Privacy Policy
Last updated: October 20, 2026
TypeWeave is built to know you deeply and hold almost nothing. Your account is an email address and nothing more; your card never touches our servers. If you sign in, a copy of your results is kept on your account so you do not lose them — and one checkbox stops that and deletes it. This page explains exactly what is collected, why, who else is involved, and how to make it all go away.
The short version. Signed out, your results stay on your device. Signed in, a copy is kept on your account so a browser clearing its storage does not erase months of your work — we never read it, and one checkbox, on your Portrait or on Your account, deletes it and stops us keeping another. We keep your email so a Membership follows you across devices. We never sell your data, never run advertising trackers, and never share your information except with the handful of services that actually run the app — payments, hosting, sign-in email, and (only if you tick the box) the mailing list.
1. Who we are
TypeWeave is operated by Relationship Yoga LLC ("TypeWeave," "we," "us"). For any privacy request or question, contact cory@typeweave.me. For the purposes of the EU/UK GDPR, Relationship Yoga LLC is the data controller.
2. What stays on your device
Your assessments, quiz answers, saved profiles, and Constellation files are stored in your browser's localStorage — on your own computer or phone. That is where you work with them, and for a visitor who is not signed in it is the only place they exist. They leave your device in these moments:
- When you press a report button, the specific result for that lens is sent to our server so the document can be composed, then returned to you. It is not stored afterward.
- When you download a backup or a Constellation file, the file is created on your device for you to keep or share as you decide.
- When you are signed in, a copy of your profile is kept on your account so it survives this browser and reaches your other devices — see the next section, including how to switch it off.
Browsers clear stored data on their own: Safari removes it after about seven days without a visit, and clearing site data removes it anywhere. If you are signed out, or have switched syncing off, that erases your results permanently and we cannot recover them — the backup file is your only copy.
2a. Profile syncing — on for accounts, and you can switch it off
If you have an account and are signed in, a copy of your profile is kept on our server so that your results survive this browser and are there when you sign in on another device. Browsers clear stored data on their own, and people were losing months of work that way; keeping your results is the thing an account is for.
If you are not signed in, nothing is stored. An anonymous visitor's results never leave their browser except in the moments listed in section 2.
The stored copy holds the same content as the backup file: your lens results, your notes, your reading history, and your Practice progress. We keep it so it can be returned to you. We do not read it, analyse it, profile you with it, use it to train anything, or share it with anyone.
You can switch it off. On the Portrait page, tick "Keep my results only in this browser." That deletes the stored copy from our server — not just the preference — and stops us keeping another. Your results stay in your browser. Deleting your account also deletes the stored copy (section 5).
Our legal basis for keeping it is performance of our contract with you: holding an account holder's own results so they remain available to them is the service the account exists to provide. We do not rely on consent for this, because a setting that is on by default cannot be consent in the GDPR's sense — and we would rather name the basis accurately than pre-tick a box and call it a choice. Your right to object and to switch it off is unconditional, and honoured immediately by that checkbox.
3. What we do collect, and why
| Data | Why we have it | Legal basis (GDPR) |
|---|---|---|
| Your email address | To create your account, send single-use sign-in links, and attach any Membership you buy so it follows you across devices. If you sign in with Google, also an identifier for your Google account (see below). | Contract; legitimate interest |
| Assessment results (transiently) | Sent only when you request a report, used to compose that document, and not retained on our server. | Contract (performing the service you asked for) |
| Assessment results (stored) — signed-in accounts | A copy held against your account so your results survive your browser and reach your other devices. Deleted when you switch syncing off, which you can do at any time. Nothing is stored for anonymous visitors; see section 2a. | Contract |
| Payment records | Your purchases are processed by Stripe. We store a Stripe customer reference and your entitlement (what you unlocked) — never your card number, which we never see. | Contract |
| Mailing-list membership | Only if you tick the consent box at checkout: your email and name join the Relationship Yoga letters. | Consent |
| Technical/log data | Server logs and your IP address, used to deliver the site, rate-limit sign-in requests, and keep the service secure. | Legitimate interest |
| One session cookie | A single secure, HTTP-only cookie that keeps you signed in. No advertising or cross-site tracking cookies are used. | Strictly necessary |
| A few display choices in your browser | Your browser remembers, in its own storage, whether you chose a light or dark theme and that you have visited before. They stay on your device and are never sent to us. | Strictly necessary |
Signing in with Google
If you choose to sign in with Google, we ask only for the basic sign-in permissions
(openid, email and profile). From them we receive your name,
your email address, whether Google has verified that address, and an identifier for your Google
account. We do not receive your password, and we do not ask for or receive your contacts, files,
calendar, email messages or any other data in your Google account.
