Privacy Policy

Last updated October 2026

The short version

Figured helps you build work skills. We collect the minimum we need to run your account and the learning experience, we don't sell your data, and you can delete your account and everything in it at any time from your Profile.

What we collect

• Account details you give us: your name, email and password (your password is encrypted by our auth provider and we never see it).
• Account activity: a user ID, sign-up and sign-in timestamps, and your IP address (handled by our auth provider).
• Your learning data: progress, XP, streaks, badges, and your practice and Nora history.
• Subscription status, if you subscribe: which plan you have, when it renews or ends, and whether it was bought in a test environment. We never see your card or payment details.
• Usage counts: how many AI requests your account makes each day and month, so we can apply fair-use limits. These are numbers only — not what you wrote.
• The text you type into Nora and into practice answers. Please treat this like anything you'd say in a coaching session — see "A note on what you type" below.

How we use it

To create and run your account, save your progress across devices, and generate coaching replies and feedback on your answers. Our lawful basis is performing the service you sign up for — no account, no service.

Who we share it with

We use a small set of trusted providers who process data on our behalf, never for their own purposes:

• Supabase — stores your account and learning data, encrypted, with strict per-user access controls so only you can reach your own data.
• Anthropic — receives the text you type to Nora and in practice in order to generate replies and feedback. Under their API terms this content is not used to train their models and is only retained briefly.
• Sentry — crash and error reporting on the installed app, so we can find and fix problems. It records technical diagnostics only (processed in the EU) and is configured not to capture your identity, IP address, or anything you type.
• Resend — sends account emails, such as password-reset codes, to your email address (processed in the EU). It receives your email address and the message, nothing else.
• Apple — takes the payment if you subscribe, through your Apple ID. We never see your card details.
• RevenueCat — manages your subscription and tells us whether it's active. It receives a random account ID and your purchase details from Apple — not your name or email.

A note on what you type

Nora and practice are free-text, and what you write is sent to our AI provider to generate a response. Please don't share sensitive personal details — about yourself or anyone else — that you wouldn't want processed by a third party.

Your rights & deleting your data

You can permanently delete your account and all associated data at any time from Profile → Delete account. This removes your login and your stored learning data. You can also contact us to access or correct your information.

Contact

Questions or requests: figuredapp@gmail.com.

This policy is an early draft for our test release and will be updated and formally reviewed before public launch.