Privacy Policy

The data controller is the operator of Found The Way. You can contact us about privacy at hello@foundtheway.me.

• Account details — your email and password when you sign up, handled by our authentication provider (Supabase). Used to save your progress and let you sign in from any device. Legal basis: performance of a contract.
• Career DNA data — your quest answers, trait scores, XP, streak, achievements, simulation results and career matches. This is the core profile the app builds as you play. Legal basis: performance of a contract.
• Profile details — age, stage, field of study, current field and location, if you choose to add them. Used to tailor suggestions. Legal basis: consent.
• CV content — if you upload or paste a CV, its text is processed by our AI provider (Anthropic) to generate an analysis (headline, skills, experience level) that feeds into your Career DNA. Legal basis: consent.
• Coach conversations — messages you send to Nova, our AI coach, are processed by Anthropic to generate a response, along with relevant Career DNA context so the advice is personalised. Legal basis: consent.
• Anonymous research data — if you tick the optional research consent box at signup, your trait data (never your name or email) may be included in aggregate career-trend research. You can withdraw this at any time in account settings. Legal basis: consent.
• Payment data — handled directly by Stripe when you subscribe to Plus or buy a Blueprint. We never receive or store your card details.
• Browser storage — your Career DNA is also cached in your browser's local storage so the app works instantly without waiting on a network call. This stays on your device.
• Technical data — standard analytics and server logs (e.g. page views, browser type) generated by our hosting provider to keep the site working and to understand usage at a high level.

We do not sell your data. We use a small number of trusted providers that process data on our behalf:

• Supabase — authentication and database storage.
• Anthropic — AI processing for CV analysis, Coach Nova and session insights.
• Stripe — payment processing for Plus and Blueprint purchases.
• Vercel — website hosting, analytics and server logs.

Some providers may process data outside the EU/EEA. Where that happens, the transfer is covered by appropriate safeguards such as the EU Standard Contractual Clauses or an adequacy decision.

We keep your account and Career DNA data for as long as your account is active, so your progress is preserved between sessions. If you delete your account, we delete your personal data within a reasonable period, except where we're required to keep records (e.g. payment history) for legal or accounting reasons.

Under the GDPR you have the right to access, correct, delete, restrict or object to our use of your data, and to data portability. You can also withdraw consent at any time and lodge a complaint with your local data protection authority. To exercise any of these, email hello@foundtheway.me.

Found The Way is intended for people old enough to make independent career decisions. We do not knowingly collect data from children under 13.

We may update this policy from time to time; we'll change the "last updated" date above when we do.