Service information · November 2, 2026

Privacy and your data

See where your records are kept, what is shared, and how to delete them.

What do we store?

We process Google account identification for sign-in, answers and corrections you write or approve, roadmaps, and information for resuming your work. Drafts and material awaiting save confirmation are also processed. We do not receive your Google password.

Where are records kept?

Records are kept in the service’s Cloudflare storage by default. Sign in to the same account to access them on desktop and mobile. The current production storage can be read by the server and operator; it is not storage that only you can decrypt. Signing in with Google does not save your records to your personal Drive.

What is shared with ChatGPT?

The Self Compass connection reads relevant records under your connection permissions. Invoking the connection can send records to ChatGPT. New answers and corrections are saved after you review and approve a save candidate. It does not automatically copy your entire ChatGPT conversation. Conversations kept inside ChatGPT follow OpenAI’s separate settings and policies.

Why do we process it?

To sign you in, connect records across devices, retrieve, save, correct and resume records you request, diagnose failures and protect the service. Personal answers are not included in payment records or security logs. Retention periods and separate processing by external services are explained below.

What goes into error and security records?

When the service is slow or a request fails, server diagnostic records contain the operation, response status, elapsed time and outcome. These diagnostic records exclude full URLs, query parameters, request bodies, answers and account identifiers. To limit excessive requests, we also process hashes derived from connection IP or network information, or account identifiers. Hashing alone does not make this information anonymous. On Android, the Google Play Billing SDK sends usage and diagnostic information to Google, including API usage, success, failure and service connection issues. Its transport includes device model, operating system, language and network information. This supports billing-library performance improvements and error support. This is separate from our server diagnostics; we do not promise that Google's complete collection or retention matches our server.

How is purchase information handled?

Sales are currently disabled. The payment features being prepared use Lemon Squeezy on the web and Google Play in the Android app. Before granting or restoring access, the service verifies purchases with the payment provider and processes account, product and transaction references, purchase status, payment time and access expiry. Your answers, conversations and reports are not sent to payment providers.

What if purchase confirmation is interrupted?

If Google Play purchase confirmation is interrupted, purchase proof is temporarily encrypted on the server for retries. The server can read it for recovery. The proof is removed after confirmation, refund or revocation. Cleanup removes expired proof and leaves minimal review status. Retries and cleanup also run while new sales are disabled. Purchase proof is retained for at most 3 days from payment. Maintenance scheduled every 5 minutes removes expired ciphertext. Minimal unresolved status follows the transaction retention period.

Services that process information

Storage, sign-in, the ChatGPT connection and payments have different roles. These links do not load external sites until you open them.

Cloudflare · Server and record storage: We use Cloudflare, Inc.’s Workers and D1. Account references, answers, corrections, drafts, roadmaps, purchase review status and connection information are processed to provide the service. Processing needed to operate the service is entrusted to Cloudflare; our records follow the deletion and retention periods below. Provider security and infrastructure records follow separate policies.
Privacy notice
Google · Sign-in: Google verifies your account. The Self Compass server uses the verified account reference to determine record ownership and does not receive your Google password. Signing in alone does not send answers to Google Drive. Google accounts and sign-in activity follow Google’s policies.
Privacy notice
OpenAI · ChatGPT conversations and connection: Connecting and invoking Self Compass in ChatGPT sends records within your permissions to OpenAI’s ChatGPT for the conversation. ChatGPT conversation retention, deletion and data use depend on your plan and account or workspace settings. Deleting your Self Compass account does not delete copies in ChatGPT.
Privacy notice
Google Play · Android payments and diagnostics: Google processes app purchase, restoration and refund verification, and billing SDK usage and diagnostics. Self Compass receives transaction information needed to verify access; answers, conversations and reports are not sent to payment providers. Payment and SDK records also follow Google’s own retention and deletion policies.
Privacy notice
Lemon Squeezy · Planned web payments: Web checkout is disabled. Once enabled, using checkout sends billing contact, transaction and payment-method information to Lemon Squeezy and its payment processors. Self Compass processes references and status needed to verify a purchase, not your answers. We will not offer checkout before verifying sales approval and the actual checkout terms.
Privacy notice

Can information be processed abroad?

Record storage, ChatGPT connections, sign-in and payments involve different providers. The current storage is not configured to remain exclusively in South Korea. Expand a service below for what is sent, when, retention and your choices.

