Privacy Policy

1. Introduction

Good Christie ("we", "our", "us") operates the website at www.goodchristie.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. If you are a resident of California, Virginia, Colorado, Connecticut, Utah, Texas, or another US state with a comprehensive privacy law, please also review the state-specific sections below.

2. Information We Collect

We collect the following categories of personal data:

• Account information: email address, first name, and last name when you create an account.
• Birth data: date of birth, time of birth, and birth location, if you choose to provide them for personalised guidance.
• Phone number (optional): if you choose to provide one for SMS communications or account recovery.
• Chat messages: the content of your conversations with our digital guides, including any details you choose to share about your relationships, health, finances, or feelings.
• Payment information: payment details are processed securely by Stripe. We do not store your full card number. We retain your Stripe customer ID and a record of purchases.
• Usage data: login frequency, message counts, streak information, and feature usage to improve the service.
• Device and network data: IP address, browser type, device fingerprint information used to detect duplicate accounts and prevent fraud.

Sensitive personal information.Some categories of data we collect may be considered "sensitive personal information" under California or other state laws, including the content of your chat messages (which may discuss health, relationships, sex, finances, or mental state) and precise geolocation if derived from IP. We use sensitive personal information only to provide the service you have requested and to comply with our safety and legal obligations. We do not use sensitive personal information to infer characteristics about you for advertising. You can request that we limit our use of sensitive personal information at any time (see Section 13).

3. How We Use Your Information

• To provide and personalise your guidance and chat experience using our digital guides (AI-powered systems).
• To process payments and manage your credit balance.
• To send transactional emails (verification, password reset) and optional engagement emails. You can unsubscribe from non-essential emails at any time.
• To send transactional SMS (verification, security alerts) and, with your express written consent, optional marketing SMS. See Section 7 for SMS-specific details.
• To monitor for crisis situations. If our system detects messages indicating severe distress, your account may be temporarily locked for your safety, and you will be shown crisis support resources.
• To detect and prevent fraud, including duplicate accounts and payment abuse.
• For analytics and advertising measurement, as described in Section 6.
• To improve our service and fix issues.

4. AI and Automated Processing

Our digital guides are powered by artificial intelligence (AI). When you send a message, your conversation is processed by third-party AI services to generate responses. This means your messages are transmitted to our AI providers as part of delivering the service.

Our AI providers are contractually configured not to use your conversations to train their underlying models. AI providers may retain your messages for a short period (typically up to 30 days) for abuse and safety review, after which they are deleted from the provider's systems. We do not use your conversations to train AI models ourselves.

Our crisis detection system also uses automated analysis to identify messages that may indicate severe distress. This processing is carried out for your safety and wellbeing. See Section 11 for your right to appeal automated decisions.

5. Service Providers (Sub-processors)

We share personal information with the following categories of service providers in order to operate the service. These providers are bound by contract to use the data only for the purposes we specify and to protect it appropriately.

We may add or change service providers from time to time. A current list is available on request by contacting us.

6. Cookies, Analytics, and Advertising

We use cookies, pixels, and similar technologies to operate the service, analyse site traffic, measure the effectiveness of our marketing, and personalise advertising. These include essential cookies (required for authentication and core functionality) and analytics or advertising cookies (which you can opt out of).

"Sale" or "sharing" for advertising purposes.When you interact with our site, we may share certain information (such as your hashed email, IP address, and browsing activity on our site) with advertising partners, including Meta and TikTok, to measure ad performance and personalise the ads you see. Under California, Virginia, Colorado, Connecticut and similar state laws, this activity may qualify as "sharing" or "sale" of personal information. You can opt out at any time using the "Do Not Sell or Share My Personal Information" link in our website footer, or by enabling the Global Privacy Control (GPC) signal in your browser.

7. Email and SMS Communications

Email. Transactional emails (account verification, password reset, billing receipts) are essential and cannot be opted out. Engagement and promotional emails can be unsubscribed from at any time using the link in each email or through your email preferences page.

8. Crisis Detection and Account Protection

Our service includes an automated safety system that analyses messages for signs of severe distress or crisis. If critical distress is detected, your account may be temporarily locked and you will be shown mental health support resources including crisis helplines. This is done solely for your safety and wellbeing. See Section 11 for your right to appeal an automated decision.

