Privacy Policy

Last updated: June 16, 2026

The Top Drawer (“The Top Drawer,” “we,” “us”) is a private coaching practice that learns who you are from what you actually do. Because our entire purpose is to earn your self-trust, protecting your data is not a side concern — it is the product. This policy explains what we collect, why, and the control you have over it.

Information we collect

• Account information. When you sign in with Google, we receive your name, email address, and profile picture. We do not receive your Google password.
• Content you create. The actions, intentions, categories, completions, reflections, coaching conversations, and the behavioral event stream you generate by using the app.
• Derived insights. A profile we compute from your activity (your revealed values, strengths, tendencies, and the gap between your intentions and actions). This is generated from your data, never sold or shared except as you explicitly direct.
• Limited technical data. Basic logs needed to operate and secure the service. We do not use advertising or cross-site tracking.

How we use your information

• To provide the daily drawer, the weekly review, and your mirror.
• To generate coaching reflections and observations for you.
• To secure, maintain, and improve the service.
• To communicate with you about your account or the service.

We do not sell your personal data, and we do not show ads. A product whose job is self-trust cannot monetize your attention.

Private by default

Everything you record is visible only to you unless you explicitly choose to share it. Sharing with a friend, accountability partner, or coach is opt-in, scoped, and revocable at any time. Access is enforced at the database level, not merely in the interface.

AI-assisted coaching

To generate coaching text and reflections, we send relevant portions of your content to our AI provider (Anthropic) solely to produce a response for you. We send only what is needed for the feature you are using.

Service providers

We share data only with the infrastructure providers required to run the service, under agreements that limit their use of it: Supabase (database and authentication), Vercel (hosting), Google (sign-in), and Anthropic (AI coaching). We may also disclose information if required by law or to protect the rights and safety of our users.

Data retention

We keep your data for as long as your account is active. When you delete your account, we delete your data, including derived profiles, within a reasonable period, except where we must retain it to comply with the law.

Your rights

You own your data. You can access and export everything you have created, correct your information, and delete everything, including derived profiles. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA. To exercise any of these, contact us at the address below.

Security

Data is encrypted in transit, and row-level security ensures each person’s data is accessible only to them and to those they have explicitly granted access. No system is perfectly secure, but we treat this data with the seriousness it deserves.

Children

The Top Drawer is not directed to children under 16, and we do not knowingly collect their personal data.

International users

Your data may be processed in countries other than your own, including the United States. Where required, we rely on appropriate safeguards for such transfers.

Changes to this policy

We may update this policy from time to time. If we make material changes, we will update the date above and, where appropriate, notify you.

Contact

Questions about this policy or your data? Email us at privacy@thetopdrawer.org.