Privacy Policy

Brazen Inc. d/b/a Conceivable ("Conceivable," "we," "us," or "our") operates the Kai AI fertility coaching platform accessible at conceivable.com and related services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Service.

1. Information We Collect

1.1 Personal Information You Provide

When you create an account or use Kai, you may provide:

• Account Information: Name, email address, password (hashed), phone number
• Payment Information: Billing address, payment method details (processed securely by Stripe; we do not store full card numbers)
• Profile Information: Age, location, fertility goals, partner information

1.2 Health and Fertility Data

Kai collects sensitive health-related information to provide personalized coaching, including:

• Menstrual cycle data (cycle length, period duration, regularity)
• Basal body temperature (BBT) readings and charts
• Ovulation tracking data
• Medical history (prior pregnancies, fertility diagnoses, surgeries)
• Medication and supplement usage
• Lifestyle factors (diet, exercise, sleep, stress levels)
• Emotional and mental health information shared in conversations
• Lab results and biomarker data you voluntarily share

1.3 Usage and Device Information

We automatically collect:

• Device Information: Browser type, operating system, device identifier, screen resolution
• Usage Data: Pages visited, features used, session duration, interaction patterns
• Log Data: IP address, access timestamps, referral URLs, error logs
• Cookies and Tracking Technologies: See Section 9 below

1.4 AI Conversation Data

All conversations with Kai are processed by our AI system. This includes:

• Text messages and queries you send to Kai
• AI-generated responses
• Assessment questionnaire responses
• Feedback and ratings you provide on AI responses

2. How We Use Your Information

We use the information we collect to:

• Provide Personalized Coaching: Generate AI-powered fertility guidance tailored to your specific health profile and goals
• Deliver Supplement Recommendations: Create personalized supplement protocols based on your assessment data
• Improve Our Service: Analyze usage patterns and conversation quality to enhance Kai's capabilities and accuracy
• Process Payments: Manage your subscription, process charges, and handle refunds
• Communicate With You: Send account notifications, service updates, educational content, and marketing communications (with your consent)
• Analytics: Understand how users interact with our Service to improve the user experience
• Safety and Security: Detect fraud, prevent abuse, and maintain platform integrity
• Legal Compliance: Comply with applicable laws, regulations, and legal processes

3. Third-Party Service Providers

We share your information with the following categories of service providers who assist in operating our Service:

These providers are contractually obligated to use your data only for the purposes we specify and to maintain appropriate security measures.

3.1 Anthropic Data Processing

Your conversations with Kai are processed by Anthropic's Claude API. Anthropic's data processing terms apply to this usage. Per Anthropic's API policies, conversation data sent through their API is not used to train their models. We do not share your name or direct identifiers with Anthropic beyond what is necessary to process your conversation.

4. Data Retention

• Account Data: Retained for the duration of your account plus 30 days after deletion request
• Health and Conversation Data: Retained for the duration of your account; deleted within 30 days of account deletion unless required by law
• Payment Records: Retained for 7 years as required by tax and financial regulations
• Usage/Analytics Data: Retained in anonymized form for up to 26 months
• Email Marketing Data: Retained until you unsubscribe; removed from active lists within 10 business days of opt-out

5. Your Rights and Choices

5.1 Access and Export

You may access and export all of your personal data at any time through your account settings or by using our data export tool at /api/export-token. Exports are available in machine-readable JSON format.

5.2 Deletion

You may request deletion of your account and all associated data through your account settings or by contacting us at privacy@conceivable.com. We will process deletion requests within 30 days, except where retention is required by law.

5.3 Correction

You may update or correct your personal information at any time through your account settings.

5.4 Opt Out of Marketing

You may unsubscribe from marketing emails at any time by clicking the "unsubscribe" link in any email or by contacting us directly.

5.5 Data Portability

You have the right to receive your data in a structured, commonly used, machine-readable format via our export functionality.

6. Health Data Disclaimer

IMPORTANT: Conceivable and Kai are NOT covered by the Health Insurance Portability and Accountability Act (HIPAA). We are not a healthcare provider, health plan, or healthcare clearinghouse. The Service is NOT a medical device and has NOT been cleared or approved by the U.S. Food and Drug Administration (FDA).

