Your email, so the door knows you. Your name, your one line life, your won year, and how you like to be spoken to. Your four goals and the map. Your morning check-ins, your evening entries, your chapters, your promises, kept and missed. Your test answers and results. What you keep in your pocket, including drawings. Your XP, your streak, the fortunes you cracked. The letters you sealed, until they open.

What is not stored: the conversations with the coach. Each chapter is sent, answered, and only the close is kept, the title, the insight, the promise. We count that a coach call happened, for the daily and monthly limits, but not what was said.

On a database in the European Union, Frankfurt, run by Supabase. The app itself runs on Vercel, also in Frankfurt. When the coach answers, the text of that exchange travels to Anthropic, who run the model, under their API terms, which do not use it for training.

Nobody but the coach, which is a program, and you. Each person has their own shelf; the door only opens with a link sent to your own email; there are no passwords to leak. The person who built this can see how many calls the coach makes, not what anyone wrote.

In the Me tab, under Settings: Copy my data puts everything above in your clipboard as one file, yours to keep. Delete everything removes every row of yours from every table, at once, and signs you out. There is no undo and nobody to ask; it is simply gone. The email address itself stays with the login service until you ask us to remove the account too.