Privacy Policy
Version 1.3 - 7 September 2026
Applies to temet.co.uk, app.temet.co.uk and associated mobile applications
Who We Are
Temet is a personal development product built and operated by Aayush Gupta. Our product is accessible at app.temet.co.uk and temet.co.uk and is primarily intended for users in the United Kingdom.
If you have questions about this policy or how your data is handled, contact us at: privacy@temet.co.uk
What This Policy Covers
This policy explains what personal data Temet collects, why we collect it, how we use it, how we protect it, and what rights you have over it. It applies to everyone who creates an account and uses the Temet product.
This policy is written to be read, not to be skipped. It reflects what the product actually does.
What Data We Collect and Why
1. Account data
When you create an account, we collect your email address and a password (stored as a secure hash; we never store your password in plain text). We use this to identify you and allow you to sign in.
Legal basis: Contract. This data is necessary to provide the service.
2. Assessment responses
Temet builds a profile of you through several assessment instruments: a personality assessment (Big Five), an orientation assessment, a state check-in, a Triple Harmony diagnostic, and a thinking style assessment. Your responses to these assessments are stored and used to generate your personal profile.
These responses are the core data that makes Temet work. Without them, the product cannot produce meaningful output for you.
Assessment responses may reveal sensitive information about your wellbeing, emotional state, beliefs, or personal life. Where this is special-category data under UK data protection law, we rely on your explicit consent to process it for the purposes described in this policy.
Legal basis: Consent. Special-category condition where applicable: explicit consent.
3. Journal entries
If you use the Express dimension to journal, your written entries are stored. Journal entries are treated as the most sensitive data on the platform.
Journal entries are encrypted at rest using AES-256-GCM encryption. This means that even if our database were compromised, your journal text would be unreadable without the encryption key. The key is held by Temet and used only to deliver the service to you, specifically to pass your journal text to our analysis system when you request analysis of a session.
Journal entries are never used for advertising, never sold, and never shared with third parties except as described in the “How We Share Data” section below.
Legal basis: Consent. Special-category condition where applicable: explicit consent.
4. Self-declaration responses
During and after onboarding, you may answer a small number of targeted questions about your life, values, and patterns. These answers are stored and used to personalise the output you receive, specifically passed to our analysis system alongside your assessment data to produce more relevant readings and recommendations.
Legal basis: Consent. Special-category condition where applicable: explicit consent.
5. Demographic information
During onboarding, we ask optional questions about your age range, professional role, wellness goals, daily time availability, and reflective preferences. This information is used to personalise recommendations and analysis. It is not used for advertising.
Legal basis: Consent.
6. Usage behaviour
We record how you use the product: which features you engage with, content you read or save, goals and habits you create, and how consistently you return. This data is used to improve your personalised experience and to understand how the product is being used in aggregate.
We do not use this data for advertising. Where you choose optional analytics or personalisation preferences at signup, we store those preferences with your account.
Legal basis: Legitimate interests for service improvement and reliability; consent where we ask for optional preferences.
7. Technical data
When you use Temet, we receive standard technical information: your IP address, device type, browser or app version, and timestamps of activity. This is used for security, debugging, and maintaining service reliability.
Legal basis: Legitimate interests.
8. Marketing preferences
At signup, you can choose whether to receive product tips, updates, and inspiration by email. This is optional. We store your choice with your account and use it to decide whether to send those communications.
Legal basis: Consent.
How We Use Your Data
Your data is used for the following purposes only:
- To generate your personal profile readings (Traits, Orientation, State, Triple Harmony, Thinking Style)
- To generate your True North recommended direction and plan
- To analyse your journaling sessions when you request analysis
- To personalise content recommendations in the Explore dimension
- To track your goals, habits, and progress in the Evolve dimension
- To detect meaningful changes in your profile over time (drift detection)
- To improve the quality of the product through aggregate, anonymised analysis
We do not use your data for advertising. We do not build advertising profiles. We do not sell your data.
Automated Profiling and Recommendations
Temet builds an automated personal-development profile from your assessment responses, journal sessions, self-declaration answers, demographic context, and usage patterns. This profile is used to generate readings, recommendations, and reflective prompts inside the product.
These outputs are informational and for self-directed reflection. Temet does not make decisions about your legal rights, employment, credit, healthcare, immigration, insurance, or other similarly significant matters. You decide whether to act on any insight or recommendation.
How We Process Your Data Using AI
Temet uses AI language models to generate certain outputs: your profile readings, your True North plan, journal analysis, and personalised recommendations.
When you request one of these outputs, relevant portions of your data (assessment scores, journal text, self-declaration responses, demographic information) are sent to an AI language model for processing. The model returns a text response, which Temet displays to you.
We use Fireworks AI as our primary AI infrastructure provider. Through Fireworks, we use hosted AI language models, including hosted DeepSeek models, to generate responses, process relevant user context, and provide personalised recommendations. If Fireworks cannot complete a request before returning any response, Together AI may process the same relevant request as our configured fallback. We use OpenAI for safety screening.
We use these providers to process your request and return a response. We do not use your data to train Temet models, and we do not opt in to provider model training for your submitted content. Together AI’s Zero Data Retention setting is enabled for Temet: Together states that submitted prompts and outputs are not stored or used for training or secondary purposes beyond providing the service. Fireworks states in its public data terms and security documentation that customer prompts and outputs are not used to train shared or foundation models, and that zero data retention applies by default for open models, subject to Fireworks’ documented settings and exceptions. Provider retention and handling are governed by their API or commercial data terms and settings.