9. Data Retention

• Account information and chat history: retained for as long as your account is active. Deleted within 30 days after you delete your account.
• Payment and tax records: retained for the period required by tax and accounting law (typically 7 years in most jurisdictions), even after account deletion.
• Fraud and abuse logs (IP, device fingerprints, blocked-signup records): retained for up to 2 years to detect repeat abuse.
• Aggregated, anonymised data: may be retained indefinitely for analytics purposes.

10. International Transfers

We are based outside the United States. Some of our service providers process your data in the United States, the European Union, or other regions. By using the service, you understand and agree that your information may be transferred to and processed in countries other than your own. For users in the UK and EU, we rely on Standard Contractual Clauses or equivalent mechanisms for international transfers where required.

11. Automated Decisions and Right to Appeal

Our service uses automated systems to detect distress, abuse, and fraud, and may automatically suspend or restrict your account as a result. If you believe an automated decision was made in error, you have the right to request human review. Email us at the address below with the subject line "Account Decision Appeal" and we will review your case within 30 days.

12. Your General Rights

Subject to applicable law, you have the right to:

• Know / Access, what personal data we hold about you, and how we use it.
• Correct, inaccurate personal data.
• Delete, your account and associated data.
• Port / Export, a copy of your data in a portable format.
• Opt out, of marketing emails, marketing SMS, and the "sale" or "sharing" of your data for cross-context behavioural advertising.
• Limit use of sensitive PI, restrict our use of sensitive personal information to providing the service.
• Appeal automated decisions, see Section 11.

To exercise any of these rights, contact us using one of the methods in Section 16. We will verify your identity (typically by confirming you control the email address on the account) and respond within 45 days. We do not discriminate against users who exercise their rights.

You may also designate an authorised agent to make a request on your behalf. We will require evidence of the agent's authority before fulfilling the request.

13. California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have the rights described in Section 12 above, including specifically:

• Right to know the categories and specific pieces of personal information we have collected, the sources, the business purposes, and the third parties with whom we have shared it.
• Right to delete personal information we have collected from you (subject to legal exceptions, e.g. tax records).
• Right to correct inaccurate personal information.
• Right to opt out of sale or sharingof personal information for cross-context behavioural advertising. Use the "Do Not Sell or Share My Personal Information" link in our footer, or send a Global Privacy Control signal from your browser.
• Right to limit use of sensitive personal information to providing the service you requested and other limited purposes permitted by law.
• Right to non-discrimination for exercising any of these rights.

Categories of personal information collected, sold, or shared in the past 12 months:Identifiers (email, name, IP address); Customer records (account information, payment records); Commercial information (purchase history); Internet activity (cookies, usage data); Geolocation data (approximate, from IP); Audio/visual data (none); Biometric data (none); Professional/employment data (none); Education data (none); Inferences (engagement scores, preferred guide); Sensitive personal information (chat content). We may "share" identifiers and internet activity with advertising partners as described in Section 6. We do not knowingly sell or share personal information of consumers under 16.

14. Other US State Privacy Rights

If you are a resident of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Jersey, Tennessee, Indiana, New Hampshire, or another state with a comprehensive privacy law, you have rights similar to those in Section 13, subject to the specifics of your state law. These typically include the rights to access, correct, delete, port, and opt out of targeted advertising. Some states also include the right to appeal a denial of a privacy request, if we deny your request, we will tell you how to appeal.

Some states have additional protections for sensitive data (including data revealing health, sex life, or precise geolocation), which we apply across all US users by default.

15. Children

The service is intended for adults aged 18 and over. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will promptly delete it. Some states extend additional protections to consumers under 16 or 18; we apply these protections where required.

16. Data Breach Notifications

If we experience a security incident affecting your personal information, we will notify you and the appropriate regulators within the timeframes required by applicable law (typically 30 to 60 days from discovery), and we will tell you what information was affected and what we are doing about it.

17. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on the site. The "Last updated" date at the top of this page reflects the most recent change.

18. Contact Us

If you have any questions about this Privacy Policy, or wish to exercise any of your data rights, you can reach us using either of the following methods:

• Email: hello@goodchristie.com
• Online request form: goodchristie.com/privacy/request

We aim to respond to all rights requests within 45 days. If we need additional time (up to 90 days total) we will tell you why.