Privacy Policy

1. Who we are

Guidance40 is operated by Paperfoot AI (SG) Pte. Ltd. (the data controller). For anything about your data, write to privacy@guidance40.com. If you are in the UK or EU, we will handle your request under UK GDPR / EU GDPR.

2. Information we collect

We collect only what we need to run the service:

• Account details: name, email, and language preferences.
• Voice recordings from your interview sessions, and the AI profile derived from them.
• Usage data such as app interactions and device information for reliability and support.

3. How we use your data

We use your data to build and maintain your personal wisdom profile, to let the people you authorise interact with it in your voice and style, to improve the product, and to contact you about your account. We never sell your data. We never use your voice recordings to train general-purpose AI models.

4. Voice data and security

Voice recordings and AI profiles are encrypted at rest with AES-256 and in transit with TLS 1.3. They are stored on secure servers with strict access controls. Only service providers bound by contract can process them on our behalf, and only to deliver the service. Recording only begins after the person being interviewed gives their explicit consent, and they may ask us to delete their recordings and profile at any time, even if the account belongs to a family member.

5. Data retention and deletion

We keep your data for as long as your account is active, because the purpose of Guidance40 is to preserve wisdom over time. You can request deletion at any moment, and all voice recordings and profile data are permanently removed within 30 days. As a rule: account data lives for the life of your account; voice recordings and profiles until you delete them; billing records for 6 years (tax law); support messages for 2 years; security logs for 12 months.

6. Your rights

Wherever you live, you have the right to access a copy of your data, correct it, export it in a readable format, restrict or object to its processing, and delete it. We respond to requests within 30 days. You also have the right to complain to a supervisory authority: in the UK, the Information Commissioner's Office (ico.org.uk); in the EU, your national data protection authority.

7. Children

Guidance40 is for adults. You must be 18 or older to create an account.

8. Legal bases and our processors

We process your data on these legal bases: performance of our contract with you (your account, subscriptions, and the service itself); your explicit consent (voice recordings and the profile built from them); and our legitimate interests (keeping the service secure and preventing abuse). Trusted processors help us run Guidance40:

• Vercel (hosting) and Neon (database): US/EU
• ElevenLabs (voice AI): US
• OpenRouter and Google (language models): US
• Stripe (payments): US/UK/EU; card details never touch our servers

9. International transfers

We are a Singapore company and some processors run in the United States. Where your data leaves the UK or EU, we rely on recognised safeguards such as Standard Contractual Clauses and the UK International Data Transfer Addendum.

10. Cookies

We set a single essential cookie that keeps you signed in, and one browser-storage flag that remembers you dismissed our cookie notice. We use no analytics, advertising, or tracking cookies.

11. Contact

For privacy questions or data requests, please use our support page.