The Android app is published on Google Play, but record features remain in testing while country-specific processing is being checked. Use fictional information only; do not enter actual personal answers. App publication or storage permission does not complete international-transfer disclosures.

Cloudflare · Servers and record storage

Company and contact: Cloudflare, Inc. · Privacy contact: dpo@cloudflare.com. Cloudflare processes and stores records on behalf of Self Compass.
Information and purpose: Account identifiers, records and drafts you enter or approve, connection and purchase-verification state, and connection information. Used for sign-in, records across devices, saving, correcting, resuming and service protection.
When and how: Transferred over the network when you visit the site or request sign-in, reading or saving. Browser/app connections use HTTPS; traffic between Workers and D1 uses TLS.
Processing countries: The primary database was observed in Seoul, South Korea, on October 22, 2026. Page and API requests may be processed on the global network; Korea-only storage is not guaranteed. Recovery copies, support access and remaining scope are distinguished below.
Retention and deletion: Operational records follow the data-specific periods below. Account deletion removes personal records from operational storage; recovery history, statutory transaction records and minimal identifiers have separately stated exceptions. Cloudflare's own network and security records do not necessarily follow these periods.
Your choices: Leaving the site stops new page requests. You can avoid server records or delete your account to stop future record processing. Existing connection logs and retention exceptions are not all immediately erased. Public information pages do not require sign-in.

Storage location and processing scope are different

For international processing and storage needed to operate the service, we are assessing the disclosure/notification route under Article 28-8(1)(3) of Korea's Personal Information Protection Act. The observations and provider documents below do not complete every country-specific disclosure.

Record storage: A query on October 22, 2026 (Korea time) observed the primary database responding from Seoul, South Korea (ICN). Settings show Asia Pacific, no jurisdiction restriction and global read replication disabled. This observation does not guarantee future Korea-only storage or locate every copy.
Page and API requests: Page visits, sign-in and record reads/writes may be processed on Cloudflare's global network. Database location and request-processing location are different. The complete processing-country list applicable to this service is not yet established.
Recovery copies: Turning off read replicas does not turn off durability copies or recovery history. D1 recovery history is 7 days on the current Free plan. Separately created operator copies have a 30-day deletion deadline. All countries for durability and recovery copies remain unconfirmed. Account deletion does not promise simultaneous erasure of every copy.
Support and incident response: Published Cloudflare Group locations, including South Korea: United States, United Kingdom, Singapore, Australia, Germany, Portugal, France, Japan, Canada, Netherlands, United Arab Emirates, India, South Korea, Mexico, Malaysia, Sweden, Switzerland. These companies may provide support and engineering work under contractual access controls. This list is not a history of countries that actually accessed our records or a map of D1 copy storage, and does not mean every company receives our records. The support-access countries and subprocessor scope applicable to this service remain under review.
Connection and security records: Self Compass server diagnostics contain operation, response status, elapsed time and outcome, excluding answers, request bodies and account identifiers. Abuse-prevention identifiers and Cloudflare's own network/security records are separate. In its October 22, 2026 reply, Cloudflare described Portland, United States, and Amsterdam, Netherlands, as core centers for dashboard settings, product configurations, logs and analytics. This does not mean answers, D1 or recovery copies are stored only in those two countries. All processing countries and retention periods for provider-owned records remain under review.

Still to establish: request-processing countries, recovery-copy storage countries, support/subprocessor access scope, and the countries and retention of provider-owned security records. Use fictional test information only while this scope remains unconfirmed.

Provider privacy policy

OpenAI · Optional ChatGPT connection

Company and contact: For ChatGPT users outside the EEA and Switzerland, including Korea, the privacy controller is OpenAI OpCo, LLC; in the EEA and Switzerland it is OpenAI Ireland Limited. Privacy request portal: privacy.openai.com. ChatGPT processing follows your separate OpenAI terms and settings.
Information and purpose: Answers, correction history, interpretations and resume position that you allow the connection to read are used in the conversation. Excluded answers and their related interpretations are omitted. Signing into the website alone does not automatically copy records into ChatGPT.
When and how: After you authorize the Self Compass connection, records are sent over HTTPS when a ChatGPT tool requests them. Connection permission is separate from final approval of a proposed save.
Processing countries: OpenAI describes processing in the United States and countries where its affiliates and providers are located. This does not establish every country for an individual account or workspace. We do not promise US-only storage.
Retention and deletion: ChatGPT conversation retention, training use and deletion follow your plan, data settings and OpenAI policy. Self Compass retention periods do not govern those copies, and deleting Self Compass does not delete them.
Your choices: You can decline the ChatGPT connection or revoke its permission in Self Compass connection settings. Revocation stops new tool access; web records remain separately available. Manage conversations already transferred in ChatGPT itself.

