Psycheia
LegalLast updated: May 2026

Privacy Policy

Psycheia Ltd is registered in England and Wales (Company Number: 17174615). This policy explains how we collect, use, and protect your personal data when you use Psycheia products and services. We have written it in plain English because we think you deserve to understand it.

1. Who we are

Psycheia Ltd is the data controller for personal data collected through psycheia.co.uk and the Digital Soul Builder. If you have any questions about how we handle your data, contact us at enquiries@psycheia.co.uk.

2. What data we collect and why — by tier

What we collect depends entirely on which tier of Psycheia you use. We collect the minimum necessary for each tier, and no more.

Entry Tier — Digital Soul Snapshot

When you use the free Digital Soul Builder, your answers to the intake questions are processed in-session to generate your Digital Soul Snapshot. We do not create an account, store your answers, or retain any personal data after your session ends. The only thing we retain is your email address if you submit the Request Access form — this is used solely to contact you about the pilot programme or product updates.

Your Digital Soul Snapshot exists only in your browser session and in the document you download or copy. Once you close the page, it is gone from our systems.

Legal basis: Legitimate interests (providing the service you requested) and consent (email submission).

Mid Tier — Full Digital Soul Builder

The full Digital Soul Builder (currently in pilot) requires you to create an account. With your explicit consent, we store your Digital Soul document, your Module 7 governance settings, and the information you provide during the intake process. This allows you to access, refine, and use your Digital Soul over time.

We collect: name, email address, account credentials, and the personal information you choose to share through the seven-module intake process. The intake is designed to capture meaningful personal context — values, history, goals, relationships. You choose what to share.

Legal basis: Contract (delivering the service you have signed up for) and explicit consent (for sensitive personal data).

Top Tier — Done-With-You and Personal Intelligence

For done-with-you and fully managed services, Psycheia may hold a deeper working context about you — your goals, systems, preferences, and AI setup. The specific data held is agreed with you before work begins, documented in a service agreement, and governed by the access and deletion rules in that agreement.

Legal basis: Contract and explicit consent.

3. How we use your data

We use your data only for the purposes described at the point of collection:

  • To generate your Digital Soul Snapshot or Full Digital Soul document
  • To deliver the service tier you have signed up for
  • To contact you about the pilot programme if you have joined it
  • To send product updates if you have subscribed to them
  • To improve the product based on anonymised, aggregated patterns
  • To comply with legal obligations

We do not use your data to train public AI models. We do not sell your data to third parties. We do not use your data for advertising.

4. AI processing

The Digital Soul Builder uses the Anthropic Claude API to process your intake answers and generate your Digital Soul document. Your answers are sent to Anthropic's servers for processing. Anthropic's privacy policy applies to this processing: anthropic.com/privacy.

We use Anthropic's API under terms that prevent your data from being used to train Anthropic's models. Your data is processed, not retained, by Anthropic for inference purposes.

We do not send your data to any other AI provider without your knowledge and consent.

5. Who we share data with

We share personal data only with the services necessary to deliver Psycheia. These are:

  • Anthropic — AI processing for the Digital Soul Builder (API only, not stored by Anthropic)
  • Vercel — hosting and serverless function infrastructure
  • Supabase — database storage for Mid and Top tier accounts (data stored in EU region)
  • Formspree — form submission handling for email capture
  • Stripe — payment processing for paid tiers (Stripe handles all payment data — we never see your card details)

All processors are contractually bound to handle your data in accordance with UK GDPR requirements. We do not share your data with any other third parties.

6. Data retention

Entry tier: No personal data is retained after your session ends, other than your email address if submitted.

Email addresses from the Request Access form are retained until you ask us to remove them, or until 24 months of inactivity.

Mid and Top tier account data is retained for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required by law to retain it for longer.

Pilot programme data (anonymised feedback patterns) may be retained indefinitely as aggregate product intelligence. Identifiable pilot data is deleted within 90 days of the pilot closing, unless you have agreed to ongoing participation.

7. Your rights under UK GDPR

As a UK resident, you have the following rights over your personal data:

  • Right of access — request a copy of the data we hold about you
  • Right to rectification — ask us to correct inaccurate data
  • Right to erasure — ask us to delete your data
  • Right to restriction — ask us to limit how we use your data
  • Right to portability — receive your data in a machine-readable format
  • Right to object — object to processing based on legitimate interests
  • Right to withdraw consent — where processing is based on consent, withdraw it at any time

To exercise any of these rights, email us at enquiries@psycheia.co.uk. We will respond within 30 days. If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies and tracking

Psycheia uses the minimum cookies necessary to operate the service. We use session storage (not persistent cookies) to remember your progress through the Digital Soul Builder within a single session.

We use Vercel Analytics for basic, privacy-preserving site analytics. Vercel Analytics does not use cookies and does not track individuals across sessions.

We do not use advertising cookies, tracking pixels, or third-party analytics that profile individual users.

9. Data security

We take data security seriously. Measures include:

  • All data in transit encrypted via TLS
  • Database access controlled via Row Level Security — users can only access their own data
  • API keys and credentials stored as environment variables, never in code
  • Anthropic API calls made server-side only — your data never passes through your browser to our AI provider
  • Regular review of third-party processor security practices

No system is perfectly secure. If we become aware of a data breach that affects your rights and freedoms, we will notify you and the ICO within 72 hours of becoming aware, as required by law.

10. International transfers

Some of our processors (including Anthropic and Vercel) operate servers outside the UK and EEA. Where personal data is transferred internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses or adequacy decisions recognised under UK law.

11. Children

Psycheia is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from children. If you believe a child has submitted data to us, please contact us immediately and we will delete it.

12. Changes to this policy

We may update this privacy policy as the product evolves. When we make significant changes, we will notify active users by email and update the "Last updated" date at the top of this page. Continued use of Psycheia after changes are published constitutes acceptance of the updated policy.

13. Contact

For any privacy-related questions or to exercise your rights:

Psycheia Ltd
Registered in England and Wales
Company Number: 17174615
enquiries@psycheia.co.uk