prevent abuse, enforce our daily limits and our terms, and fix problems,
• to improve PAU, using generation details such as speed and cost, and summaries that don't identify you (we don't try to re-identify them),
• to send you service emails, like your sign-in codes. We'll only send marketing emails if you expressly agree, and every one has an unsubscribe link,
• to follow the law and protect our rights.

To make a meditation, we send the AI models what they need: the feeling you picked or the words you wrote, your name if you gave one, and your choice of language, voice, sound and length. We don't send your email address.

We reach the models through OpenRouter, which passes each request to OpenAI, Google or a cloud service that hosts their models. We send them only what's needed to make your meditation. Their own terms govern how they handle it: depending on the provider, they may keep requests for a limited time, their safety teams may review requests their systems flag, and some may use requests to improve their services. We prefer providers and settings that don't keep or learn from what we send, and we'll update this policy as we tighten them.

No one at PAU reads your check-ins or listens to your meditations as a routine. We look at specific ones only when you ask us to, to investigate abuse or a technical problem, or when the law requires it, and only people who need to can.

The scripts are generated by AI, and the voices are synthetic: they aren't real people. Our health and AI notice explains what that means for you.

AI picks the words, tone and pacing of your meditation, but it doesn't make decisions about you that have legal or similarly significant effects.

We don't use advertising tools today. We plan to advertise PAU on Meta's apps (Facebook and Instagram) and to use Meta's measurement tools on our website, and possibly later in the app. They would tell Meta when someone who saw our ad visits our site, creates an account or subscribes, so we can see which ads work and show them to people likely to be interested. Meta may combine this with what it knows about you, under its own privacy policy.

When we turn them on, we commit that:

• they never receive your check-ins, feelings, reflections, meditations, or anything about your wellbeing,
• they never run on signed-in pages (sign-in, your account, your moments) or in the check-in and player screens,
• they only run after you say yes, wherever you live, and you can change your mind at any time,
• we treat a Global Privacy Control signal from your browser as a no,
• we'll update this policy and our cookie policy before they go live.

We don't sell personal information for money. In some US states, sharing data with an ad platform for this kind of advertising counts as “sharing” or “targeted advertising”, and it only happens if you say yes, as described above.

• Contract: to provide PAU, your account, your meditations and your subscription.
• Consent: for your check-ins, feelings and reflections, which you choose to share to get a meditation, and for advertising measurement. You can withdraw it anytime by not checking in, by asking us to delete them, or by saying no to advertising measurement.
• Legitimate interests: to keep PAU secure, prevent abuse, and improve it, in ways you'd reasonably expect.
• Legal obligation: to keep tax and billing records, and to answer lawful requests.

We share personal information only with service providers that help us run PAU. Our hosting, database and email providers are bound by contracts that require them to protect it and use it only for us. The AI providers handle requests under their own terms, as described under AI and your meditations. They are:

• Supabase: our database, sign-in, sign-in emails and file storage (your account, check-ins, reflections and meditation audio). Location: Canada.
• Vercel: hosting the website and the service that makes your meditations. Location: Canada and the US.
• OpenRouter: connecting us to the AI models below. Location: US.
• OpenAI and Google, or the cloud services that host their models: the AI models that write and voice your meditation (reached through OpenRouter). Location: US.
• Google Workspace: our business email, when you write to us. Location: US.
• Apple and Google sign-in: signing you in when you choose Sign in with Apple or Google: they tell us your email address (or Apple's private relay address) and your name, under their own privacy policies. Location: US.
• Apple (App Store): selling and billing PAU Plus in the app, under its own privacy policy; Apple handles your payment details. Location: US.
• RevenueCat: keeping track of your PAU Plus subscription: we give it your account ID (not your name or email), and Apple tells it about your purchases and renewals. Location: US.

Not in use yet, but planned:

• Google Play and a payment processor, to sell and bill PAU Plus on Android and on the website, under their own privacy policies.
• Meta, to measure our ads, as described under Advertising.

We may also share information if the law requires it, to protect someone's safety, to defend our legal rights, or as part of a merger, sale or reorganisation of our business, in which case the new owner must respect this policy.

Your account, check-ins, reflections and meditations are stored in Canada. Some providers, including the AI models, process data in the United States, where it is subject to US law, and courts or authorities there may be able to access it.

When we transfer personal information out of your country, we check that it will be properly protected and rely on contracts with our providers, including standard contractual clauses for transfers from the EU and UK.

Our privacy officer can answer questions about how our service providers outside Canada collect, use and store your information: write to team@everseedventures.com.

• Your account, preferences, check-ins, reflections and meditations, including their audio: while your account is open, or until you ask us to delete them.
• After you delete your account: erased right away (within 30 days if you ask us by email), and from our backups within 90 days.
• Hosting, database and AI provider logs: for the limited time each provider keeps them, usually no more than a few weeks.
• Purchase and billing records: as long as tax and accounting law requires, usually up to 7 years.

Your data is encrypted in transit and at rest, each account can only reach its own data, and access inside our team is limited to people who need it: authorised team members can see account details and check-ins through an internal admin tool, only to run and support PAU. No system is perfectly secure, though. If a breach puts you at real risk of significant harm, we'll tell you and the authorities as the law requires.

Wherever you live, you can ask us to:

• tell you what personal information we have about you, and give you a copy (in a portable format where the law provides),
• correct it, or delete it,
• stop using it in a certain way, or withdraw your consent,
• say no to advertising measurement, “sharing” and targeted advertising, or withdraw a yes (see your choices).

Write to team@everseedventures.com from the email address on your account. We may need to confirm it's you, and we'll answer within 30 days. If we need more time, where the law allows it, we'll tell you why within those 30 days. You can ask someone to act for you if you give them written permission. We won't treat you differently for using your rights. If we can't do what you ask, we'll explain why.

Canada: you can complain to the Office of the Privacy Commissioner of Canada, the Office of the Information and Privacy Commissioner of Alberta, or, in Quebec, the Commission d'accès à l'information.

EU and UK: you can also object to processing based on legitimate interests, and complain to your local data protection authority.

US states: residents of states with privacy laws (such as California, Colorado, Connecticut, Virginia, Washington and others) have these rights too. If we deny a request, you can appeal by replying to our answer, and if you disagree with the outcome you can contact your state attorney general. In the last 12 months we have not sold or shared personal information, and we never knowingly sell or share the data of anyone under 18.

PAU is for adults. You must be at least 18, or the age of majority where you live, to use it. We don't knowingly collect information from anyone younger. If you think a minor has given us information, write to us and we'll delete it.

When we change this policy, we'll update the date at the top. If a change is significant, we'll tell you in the app or by email before it applies. We'll never start using what you've told us about how you feel in a new way without asking for your consent first.

Everseed Ventures, Privacy Officer, Calgary, Alberta, Canada. Email: team@everseedventures.com.