Back to Home

Privacy Policy

Last updated: March 21, 2026

1. Introduction

Paula ("we," "our," or "us") is an AI-powered wellness companion designed for emotional support and self-reflection. This Privacy Policy explains how we collect, use, and protect your personal information when you use our mobile application and website at trypaula.com (collectively, the "Service").

By using Paula, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

2. Information We Collect

Account Information

  • Email address (for authentication)
  • Display name and companion preferences
  • Subscription status and tier

Conversation Data

  • Text messages exchanged with Paula
  • Voice session transcripts and metadata (duration, message count)
  • AI-generated memories about your preferences and patterns

Wellness Data

  • Mood check-in scores and timestamps
  • Journal entries
  • CBT exercise completions
  • Daily streaks and progress data

This wellness data is stored in your Paula account so you can review it across devices. It is not automatically sent to third-party AI providers unless you choose to include it in a message or voice conversation with Paula.

Apple Health Data (HealthKit)

With your explicit permission, Paula may write the following HealthKit data:

  • Write: Mindful Minutes (mood check-ins are saved as mindful sessions)

HealthKit data is stored locally on your device and in Apple Health. Paula does not send HealthKit data to any third-party service, including our AI providers. HealthKit data is never used for advertising or sold to third parties. You can disable HealthKit integration at any time from Profile → Settings.

Technical Data

  • Device type and operating system
  • Push notification device tokens (for sending check-in reminders)
  • Anonymous diagnostics and error logs for service reliability
  • Optional website analytics data (web only, based on consent)

Voice Data

During voice sessions, your speech is processed using your device's built-in speech recognition. We do not record, store, or transmit raw audio. Only the text transcript of what you say is sent to our servers to generate Paula's response.

When avatar mode is active, Paula's generated response audio may be sent to HeyGen so the avatar can speak on screen. Your raw microphone audio is not sent to HeyGen or MiniMax.

3. How We Use Your Information

  • To provide and personalize the Service, including AI-generated responses
  • To remember context across conversations (memories feature)
  • To track your mood patterns and wellness progress
  • To process subscription payments
  • To improve reliability through diagnostics and optional website analytics
  • To detect and respond to potential crisis situations

We do not sell, rent, or share your personal data with advertisers or data brokers. We do not use your conversations to train AI models.

In the iOS app, we do not use tracking cookies and we do not perform cross-app tracking.

4. Third-Party Services & AI Data Processing

Paula uses artificial intelligence to have conversations with you. Before accessing any AI-powered feature, you will be asked to provide explicit consent to the data processing described below.

AI Services

  • OpenAI - Paula sends your conversation messages, voice transcripts, recent conversation history, and AI-generated memory context to OpenAI to generate text responses and related conversation processing, including onboarding preference extraction and post-chat conversation processing. OpenAI processes this data under their privacy policy.
  • MiniMax AI - Paula sends Paula's response text to MiniMax AI for speech synthesis (text-to-speech) during voice sessions. MiniMax processes this data under their privacy policy.
  • HeyGen - Streaming avatar service used during voice sessions to render a real-time lip-synced avatar. Session tokens and Paula's generated response audio are processed by HeyGen's servers. HeyGen processes this data under their privacy policy.

Standalone mood check-ins, journal entries, and Apple Health data are not automatically sent to third-party AI providers. If you type or say those details in a message to Paula, they may be processed as part of that conversation.

Infrastructure & Payments

  • Supabase - Database and authentication. Your data is stored securely with row-level security policies.
  • RevenueCat - In-app subscription management for iOS (processes subscription status and Apple receipt data)
  • Stripe - Payment processing for web subscriptions (processes payment card information; we never see or store your card details)
  • Resend - Transactional email delivery (processes your email address for account-related emails)

Analytics (Web Only)

  • Google Analytics - Optional website analytics (web only, based on cookie consent)
  • Mixpanel - Optional product analytics (web only, based on cookie consent)

Analytics services are not active in the iOS app. No cross-app tracking is performed.

Each third-party service listed above is contractually required to provide the same or equal level of protection for your data as described in this Privacy Policy. We only share the minimum data necessary for each service to function. Paula does not sell your data or share it for advertising.

5. Consent and Withdrawal

Before using any AI-powered feature, you are asked to provide explicit consent to the data processing described in Section 4. Your consent is recorded with a version number. If we materially change how data is processed, you will be asked to consent again.

You may withdraw your consent at any time by going to Profile → Data & Privacy → Manage AI Data Consent in the app. After withdrawal you will be signed out and no further data will be sent to third-party AI services. Previously processed data is subject to each provider's retention policy.

6. Data Security

We take the security of your data seriously. All data is transmitted over encrypted connections (HTTPS/TLS). Your data is stored with row-level security policies, meaning only you can access your own information. We use industry-standard authentication and never store passwords in plain text.

7. Data Retention and Deletion

Your data is retained for as long as your account is active. You can delete your account and all associated data at any time directly in the app: go to Profile → Settings → Delete Account. Deletion is immediate and permanent.

You can also request deletion by contacting us at [email protected]. Upon receiving a deletion request, we will permanently remove your data within 30 days.

8. Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to or restrict processing of your data
  • Export your data in a portable format

To exercise any of these rights, contact us at [email protected].

9. Children's Privacy

Paula is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or by email. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or your data, please contact us at [email protected].