Privacy Policy

What data we collect

We may collect the following categories:

• Account: email address and authentication identifiers when you sign up or log in (Supabase Auth)
• Profile: name or display name if you provide it in optional profile fields
• Quiz: quiz answers and computed scores when you take readiness quizzes
• Subscription: plan type, Stripe customer and subscription IDs, and payment status when you subscribe to Pro
• Payment: card and billing details processed by Stripe—we do not store full card numbers
• Usage: pages visited, locale preference, and session cookies when you use the site
• Communications: messages you send via contact forms or email

We do not knowingly collect sensitive categories (health, political views, etc.) unless you voluntarily include them in free-text messages.

How we use your data

We use personal data to:

• Provide and secure your account
• Run quizzes and show personalized results
• Process Pro subscriptions and manage billing
• Send service emails (account, billing, important updates)
• Improve the platform and fix errors
• Comply with legal obligations (e.g. tax and accounting records)

Legal bases (GDPR): contract performance, legitimate interests (security, improvement), consent where required, and legal obligation for financial records.

We do not sell your personal data.

Who we share data with

We use trusted processors, including:

• Supabase — database, authentication, hosting (EU / US per their terms)
• Stripe — payments and subscriptions (EU / US)
• Anthropic — AI analysis of quiz answers and AI processing for news content (US)
• Resend — transactional email delivery (US / EU)
• Vercel — site hosting (US / EU)
• Awin / Amazon — affiliate links on marketplace and Buy buttons; tracking occurs on their systems—we do not send them your personal profile data for those links

Processors act on our instructions under data processing agreements where applicable.

International transfers

Some providers process data outside the EU (e.g. US). Where required, we rely on appropriate safeguards such as Standard Contractual Clauses and provider compliance programs.

US-based processors (Stripe, Anthropic, Resend) operate under Standard Contractual Clauses and the EU-US Data Privacy Framework where applicable.

Cookies

We use essential cookies only—for example:

• Authentication and session security
• Locale preference (autarkeia-locale or equivalent)

We do not use analytics or advertising cookies at this time. If we add them later, we will update this policy and, where required, ask for consent.

You can control cookies in your browser settings; blocking essential cookies may limit login and locale features.

How long we keep data

• Account and quiz data: until you delete your account or ask us to delete it—we aim to complete deletion requests within 30 days
• Billing and invoice records: up to 7 years (Spanish legal and tax requirements)
• Support emails: as long as needed to handle your request and for reasonable record-keeping

Your rights (GDPR)

You may:

• Access your personal data
• Correct inaccurate data
• Delete your data ("right to be forgotten")
• Restrict or object to certain processing
• Portability of data you provided in structured form where applicable
• Withdraw consent where processing is consent-based (without affecting prior lawful processing)
• Lodge a complaint with the Spanish supervisory authority: AEPD — www.aepd.es

To exercise rights: hello@autarkeia.world. We may need to verify your identity.

Children

Autarkeia is not directed at children under 14. We do not knowingly collect their data.

Changes

We may update this policy. Material changes will be noted on this page with a new effective date. For significant changes, we may email registered users.

Contact

Privacy and data requests: hello@autarkeia.world