What we know about you. What we don’t.

Fatement is a private reflection tool. We built it that way because identity work requires honesty, and honesty requires safety. This policy explains exactly what happens to your data, in plain language.

The short version

• No account required. No email collected. No name, no profile.
• Your interview responses are processed by AI to generate your results, then stored in our database if you choose to save them.
• We use one essential cookie to maintain your session. Optional analytics cookies (Google Analytics and PostHog) only if you consent.
• You can delete everything we hold with one click. What an AI provider already received is covered below.
• We do not sell your data. Analytics are only used with your consent.

Who operates Fatement

Fatement is operated by Kuinka Oy (Business ID: 3451889-2), based in Helsinki, Finland. We are subject to Finnish and EU data protection laws, including the General Data Protection Regulation (GDPR).

Data controller contact: hello@fatement.net

What data we collect

Data you provide during the interview

When you complete an interview, your responses are sent to our servers for AI processing. This includes:

• Your written answers to each interview question
• The questions the AI generated for you
• The resulting archetype analysis and artifacts

This data is stored in our database so you can return to your results. It is also cached in your browser’s localStorage for faster access.

The Life Audit sheet

The Life Audit canvas at /life-auditis different. It makes no network request of its own. What you type there is written to your own browser’s localStorage and stays on your device: there is no copy on any server, and nothing there is sent to us or to any AI service unless you ask for it. Clearing your browser data clears it, and we cannot recover it.

Two things can change that, and each of them needs a deliberate action from you. Neither happens when the page loads, and neither happens while you type.

The first is starting an interview from what you wrote. Press the button at the bottom of that page and the answers on the sheet are sent with your interview at that moment, and not before. From then on they are treated like the interview data described above: stored against your anonymous session token, sent to Anthropic’s Claude API as part of the interview, and deleted whenever you delete the session. Starting an interview any other way sends nothing from the sheet.

The second is asking the sheet for a sharper read of the three panels it builds out of your own sentences. That sends your sheet answers, and nothing else, to TypeSafe, which answers a set of yes-or-no questions about which of your sentences belong in which panel. We keep nothing from that request, no part of your text goes to analytics, and if you never ask for it the request is never made and the panels are built in your browser the way they always were.

Session identity

We assign your browser a random session token, stored as a secure cookie. This token is hashed before being stored in our database. We never store the raw token.

We do not collect your name, email, IP address, or any personally identifiable information. Your interview data is linked only to this anonymous session token.

Payment data

If you purchase premium results, payment is processed entirely by Stripe. We receive a confirmation that payment succeeded, but we never see or store your card number, billing address, or payment details.

Analytics

We use Google Analytics (GA4) and PostHog to understand how the site is used in aggregate: page views, session duration, device type, and which features get used. Both set cookies and, in PostHog’s case, may also use your browser’s localStorage. Neither is set until you consent through the cookie banner, and both are fully optional. You can decline them there, or revoke consent later using the cookie settings link in our footer. You can also opt out of Google Analytics specifically with a browser extension like Google Analytics Opt-out.

See our Cookie Policy for the full list.

How your data is processed by AI

Your interview responses are sent to Anthropic’s Claude API for analysis. This is how we generate your archetype profile and artifacts. Important details:

• Anthropic does not use API inputs to train their models. This is stated in their privacy policy.
• Your data is transmitted over encrypted connections (TLS).
• We do not store Anthropic’s raw API responses beyond the structured results.

TypeSafe

If you ask the Life Audit sheet for a sharper read of its panels, the answers you wrote on that sheet are sent to TypeSafe, whose model answers narrow yes-or-no questions with a probability. It does not write text, it does not see your interview, and it is not called anywhere else on the site. It is reached from that one control and from nothing else.

• TypeSafe is hosted in the United States, so a sharper read leaves the EU.
• TypeSafe does not publish a figure for how long it holds a request, and we do not control it, so we are not going to state one here. We are also not claiming it keeps nothing: zero retention is an enterprise arrangement we do not have.
• Our agreement with TypeSafe does not yet exclude your text from model training, the way the Anthropic and Google agreements do. The control works anyway. This is the part we cannot promise, so we are saying it here rather than leaving it out.
• Your text is transmitted over encrypted connections (TLS).

Voice input

You can answer a question by speaking instead of typing. This is optional. Nothing is recorded unless you press the microphone button yourself, and the recording only leaves your device when you press stop.

• The recording is sent to Google’s Gemini API to be transcribed. We never write the audio to our database or to disk, and we do not keep it once the transcript comes back.
• Google does not use your audio or your transcript to train models or to improve its products. We use the paid Gemini API, where that use is excluded by contract, and the request is handled under Google’s Data Processing Addendum.
• Google does log the request for a limited period, for the sole purposes of detecting abuse of its own service and meeting legal obligations. Google does not publish an exact figure for that period and we do not control it, so we are not going to state one here. This is the one part of the path your voice takes that is not ours to promise.
• The transcript is placed in the answer box for you to read and edit. It becomes part of your interview only when you press Continue.
• Transcription is verbatim. We do not rewrite or tidy your words, because the artifacts we build quote you directly.
• Audio is transmitted over encrypted connections (TLS).

How long we keep your data

Your interview data is retained for as long as your session cookie is valid, 90 days from your last activity. Once the cookie lapses, that data becomes eligible for deletion and is purged in periodic cleanup.

You do not have to wait 90 days. You can delete your data immediately at any time by clicking “Delete my data” on your results page. This permanently removes your session, interview turns, analysis results, and artifacts from our database, and from the providers listed below that act on a deletion request from us.

One part of that is not ours to promise, and we would rather say so than let the word “permanently” cover it. Text that has already been sent to an AI provider has already been received. What Anthropic, Google and TypeSafe keep after that, and for how long, is set by their own terms and not by us. The voice and TypeSafe sections above say what we know about each. The delete button does not reach any of it, and no button we could build would.

Your rights under GDPR

As a data subject under EU law, you have the right to:

• Access your data (your results page shows everything we have)
• Rectify your data (contact us at hello@fatement.net to correct anything inaccurate)
• Delete your data (the “Delete my data” button)
• Export / port your data in a machine-readable format (the “Export Markdown” button)
• Object to processing (contact us at hello@fatement.net)
• Lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi)

Where your data is stored

We work with a small set of named sub-processors, each handling a specific part of the service:

• Vercel: hosting and infrastructure
• Neon: database, where your interview data and artifacts are stored
• Anthropic: AI processing of your interview responses (does not train on your data, see above)
• Stripe: payment processing (PCI DSS compliant; we never see your card details)
• Google: analytics, only with consent; and transcription of voice answers, only when you record one (paid API, does not train on your data, see above)
• PostHog: analytics, only with consent
• TypeSafe: yes-or-no readings of the sentences on your Life Audit sheet, only when you ask for a sharper read of its panels (US-hosted, see above)

These providers may process data outside the EU. Where that happens, the transfer is covered by an appropriate safeguard, such as the EU-US Data Privacy Framework or Standard Contractual Clauses, and adequacy decisions where applicable.

TypeSafe is the newest name on that list, and the agreement carrying those clauses has not been executed with them yet. A sharper read is therefore a transfer made without that safeguard. Nothing goes until you press the control, and we would rather you pressed it knowing that.

Children

Fatement is not intended for anyone under 16. We do not knowingly collect data from children. If you believe a child has used this service, contact us and we will delete the data immediately.

Changes to this policy

We will update this page when our data practices change. The “last updated” date at the top reflects the most recent revision.

Contact

Questions about your data? Email hello@fatement.net.

For complaints about how we handle data, see our complaints process.