Privacy Policy

1. About this policy

ReAlign is an AI-powered workplace conflict coaching tool offered by GoalsHabitsSkills, LLC ("GHS," "we," "us"). This Privacy Policy explains how we collect, use, disclose, and retain information when you use ReAlign. Workplace conflict discussions may be sensitive, and we encourage users to share only the information necessary to receive useful coaching. This policy is a notice about our practices, not a request for blanket consent to every form of processing.

2. Information we collect

3. Why we use information

We use information to deliver AI coaching, manage accounts and subscriptions, authenticate users, provide support, maintain security, detect misuse, improve product reliability and usability, comply with legal obligations, and communicate service-related notices. Product-improvement analysis should use minimized or aggregated data where practicable. We do not use coaching conversations to train AI models.

Where a privacy law requires a specific legal basis, the basis may include performance of a contract, legitimate interests, compliance with legal obligations, or consent where required.

4. How AI processing works

ReAlign uses Anthropic Claude models through Amazon Web Services (AWS) Bedrock to generate coaching responses, according to the current service configuration. Coaching prompts and relevant conversation context are transmitted for inference. This processing takes place in AWS data centers in the United States. Under the described Bedrock arrangement, this content is not used by AWS or Anthropic to train their foundation models; GHS likewise does not use coaching content to train AI models. AI-generated advice supports your judgment and does not make legally or similarly significant employment decisions about you.

5. Who can see information

• You: You can access your coaching content through available account features.
• Organization administrators: If an organization sponsors access, administrators may manage accounts and see members' names, email addresses, roles, account status, and last sign-in time; AI usage and cost per member; and security audit logs, which include IP addresses and browser information. They do not receive individual coaching transcripts through ordinary administrative dashboards. If enabled, organization reporting may include aggregate or de-identified usage measures and themes, with safeguards such as minimum reporting group sizes to reduce identification risk. You may choose to share your own content with others.
• Service providers: AWS (hosting, email, and AI processing) and other vendors, including Stripe (payments), Google (optional Google sign-in), Deepgram (voice transcription and speech, when you use voice features), and Lisna (in-app feedback), may process information only to provide contracted services, subject to appropriate protections.
• Limited exceptions: Authorized personnel may access information when necessary for support, security, or legal compliance, subject to role-based access controls; we may disclose information in response to valid legal obligations, with your direction or consent, or in connection with a business transaction as permitted by law.

We do not sell personal information or use coaching conversations for targeted advertising.

6. Security

We use technical and organizational safeguards intended to protect information, including encryption in transit and at rest, authentication, access restrictions, and organization-level data separation. Each organization's coaching content is stored in its own separate database schema. No electronic service can guarantee absolute security. Please use strong credentials and report suspected unauthorized access promptly.

7. Cookies and analytics

We use authentication and other strictly necessary technologies to maintain sessions and protect accounts. ReAlign does not use advertising, cross-site tracking, or third-party analytics cookies. Payments are handled on Stripe's hosted checkout and billing pages, which may set their own cookies on Stripe's site. If practices change, this section and any legally required consent mechanism will be updated.

8. Retention and deletion

We generally retain account and coaching data while your account remains active. Following a verified and eligible deletion request, we aim to purge personal account data and coaching content within 30 days; limited security audit logs may remain for up to 90 days. Aggregated data that cannot reasonably identify an individual may be retained longer. Database backups are kept for 7 days and application logs for 30 days, so copies of deleted information may remain in them until they expire. Our payment processor, Stripe, keeps its own payment records. We will explain applicable exceptions when responding to requests.

9. Your choices and rights

Depending on applicable law, you may request access, correction, deletion, portability, restriction, or objection to certain processing, and withdraw consent where processing is based on consent. Email privacy@goalshabitsskills.com or use the data export and account deletion options in Settings → Privacy. We may verify identity before responding. We aim to respond within 30 days, subject to different legal deadlines and lawful extensions. You may also have rights to appeal a decision or complain to a regulator, depending on your location.

10. International processing

Account information and coaching content are stored in Canada, in the AWS Canada (Central) region. AI processing through AWS Bedrock takes place in the United States, and some service providers, such as Stripe, Google, and Deepgram, process information outside Canada, including in the United States. If you use ReAlign from another country, your information will be transferred to and processed in Canada and the United States, where data protection laws may differ from those where you live. We use legally required transfer safeguards where applicable.

11. Children

ReAlign is intended for professionals, not children. We do not knowingly collect information from anyone under 16. Contact us if you believe a minor has submitted personal information so we can review and take appropriate action.

12. Changes to this policy

We may update this policy to reflect product, vendor, legal, or operational changes. We will post a revised date and provide additional notice of material changes when appropriate or legally required. Material changes requiring consent will not be treated as accepted solely because a user continues to use the Service.

13. Contact and responsible organization

GoalsHabitsSkills, LLC, Washington, DC, USA is the organization responsible for the practices described in this policy. Contact privacy@goalshabitsskills.com with privacy questions or requests.