The Pathfinder

Pathfinder Privacy Policy

Effective date: 2026-10-03. Contact: support@thepathfinderapp.com.

Pathfinder is a private self-mastery and recovery companion. This policy says what we collect, why, and what we will never do — in the same plain language the app uses.

The short version

• Your reflections belong to you. No ads, no data sales, no tracking.
• Everything you record is protected so only your account can read it.
• The AI guide asks your permission first, then sees only your message and a short, listed summary — never your journal.
• You can export everything, and deleting your account permanently erases all of your data.

What we collect and why

Account information. Your email address and a password (stored only as a secure hash by our authentication provider) — to create and protect your account.

Things you choose to record. Check-ins (mood, energy, urge, stress, optional notes), setbacks and lessons, guided-intervention sessions, habits and completions, goals, weekly reviews, identity and commitment statements, and onboarding answers. This is the product: your private record. It is stored in your account in our database (hosted on Supabase) and protected by row-level security so no other user can ever read it.

On your device only. Notification preferences, quiet hours, theme choice, and cached content (for example the weekly reflection) stay on your device and are never uploaded.

If you subscribe to Pathfinder+. Apple or Google handles the payment; we never see your card or billing details. Our subscription provider, RevenueCat, receives your account's random ID and your purchase record (which subscription, when it started, whether it renews) so the app knows you have access. It never receives anything you record in the app.

What we do NOT collect. No advertising identifiers, no location, no contacts, no browsing history, no analytics that identify you. The app contains no third-party advertising or tracking SDKs.

The AI guide

The guide writes its replies with an AI provider (currently OpenAI). The app asks your permission before anything is ever sent, and you can withdraw it at any time under Pathfinder AI & your data.

When you send a message, our server passes the provider your message, the last few turns of that conversation, and a strictly limited summary: your chosen goals, commitment statement, trigger categories, general risk windows, active habits, streak length, and recent 1–10 averages. The weekly reflection sends only that week's numbers. The exact summary is always visible in the app, and a switch there stops it from being shared. Your journal and free-text notes are never included by design. Conversations are not stored on our servers between sessions — we keep only a count of requests (time and type, no content) to enforce fair-use limits — and your data is not used to train AI models.

Crisis resources shown in the app are triggered by fixed rules running on your device — never decided by the AI.

Your controls

• Export — Profile → Export my data produces everything you have recorded, as JSON.
• Delete — Profile → Delete my account permanently erases your account and every record, immediately and irreversibly.
• AI sharing — permission and the context switch, both in Pathfinder AI & your data.
• Subscription — manage or cancel Pathfinder+ in your App Store or Google Play account settings.
• Notifications — fully optional, and worded so nothing on your lock screen ever references what the app is for.

The waitlist on our website

If you join the waitlist on our website, we keep your email address so we can tell you when the app is ready to download. We use it only for launch news, never share or sell it, and keep it apart from any account you later create in the app. Our email provider, Resend, holds the list. Every launch email has an unsubscribe link, or write to support@thepathfinderapp.com and we'll take you off the list. We keep your address until you unsubscribe or ask us to remove it.

Service providers

We use a small number of providers, each only for its job: Supabase (database, authentication and our server functions), OpenAI (writing guide replies, only with your permission), RevenueCat (confirming subscription access), Resend (email to the website's waitlist), and Apple or Google (app distribution and payments). None of them may use your data for advertising.

Security and retention

Data is encrypted in transit (TLS) and protected at rest by our hosting provider; access is enforced per-account by row-level security. We keep your data only while your account exists.

Age

Pathfinder is for adults (18+). We do not knowingly collect data from anyone under 18.

Changes

If this policy changes materially, the app will tell you and ask you to review it. The current version always lives at this page.