Legal
Section 01
Psynex is a platform for self-exploration and relationship understanding. We are not a medical product, we do not diagnose, and we do not provide therapy. During open public testing, 14 study topics are available, all free for one account. Domain: psynex.app.
Section 02
During registration and onboarding we collect: display name, gender (for AI response personalization), age, interface language, and optionally location. While using the platform, you generate behavioral data through the Explorer module (scenario responses, Deep mode dialogues). This data forms your MindID — a dynamic model of your behavioral patterns.
When you visit psynex.app, we collect technical data: the pages you visit, the page you came from, your browser and device type, your approximate location based on your IP address, and identifiers stored in cookies. Analytics and marketing cookies are set only after you allow them in the cookie banner. If you join the waitlist, we also collect your email address.
Section 03
We use your data to run the platform: to build and update your MindID, generate micro-insights after each study, and compare MindIDs in the Match module at your request. On our website, and only with your consent, we use analytics to understand which pages people read and where the site breaks, and marketing tools to measure which ads bring visitors to the site. We do not sell your data. We do not use your MindID, your study responses, or your conversations for advertising.
Section 04
Psynex uses Anthropic Claude models through Amazon Bedrock, a service of Amazon Web Services (AWS), to process dialogues and generate interpretations. Requests are processed in the United States. To answer a request, the model receives the parts of your profile, MindID, and dialogue that the request needs. Under AWS terms, Amazon Bedrock does not use your data to train models and does not share it with Anthropic. If you use voice features, your recording is transcribed by OpenAI (Whisper), and text read aloud is converted to speech by ElevenLabs. You give explicit consent to AI processing during onboarding (step 6). During MVP2, data is stored in a database with AES-256 encryption at rest. In Phase 3, we plan to transition to client-side encryption (key = user's Psynex Wallet) and blockchain as part of the encryption system: only hashes will be stored on-chain, never raw data.
Section 05
Your account data is stored in a Supabase (PostgreSQL) database with AES-256 encryption at rest. Connections are protected by HTTPS (TLS).
Our website uses the services listed below. Analytics and marketing services load only after you allow them in the cookie banner. You can change your choice at any time in Cookie settings in the site footer.
Necessary (always on): Psynex and Supabase Auth — language, sign-in, and form protection.
Analytics (only with your consent): Google Analytics 4 through Google Tag Manager, including our server container at gtm.psynex.app; Mixpanel (EU); PostHog (EU); Microsoft Clarity (Microsoft Bing): session recordings and heatmaps, with input fields masked; Ahrefs Web Analytics; Vercel Web Analytics and Speed Insights; Sentry (error monitoring).
Marketing (only with your consent): Google Ads and Meta Pixel — to measure which ads bring visitors to the site.
Errors on our servers are sent to Sentry regardless of the banner; sending personal data such as IP addresses is not enabled in its settings.
Email: we send waitlist emails from our own mailbox; sign-in emails are sent by Supabase Auth.
Google Analytics keeps event data for 14 months. Microsoft Clarity keeps session recordings for 30 days and heatmaps for up to 9 months. Other providers keep data under their own terms. Some of these providers process data in the United States. To learn how Microsoft handles Clarity data, see the Microsoft Privacy Statement: https://www.microsoft.com/privacy/privacystatement
Section 06
Row Level Security (RLS) is enabled on every database table: you can only see your own data. Even if the API is compromised, cross-user access is impossible. Critical operations (writing study results, MindID fields, ATOMs) are performed only by the server via service role — the client never writes directly. Match reports are accessible only through a special RPC function with access level control.
Section 07
When you do a Match with another person, your partner never sees your MindID directly. The Match report describes the space BETWEEN you using relational language (not "you are X, they are Y"). By default, the report shows only a summary. Detailed information is revealed only with explicit consent from both parties (Layered Reveal).
Section 08
Chat messages (Deep and Insight modes) are ephemeral. After a session ends, the transcript is archived and messages are deleted from the database. Archived transcripts are automatically purged after 90 days. Message limits: maximum 5,000 characters per message, 100 messages per session.
Section 09
You have full control over your data. Account deletion: cascade delete of ALL 13 database tables. After deletion, zero recoverable data remains at the application layer. Note: Supabase automatic backups (Point-in-Time Recovery) may retain data for up to 30 days after deletion at the infrastructure level. You can request account deletion via /settings/delete.
You can withdraw or change your consent to analytics and marketing cookies at any time in Cookie settings in the site footer. Saying no does not limit any features of the site.
Section 10
Access to Psynex is blocked for the following territories: Russia, Belarus, Iran, North Korea. Blocking is enforced at the infrastructure level (Vercel Edge). Russian language is not supported — this is a core company policy.
Section 11
Authentication: Supabase Auth (bcrypt, JWT, magic link). Transport: HTTPS everywhere, HSTS. Injection protection: Zod validation of all server-side inputs. Rate limiting: API request throttling. CSP: strict content security policy. Classifier security: every user text input is checked for unsafe content. Planned (Phase 3): client-side encryption with key in Psynex Wallet, blockchain as part of the encryption system (on-chain hashes only, never raw data), local encrypted MindID backup on device.
Section 12
Psynex is not intended for persons under 18 years of age. We do not knowingly collect data from children. If you believe a minor has registered on the platform, contact us for account deletion.
Section 13
We may update this privacy policy. We will notify you of significant changes through the platform. By continuing to use Psynex after changes, you accept the updated policy.
Section 14
For all inquiries: hello@psynex.app
