Privacy Policy

Ondyne is a personal reflection platform designed to help individuals understand themselves through behavioural science, structured reflection and AI-assisted insights.

For the purposes of UK data protection law, Ondyne is the Data Controller responsible for your personal information.

Contact:
Email: hello@joinondyne.com
Website: www.joinondyne.com

Depending on how you use Ondyne, we may collect:

Information You Provide

• Name
• Email address
• Questionnaire responses
• Reflection notes
• Journal entries
• Account details
• Payment information (processed securely by our payment provider)

Technical Information

• IP address
• Browser type
• Device information
• Cookies
• Website usage statistics

Ondyne may collect information about areas such as:

• Personal goals
• Habits
• Relationships
• Health and wellbeing (where voluntarily provided)
• Financial behaviours
• Purpose and values
• Personal reflections

We only collect information that you choose to provide.

We use your information to:

• Generate personalised reflections
• Deliver your Ondyne reports
• Improve your experience
• Track your own progress over time
• Respond to enquiries
• Process subscriptions
• Improve our platform
• Protect the security of the service

We do not sell your personal information.

Some reflections and reports are generated with the assistance of artificial intelligence. These insights are created using the information you choose to provide and are intended to support self-reflection.

They are not medical, psychological, legal or financial advice.

We process your personal information under one or more of the following lawful bases:

• Consent (UK GDPR Art. 6(1)(a)) — for optional analytics cookies and for processing reflections that may reveal information about your health, emotions or beliefs (Art. 9(2)(a) special category consent), which you give when you create your account.
• Performance of our contract with you (Art. 6(1)(b)) — to deliver the reflection, journal, companion and membership features you sign up for.
• Legitimate interests (Art. 6(1)(f)) — to keep the service secure, prevent abuse, and improve Ondyne. You may object at any time.

You may withdraw consent at any time from Settings → Your data, or by emailing us. Withdrawing consent does not affect processing already carried out.

Your information is stored on encrypted infrastructure operated by our hosting providers (see Subprocessors below). Data is encrypted in transit (TLS) and at rest.

Access to production data is restricted to authorised personnel on a need-to-know basis and protected by strong authentication.

No online system can be guaranteed perfectly secure, but we apply industry-standard technical and organisational measures and review them regularly.

We keep your information only as long as necessary for the purposes it was collected. Specifically:

• Account & profile data — for as long as your account is active.
• Reflections, journal entries, letters, photographs, companion conversations — for as long as your account is active, unless you delete them individually.
• Billing & tax records — up to 7 years after your last transaction, as required by UK tax law.
• Support emails — up to 24 months after the last message.
• Server & security logs — up to 90 days.

When you delete your account from Settings → Your data, all personal data is erased within 30 days, except records we are legally required to retain (billing).

Under UK GDPR you have the right to:

• Access your personal information
• Correct inaccurate information
• Request deletion of your data
• Restrict processing
• Object to processing where applicable
• Receive a copy of your information (data portability)
• Withdraw consent at any time
• Lodge a complaint with the UK Information Commissioner's Office (ico.org.uk)

The fastest way to exercise your access, portability and erasure rights is directly in the app: Settings → Your data. You can also email hello@joinondyne.com and we will respond within 30 days.

Ondyne uses only strictly necessary cookies required to keep you signed in and to remember your consent choice. We do not currently set analytics, advertising or tracking cookies. If we add optional cookies in future we will request your consent first.

See our Cookie Policy for details.

We use the following processors to operate Ondyne. Each is bound by a written data-processing agreement and processes personal data only on our instructions.

Content you submit to Ondyne — reflections, journal entries, letters, photographs, companion messages — is not used to train third-party AI models. Model prompts sent to Google Gemini are not retained by Google for training under our data-processing terms.

Ondyne's primary storage is in the European Economic Area. Where a subprocessor (for example, Stripe or Google) processes personal data outside the UK/EEA, transfers rely on the UK International Data Transfer Addendum and the European Commission's Standard Contractual Clauses (SCCs), together with additional technical safeguards.

Ondyne is intended for adults aged 18 years and over.

We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time.

Any significant changes will be published on this page.

Continued use of Ondyne after updates constitutes acceptance of the revised policy.

If you have any questions regarding this Privacy Policy or how your information is handled, please contact:

Ondyne
Email: hello@joinondyne.com
Website: www.joinondyne.com