While we implement robust security measures to protect your health-related information (see Section 10), the legal protections afforded to Protected Health Information (PHI) under HIPAA do not apply to data stored on our platform.

Information you share with Kai should not be considered a substitute for professional medical advice, diagnosis, or treatment. Always consult your healthcare provider regarding medical decisions.

7. Children's Privacy

The Service is intended solely for users who are at least 18 years of age. We do not knowingly collect personal information from anyone under 18. If we discover that we have collected information from a minor under 18, we will delete that information immediately. If you believe a minor has provided us with personal information, please contact us at privacy@conceivable.com.

8. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you, the sources of collection, purposes of use, and categories of third parties to whom we disclose information.
• Right to Delete: You may request that we delete your personal information, subject to certain legal exceptions.
• Right to Correct: You may request correction of inaccurate personal information.
• Right to Opt Out of Sale/Sharing: We do NOT sell your personal information. We do NOT share your personal information for cross-context behavioral advertising purposes.
• Right to Limit Use of Sensitive Personal Information: You may limit our use of sensitive personal information (including health data) to purposes necessary for providing the Service.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise your California privacy rights, contact us at privacy@conceivable.com or use the tools available in your account settings. We will verify your identity before processing requests. You may designate an authorized agent to make requests on your behalf.

Categories of Personal Information Collected (preceding 12 months):

• Identifiers (name, email, IP address)
• Financial information (payment details via Stripe)
• Health information (fertility and wellness data)
• Internet/electronic activity (usage data, browsing history on our Service)
• Inferences drawn from the above (personalized recommendations)

9. Cookies and Tracking Technologies

9.1 Cookies We Use

• Essential Cookies: Required for authentication, session management, and security. Cannot be disabled.
• Analytics Cookies: Google Analytics and PostHog cookies to understand usage patterns. Can be opted out.
• Functional Cookies: Remember your preferences and settings (localStorage).

9.2 Local Storage

We use browser localStorage to store:

• Session tokens and authentication state
• User preferences and UI settings
• Cached assessment data for offline functionality
• Consent records

9.3 Opting Out

You can manage cookie preferences through your browser settings. Disabling essential cookies may prevent the Service from functioning properly. You may opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

10. Security Measures

We take the security of your data seriously and implement the following measures:

• Encryption at Rest: All health data is encrypted using AES-256-GCM encryption
• Encryption in Transit: All data transmitted between your device and our servers is encrypted using TLS 1.2+
• Access Controls: Strict role-based access controls limit who can access user data within our organization
• Infrastructure Security: Hosted on Vercel and Supabase with SOC 2 Type II certified infrastructure
• Regular Audits: We conduct periodic security reviews of our systems and third-party integrations
• Password Hashing: User passwords are hashed using industry-standard algorithms (bcrypt)
• Data Minimization: We collect only the data necessary to provide the Service

While we implement commercially reasonable security measures, no system is 100% secure. We cannot guarantee the absolute security of your data.

11. International Data Transfers

Our Service is primarily operated in the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States, where our servers and service providers are located.

By using the Service, you consent to the transfer of your information to the United States. We rely on the following safeguards for international transfers:

• Standard Contractual Clauses (SCCs) with applicable service providers
• Data processing agreements with all third-party sub-processors
• Technical and organizational security measures described in Section 10

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you may have additional rights under the General Data Protection Regulation (GDPR). Please contact us at privacy@conceivable.com to exercise these rights.

12. Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature. We currently do not respond to DNT signals, as no uniform industry standard for DNT compliance has been adopted.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on this page with a new "Last Updated" date
• Sending an email notification to the address associated with your account
• Displaying a prominent notice within the Service

Your continued use of the Service after any changes constitutes acceptance of the updated Privacy Policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: privacy@conceivable.com
• Mail: Brazen Inc. d/b/a Conceivable, Attn: Privacy, Austin, TX
• Website: conceivable.com

For data export or deletion requests, you may also use the self-service tools available in your account settings or contact us at the email above.