We use cookies to enhance your experience, analyze usage, and remember your preferences. Essential cookies are necessary for the app to function. By clicking "Accept all," you consent to our use of non-essential cookies. See our Privacy Policy for details.

Back to ASCEND

Privacy Policy

Last updated: July 24, 2026

1. Overview

ASCEND ("we," "us," "our") is a personal growth journaling application. We respect your privacy and are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA) as amended by the CPRA, and other applicable data protection laws. This policy explains what we collect, how we use it, who we share it with, and your rights.

2. Data We Collect

  • Account data: Your name, email address, authentication tokens, and subscription plan.
  • Journal content: Text and voice entries you create, including AI-extracted insights (mood scores, themes, wins, struggles, and suggested next steps).
  • Goals & reflections: Goals, focus journals, monthly reflections, and AI-generated summaries.
  • Coaching data: Booking details, pre-call survey responses, and messages exchanged with your coach.
  • Payment data: Subscription status and billing information processed by our payment provider, Stripe. We do not store your full credit card number.
  • Usage data: How you interact with the app (e.g., features used, session duration) for improving the product.
  • Technical data: IP address, device type, browser type, and operating system.

3. How We Use Your Data

  • To provide journaling, AI analysis, coaching, and growth tracking features.
  • To generate personalized insights, reflections, and summaries.
  • To process payments and manage subscriptions.
  • To send service-related communications (e.g., booking confirmations, journaling reminders, receipts).
  • To improve our AI models and product experience.
  • To detect potential crisis indicators in journal entries and display support resources.
  • To comply with legal obligations.

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process your personal data under the following legal bases:

  • Consent: You agree to our processing of your data when you create an account and consent to specific activities (e.g., analytics, marketing).
  • Contract: Processing is necessary to provide the services you requested under our Terms of Service.
  • Legitimate interests: We process data to improve our services, ensure security, and prevent fraud.
  • Legal obligation: We may process data to comply with applicable laws or law enforcement requests.

5. AI Processing & Automated Decision-Making

Your journal entries are processed by AI to extract mood scores, themes, insights, and suggestions. This analysis is automated and may not always be accurate. You can edit or delete any entry at any time. The AI does not make decisions that produce legal or similarly significant effects on you. Crisis detection is an automated safety feature that displays support resources when potential self-harm indicators are detected — it does not trigger any external reporting or intervention.

6. Third-Party Services

We use the following third-party services to operate ASCEND:

  • Stripe: Payment processing. Stripe Privacy Policy
  • Google: Authentication (Google Sign-In) and Calendar integration. Google Privacy Policy
  • AI Providers: Journal entries and insights are processed by third-party AI models to generate analysis and reflections.
  • Cloud Hosting: Data is stored on secure cloud infrastructure.

Each provider has its own privacy policy governing how they handle data. We do not sell your personal data to any third party.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies (e.g., local storage) for the following purposes:

  • Essential cookies: Required for authentication, session management, and core functionality. These cannot be disabled.
  • Analytics cookies: Help us understand how users interact with the app so we can improve it. These are optional.
  • Preference cookies: Remember your settings (e.g., theme, language) for a better experience.

You can control or disable non-essential cookies through your browser settings. Disabling essential cookies may affect app functionality.

8. Data Sharing

We do not sell your data. We share data only:

  • With service providers who help us operate the app (e.g., cloud storage, AI processing, payment processing) under strict confidentiality agreements.
  • With your coach (babbz2020@gmail.com) when you book a coaching session — limited to your name, email, subscription plan, booking details, and pre-call survey responses.
  • When required by law, court order, or government regulation.
  • In connection with a merger, acquisition, or sale of our assets (with continued protection of your data).

9. Data Security

We use industry-standard encryption, access controls, and security measures to protect your data. However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security. We regularly review and update our security practices.

10. Data Retention

We retain your data for as long as your account is active. When you delete your account, all personal data is permanently removed within 30 days. We may retain aggregated, de-identified data indefinitely for analytics purposes. Certain data may be retained longer if required by law or to resolve disputes.

11. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence, including the United States. We ensure appropriate safeguards are in place for such transfers, including Standard Contractual Clauses (SCCs) where required by GDPR, and we only transfer data to countries that provide an adequate level of data protection or where appropriate safeguards have been implemented.

12. Your Rights — GDPR (EEA & UK Users)

If you are in the European Economic Area or the United Kingdom, you have the following rights:

  • Right of access: Request a copy of your personal data.
  • Right to rectification: Correct inaccurate or incomplete data.
  • Right to erasure ("right to be forgotten"): Request deletion of your data.
  • Right to restrict processing: Limit how we process your data.
  • Right to data portability: Receive your data in a structured, machine-readable format.
  • Right to object: Object to processing based on legitimate interests or for direct marketing.
  • Right to withdraw consent: Withdraw consent at any time without affecting the lawfulness of prior processing.
  • Right to lodge a complaint: File a complaint with your local data protection authority.

To exercise these rights, contact us using the information in Section 19. We will respond within 30 days.

13. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

  • Right to know: Request the categories and specific pieces of personal information we collect, the sources, the purpose, and who we share it with.
  • Right to delete: Request deletion of your personal information.
  • Right to correct: Correct inaccurate personal information.
  • Right to opt-out: Opt out of the "sale" or "sharing" of your personal information. We do not sell your personal information.
  • Right to limit: Limit the use of sensitive personal information.
  • Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise these rights, submit a request via the contact information in Section 19. We will verify your identity before processing your request and respond within 45 days.

14. Children's Privacy (COPPA)

ASCEND is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately and we will delete it. Users must be at least 13 years old to create an account, and users under 18 should obtain parental consent before subscribing or booking coaching sessions.

15. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority without undue delay, and in any case within 72 hours of becoming aware of the breach, as required by GDPR Article 33. We will provide details of the breach, the measures taken, and recommendations for protecting yourself.

16. Not a Medical Service

ASCEND is not a medical, mental health, or therapeutic service. It is not a substitute for professional therapy, counseling, or crisis intervention. AI-generated insights are informational only and may be inaccurate. If you are in crisis, please contact emergency services or a crisis hotline immediately. In the US, call or text 988 for the Suicide & Crisis Lifeline.

17. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via the app or email at least 30 days before they take effect. Continued use after the effective date constitutes acceptance of the updated policy.

18. Data Protection Officer

For GDPR-related inquiries or to exercise your data protection rights, you may contact our Data Protection Officer or privacy team at the contact information below. We will respond to all requests within the timeframe required by applicable law.

19. Contact

For privacy questions, data requests, or to exercise any of your rights, please contact Base44 support through the app's Settings page or by visiting the Base44 support portal. For fastest processing, include "Privacy Request" in your subject line and the email associated with your ASCEND account.