Fireworks makes public trust and data-processing materials available, and provides additional customer-only security and compliance materials through its Trust Center under appropriate access controls. Temet does not republish private vendor reports. You can review Fireworks’ public Trust Center, Zero Data Retention documentation, and Data Processing Addendum.
How We Share Your Data
We share your data with the following categories of third parties only:
Infrastructure providers
Supabase (database and authentication), Google Cloud Run (application hosting), Cloudflare (custom-domain routing), Upstash Redis (rate limiting and cache support), and Sentry (error monitoring). These providers help store, serve, protect, and operate the service.
AI language model providers
Fireworks AI, Together AI, and OpenAI. Relevant portions of your data are sent to one of these providers to generate personalised outputs or perform safety screening, as described above. Together hosts its DeepSeek model on Together infrastructure; Direct DeepSeek API processing is not used in the current production configuration.
Error monitoring
Sentry (EU data storage selected). We send error events (information about technical failures) to Sentry so we can identify and fix problems. Error events do not include your journal text or assessment responses. They may include an anonymised session identifier to help us trace the source of an error, but this identifier is not linked to your name, email, or personal profile.
Public marketing-site analytics
Plausible Analytics handles anonymous aggregate traffic measurement for our public marketing website only. It does not process logged-in account, profile, assessment, journal, or True North data.
We do not share your data with advertisers, data brokers, or any party not listed here.
Where Your Data Is Stored
Your core application data is stored in Supabase’s London, UK region. The application is hosted on Google Cloud Run in London, UK. Cloudflare may process request metadata at the network edge to route traffic for our custom domain. Our error monitoring uses Sentry’s EU data storage. AI providers may process requests outside the UK or European Economic Area depending on their infrastructure and the provider used for a particular request.
Public marketing-site analytics is processed by Plausible's EU-hosted analytics service. It receives aggregate traffic metadata from the public site only, not logged-in product content.
Temet is operated by a founder who may access operational systems from outside the UK, including India, when needed for support, debugging, security, or service operation. This access is limited to what is necessary. Where we use external providers that involve international transfers, we rely on their data-processing terms and appropriate transfer safeguards where applicable, such as standard contractual clauses and the UK international data transfer addendum.
How We Protect Your Data
Encryption at rest
All data stored in our database is encrypted at rest using industry-standard encryption provided by our infrastructure provider.
Journal encryption
Journal entries receive additional application-level encryption (AES-256-GCM) before being stored in the database. This is a second layer of protection beyond standard database encryption.
Encryption in transit
All data transmitted between your device and our servers uses TLS (Transport Layer Security).
Access controls
Your data is protected by Row-Level Security at the database level. This means that database queries are automatically scoped to your account; no user can access another user's data.
No casual access
We do not routinely browse user data. As the sole operator of this product, the founder may need to access data to debug technical issues, but this access is deliberate, limited to what is necessary, and not routine.
Your Rights
Under UK GDPR and applicable data protection law, you have the following rights:
Right of access
You can request a copy of the personal data we hold about you.
Right to rectification
If any information we hold about you is inaccurate, you can ask us to correct it.
Right to deletion
You can delete your account directly from the app. Associated personal data is permanently removed. We may retain non-identifying deletion analytics that cannot be linked back to you. Deletion is irreversible. Data cannot be recovered after deletion.
Right to data portability
You can request a copy of your personal data by contacting us at privacy@temet.co.uk. We will compile and send your data to your registered email address within 30 days. Please note: data requests must be made before account deletion. Once your account is deleted, your data is permanently removed and cannot be exported.
Right to restriction of processing
In certain circumstances, you can ask us to limit how we use your personal data while a concern is being checked or resolved.
Right to withdraw consent
Where we process your data on the basis of consent, you can withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing before withdrawal.
Right to object
You can object to processing based on legitimate interests.
Rights related to automated decision-making and profiling
You can ask us about profiling that affects you. Temet does not make solely automated decisions that produce legal or similarly significant effects about you.
To exercise any of these rights, contact us at privacy@temet.co.uk. We will respond within 30 days.
If you are not satisfied with how we handle your data or your rights request, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk.
Data Retention
We keep your data for as long as your account is active. If you delete your account, your personal data is permanently removed, with the exception of:
- Non-identifying, aggregated deletion analytics that cannot be linked back to you
Technical logs, security records, error events, and backup copies are kept only for as long as needed for security, debugging, service reliability, legal compliance, or provider backup cycles. We keep this under review and avoid keeping personal data longer than necessary.
Consent
When you create an account, you are asked to give explicit consent to the processing of your personal data as described in this policy. You must actively tick a consent checkbox; it is not pre-ticked.
We record the date and version of this policy at the time you give consent. If we make material changes to how we process your data, we will notify you and, where required by law, ask for fresh consent.
You can withdraw consent at any time by deleting your account or contacting us at privacy@temet.co.uk.
Cookies
Temet uses only cookies strictly necessary for secure sign-in and session management in the logged-in product. We do not use advertising cookies, tracking cookies, or third-party analytics cookies in the logged-in product.
Our public marketing website uses Plausible Analytics for anonymous, aggregate website traffic measurement. Plausible does not use cookies or persistent identifiers. It does not track people across websites, devices, or days. Plausible is not used for advertising or to build user profiles, and it is not used inside the logged-in Temet product.
Changes to This Policy
If we make material changes to this policy, we will notify you by email or display a notice in the product where appropriate.
The version history of this policy is maintained internally.
Contact
This policy was last reviewed and updated on 7 September 2026.