Provider privacy policy

Google · Sign-in and Android payments

Company and contact: Google LLC and the Google entities applicable to your account or purchase region process Google-service information. Your account terms and receipt identify the applicable entity. Privacy request channels are in Google's policy below.
Information and purpose: Sign-in uses identity information needed to verify your account. Android payments involve product, transaction and purchase proof, plus SDK usage and diagnostics. Your reflection answers and reports are not sent to Google for sign-in or purchase verification, and this is not personal Drive storage.
When and how: HTTPS requests occur during Google sign-in, purchase, restoration and purchase rechecks. The Android billing SDK separately sends usage and diagnostic information. The website does not run the Android billing SDK.
Processing countries: Google describes servers in multiple countries. We do not assume identical processing countries for account sign-in, Play purchases and the SDK, or restrict the description to the US. The full applicable scope still needs confirmation.
Retention and deletion: Self Compass transaction and sign-in data follow the periods below. Google's own account, purchase and SDK records follow its policies and legal obligations; Self Compass cannot guarantee identical deletion times.
Your choices: You can decline Google sign-in, but server records then remain unavailable. Android purchases are optional and require purchase authorization. Account deletion and purchase cancellation/refunds are separate. See Google's official policy for privacy requests.

Provider privacy policy

How long is it kept?

Retention depends on the purpose below. Expired temporary material is removed by scheduled maintenance, so access expiry and deletion of every copy can differ. A maintenance failure or backlog can delay cleanup.

Free-trial duplicate prevention: Only after you explicitly start a trial and consent, an account-linked identifier, start and end times and consent version are retained for 365 days after the trial ends, including after account deletion. No answers, email or sign-in tokens are included. Scheduled maintenance removes expired entries. The 7-day trial and 90-day pass cover saving new records; they do not set the retention period of existing records.
Answers, corrections and drafts: Kept while you use the service and removed from operational storage when account deletion completes. Rejoining does not automatically restore them.
Material awaiting save confirmation: Access expires after 15 minutes. Cancellation removes it; maintenance scheduled every 5 minutes removes expired material.
Sign-in and connection information: Sign-in attempts: 10 minutes. Web sessions: 2 hours. ChatGPT tool permissions: up to 8 hours. Sign-out, disconnection or account deletion can end access earlier.
Purchase proof: At most 3 days from payment; removed earlier after confirmation, refund or revocation. Scheduled cleanup removes expired ciphertext.
Transactions and purchase review status: 5 years from creation or the last transaction state change. Valid access is preserved; purchase links needed by the account’s retained transactions are removed after those records are cleared. Kept separately from personal answers.
Minimal deletion references: Kept while the service operates to check deletion results and block retired requests. Only pseudonymous account references, the deletion date and a hash of the confirmation reference remain, with no answers, email or sign-in tokens.
Recovery history and separate copies: Cloudflare D1 recovery history is 7 days on the current Free plan. Separately created operator copies carry a 30-day deletion deadline and are cleared with a dedicated tool; restoration does not extend it. Existing operator copies are also registered with deadlines based on their original creation time; unexpired copies are preserved. You manage copies you download.

How can I check a deletion result again?

Before requesting deletion, a random confirmation reference is temporarily kept in this browser so you can resume checking the result. It contains no answers or email address. Reopening the screen checks the result without requesting deletion again. The reference is removed after completion is confirmed or you stop checking. If browser storage is blocked, you can proceed after separate guidance and consent, but checking cannot automatically resume after you close the screen.

Your choices

You can review or cancel a save, correct saved answers, download a copy, disconnect ChatGPT, or delete your account and records. Copies already downloaded or shared with another service need to be deleted there separately. Avoid including unnecessary sensitive information or other people’s personal data.

Operator: 센티오(Sentio)
Privacy enquiries: sentio4545@gmail.com