Privacy Policy

Effective Date: March 10, 2026

Accord ("we," "us," or "our") is operated by Investigate Health Publishing LLC. This Privacy Policy explains how we collect, use, store, and protect your information when you use the Accord mobile application and related services (the "Service"). We designed Accord with privacy as a foundational principle, not an afterthought.

1. Information We Collect

1.1 Information You Provide

Username and password (password stored as a one-way hash, never in plaintext)
Email address (optional, encrypted at rest, used only for password recovery)
Display name (optional)
Profile data: upbringing, values, communication style, personality assessments, love languages, parenting philosophy, and emotional needs
Messages submitted through the Looking Glass for translation
Raw emotional reactions submitted through the Emotional Airlock
Topic ratings and resolution feedback

1.2 Information Collected Automatically

Device type and operating system
Session tokens for authentication
Push notification tokens (for delivery of notifications only)
IP address (stored temporarily in session records, not used for tracking)

1.3 Information We Do NOT Collect

Real name (not required)
Phone number
Location data
Contacts or address book
Photos or media from your device
Browsing history
Data from other apps on your device

2. How We Use Your Information

To provide AI-mediated message translation between partners
To generate emotional analysis and suggested responses in the Airlock
To track communication patterns and growth over time
To send push notifications about partner activity (topic sent, response received)
To send password reset emails (if email is provided)
To improve the accuracy of AI translations based on your communication profile

We do NOT use your information for advertising, marketing to third parties, or any purpose beyond providing and improving the Service.

3. The Vault Zone: Absolute Privacy

The Vault Zone is the most privacy-sensitive component of the Service. Raw emotional reactions, AI emotional analyses, cooling session data, and the gap between your raw reaction and your considered response are stored in the Vault Zone.

The Vault Zone is protected by the following guarantees:

Your partner can NEVER access your Vault Zone data through any feature, report, summary, or API endpoint
Vault data is stored separately from partner-visible data
No aggregate or anonymized version of your Vault data is ever shared with your partner
AI processes your Vault data only to generate analysis and suggestions for you personally
Vault data is encrypted at rest
All access to Vault data is logged for security auditing

The only person who can see your Vault Zone data is you. This is enforced at the technical architecture level, not merely by policy.

4. What Your Partner Can See

Your Partner CAN See:

Translated messages (after you approve them through the Looking Glass)
Your considered response (after you approve it through the Airlock)
Topic categories and status
Aggregate relationship health metrics (at higher tier levels, with no individual attribution)

5. Data Storage and Security

All data is stored on secured servers with encrypted connections (TLS/SSL)
Passwords are hashed using bcrypt (one-way, irreversible)
Email addresses are encrypted using AES-256 encryption at rest
Session tokens are stored as SHA-256 hashes
Database access is restricted by role-based permissions
We conduct regular security reviews of our infrastructure

6. AI Processing

The Service uses the Anthropic Claude API to process messages and emotional reactions. When your data is sent to the AI service:

Only the minimum necessary context is included
Anthropic does not use your data to train their models (per their API terms)
AI responses are not stored by the AI provider
Your raw Vault Zone data is sent to the AI only for analysis returned directly to you

7. Data Retention

Active account data is retained for the duration of your subscription
Vault Zone data is retained until you delete it or delete your account
Session logs are retained for 90 days for security purposes
Password reset tokens expire after 1 hour and are then deleted
After account deletion, all personal data is removed within 30 days

8. Your Rights

You have the right to:

Access: View all data associated with your account through the application
Correction: Update your profile information at any time
Deletion: Request complete deletion of your data through the Settings screen
Portability: Request an export of your data
Opt out of email: You can choose not to provide an email address during registration

9. Children's Privacy

The Service is not intended for anyone under the age of 18. We do not knowingly collect personal information from minors. If we learn that we have collected information from a person under 18, we will delete that information promptly.

10. Push Notifications

If you opt in to push notifications:

We send notifications only for partner activity and system events
Notifications never contain message content, only that activity occurred
We never send pressure-creating alerts like "your partner hasn't responded"
You can disable notifications at any time through your device settings

11. Third-Party Services

Anthropic (Claude API): AI message translation and emotional analysis
Apple App Store / Google Play Store: Subscription billing
Expo: Push notification delivery
Postmark: Transactional email delivery (password resets only)

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the Service at least 30 days before the changes take effect.

13. Contact Us

For questions or concerns about this Privacy Policy or our data practices:

Investigate Health Publishing LLC
Email: george@investigate.health
State: Pennsylvania