Privacy Policy

The Embodiment Lab is a reflection tool. We hold the work you upload and the sessions you record so you can come back to them. We don't sell your data. We don't run ads. Your camera stays on your device.

• Account info — your email and name, either from email/password sign-up or from Google sign-in.
• Your work — the artifacts you add (titles, descriptions, and any text or files you attach).
• Session recordings & transcripts — the audio of your spoken defenses and the text transcripts generated from them.
• Usage data — passes used, minutes spent, which rooms you visit. Used to run your account and enforce fair-use limits.
• Support reports — anything you write in a bug report or support message.

During a Live Defense your audio is streamed to a voice provider so the persona can hear and respond in real time, and a transcript is generated for your reflection. We do not create or store a biometric voiceprint of you. Your voice is used to power the conversation and produce the transcript — that's it.

Presence Mode is local only. The video feed stays on your device. It is not recorded, not uploaded, not streamed anywhere, and not seen by us or any third party.

• To generate your questions, reflections, and Defense Cards.
• To run your account, trial, and passes.
• To respond when you contact support.
• To keep the service secure and working (basic diagnostics, error logs).

We never sell your data. We don't use it for advertising. We don't share your artifacts or sessions with other users.

To run the Lab we send limited data to trusted processors:

• Supabase — database, authentication, and file storage.
• ElevenLabs — real-time voice conversations during Live Defense.
• AI model providers — to generate questions, reflections, and Defense Card text from your transcripts.
• Stripe — payments. Your card details go straight to Stripe and never touch our servers.
• Resend — transactional email (welcome, receipts, support responses).
• Hosting — edge hosting for the web app.
• Plausible Analytics — privacy-friendly, cookieless usage analytics. No personal data, no cross-site tracking, no advertising profiles.

Your artifacts, reflections, and account persist so you can return to them. Recordings and transcripts stay in your account until you remove them or ask us to. To request deletion or an export of your data, use the Report a problem button in the app — our team reads every one. You can also email support@fig8lab.app — we handle these manually right now and will confirm when it's done.

Every account's data is isolated at the database level (row-level security), so one user can never read another user's artifacts, sessions, or reflections. Access requires authentication. We run automated security checks against the live database to catch policy regressions.

The Lab is intended for adults (18+) and is not directed to children under 13. If you believe a child has created an account, contact us and we'll remove it.

The fastest way to reach us is the Report a problem button in the app — our team reads every one. For privacy requests, deletion/export requests, or anything that needs email, write to support@fig8lab.app.