We use this information only to sign you in and to keep your TypeWeave account linked to the Google account you chose. We store your email address and the account identifier with your TypeWeave account, and delete them when you delete your account. We never sell this information, use it for advertising, or share it with anyone except the service providers listed in section 4, as needed to run TypeWeave.
TypeWeave's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can remove TypeWeave's access at any time in your Google Account; you can still sign in by email link.
4. The services that help us run TypeWeave
We share the minimum necessary with a small set of trusted providers (sub-processors). Each handles only what its job requires:
- Stripe — payment processing. Stripe collects and handles your card details directly under its own privacy policy; we never receive them.
- Render — cloud hosting for the application and its database.
- Resend — delivery of your sign-in emails.
- Google — sign-in, only if you choose it, as described in section 3.
- Squarespace — the Relationship Yoga mailing list, used only if you consent at checkout.
We do not sell, rent, or trade your personal information, and we do not disclose it for anyone else's advertising. We may disclose information if required by law or to protect the rights and safety of people using the service.
5. How long we keep it
- Account & email: kept while your account exists; deleted when you delete your account (Your account, in TypeWeave) or on request.
- Entitlements/payment references: retained as long as needed for access, support, tax, and accounting obligations.
- Sign-in links & sessions: short-lived — links expire in about fifteen minutes and are single-use; sessions expire and can be revoked.
- Assessment results sent for reports: not retained after the document is composed.
- Synced profiles: kept while your account has syncing switched on. Switching it off deletes the stored copy immediately; so does deleting your account.
6. Your rights and choices
Much of this you can do yourself, at any time, on Your account in TypeWeave: stop keeping a copy of your results, sign out on every device, manage billing, and delete your account. Deleting it removes, all at once, your email address, your sign-in links and sessions, your Google link, the stored copy of your results, your saved Constellations and the record of what you bought. Stripe keeps its own payment records for as long as tax and accounting law requires. The Relationship Yoga letters, if you chose them, are separate, with an unsubscribe link in every letter.
Wherever you live, you can email cory@typeweave.me to:
- Access the personal data we hold about you;
- Correct or update it;
- Delete your account and associated data;
- Export your data (your on-device results are already exportable from the Portrait page at any time);
- Withdraw consent to the mailing list — every letter also has a one-click unsubscribe.
If you are in the EU/UK, you also have the right to object to or restrict processing, to data portability, and to lodge a complaint with your data-protection authority. If you are in California (CCPA/CPRA), you have the right to know, delete, and correct your information and to opt out of "sale" or "sharing" — which we do not do. We will not discriminate against you for exercising any of these rights.
7. Security
TypeWeave is designed to hold as little as possible, which is itself the strongest protection. There are no passwords to steal — sign-in is by single-use email link, and the links are stored only as one-way hashes. Session cookies are HTTP-only and Secure. Connections are encrypted in transit (HTTPS). No system is perfectly secure, but the surface here is deliberately small.
8. International users
TypeWeave is operated from, and its data is stored in, the United States. If you access it from elsewhere, you understand your information will be processed in the U.S., which may have different data-protection laws than your country.
9. Children
TypeWeave is intended for adults and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.
10. Changes to this policy
We may update this policy as the service evolves. When we do, we will change the "last updated" date above, and for material changes we will make reasonable efforts to notify account holders by email.
11. Contact
Relationship Yoga LLC · cory@typeweave.me