1. About this policy
This policy covers Philio.ai accounts, check-ins, quests, chat and reports. Information supports your chosen features, preferences, progress, AI responses, service security and enquiries. We do not sell personal data, use emotional records for advertising, or use behavioural analytics or advertising trackers.
2. Information we collect
Learning information includes moods and emotional categories, intensity, reflections, quest history, the first message submitted each day, report completion, and related dates and record identifiers. Progress and rewards use these records. Check-in notes and a local display name are optional.
Enabled account services collect email, display name, account identifier and sign-in details to manage your account. Hosting services process IP addresses, browser details, requested pages, request times and error information.
3. On your device and in the cloud
Learning records are saved in your browser, including in account mode. When you sign in to enabled account services, check-ins and completed quests are also stored with Supabase and retrieved into your browser. Local names, saved daily messages and report completion records are not synced to your account; saved messages can still be sent for AI reports.
Full on-screen conversations and generated report text disappear on reload; saved daily messages remain. Records do not automatically move to another device or browser. Others using the same browser may access them.
4. What each AI feature sends
AI features send the following information to Philio.ai’s server, even without an account. When DeepSeek generates a response, it receives this information and instructions for the task.
Chat with Phil: your current message; your latest saved check-in’s emotion, intensity and reflection; the recommended quest’s title, skill area and duration; and your completed-quest count. The full conversation and earlier AI replies are not sent.
Check-in reflection: the emotion and intensity you select, plus your written reflection.
Report generation: up to seven latest check-ins, including emotion, intensity and reflection; all completed quest records available for your report, including title, skill area, XP and reflection; and all saved daily chat messages with their completion times.
Account names, email and account identifiers are not added to AI submissions, but personal details in your text are sent unchanged. Avoid personal or confidential information and sharing others’ details without permission. Cancelling a request, an error or a fallback response does not recall information already sent. Private browsing does not prevent AI transmission or guarantee confidentiality.
5. Who receives information
DeepSeek processes AI submissions. Supabase provides enabled account login and stores profiles, check-ins and completed quests. Vercel hosts Philio.ai and processes website requests and operational logs, which may include provider error diagnostics. Philio.ai does not separately archive full conversations or generated report text in the cloud.
External font, image and video providers receive connection information such as IP address, browser headers and potentially the referring page when delivering site visuals, rather than your learning records. Providers may process information outside Hong Kong.
6. Cookies, retention and deletion
Cookies maintain account and demo access; browser storage remembers language, local names and learning progress. Disabling storage may affect these features. Local records remain until reset, cleared or removed by the browser. Only the latest 20 check-ins are kept locally; saved messages, quest history and report completion records have no automatic expiry.
“Reset demo data” removes local learning records and your local name, but keeps language preferences and does not delete cookies or remote information. Signing out does not clear local records. Clear this site’s browser storage and cookies to remove local preferences and sessions.
Account records have no automatic time-based deletion. Request account or remote-record deletion at info@philio.ai; there is no self-service account deletion. Clearing local records does not delete Supabase records, recall DeepSeek submissions or remove provider backups and logs. Remote deletion may be limited by legal retention duties and providers’ ability to identify and remove copies; not every copy can necessarily be removed immediately.
7. Your choices and rights
Request access to, correction of or deletion of personal information held by Philio.ai at info@philio.ai, with the subject “Privacy”. We may need proportionate identity verification. Requests are handled under applicable law, including Hong Kong’s Personal Data (Privacy) Ordinance where applicable. Avoid sensitive learning content in your initial enquiry.
Users under 18 should have adult guidance. Online services and browser storage are not completely secure; avoid sensitive information and remember that shared-device users may see local records.
8. Policy updates
We may update this policy when features, providers or legal requirements change. The revision date appears above. Material changes will be communicated by reasonable means where practicable.
9. Language versions
In the event of any inconsistency or ambiguity between the Chinese and English versions of this Privacy Policy, the English version shall prevail, except to the extent otherwise required by applicable law.