BETAYou're testing the beta version
Aiua → Privacy Policy

Privacy Policy

Last updated: March 14, 2026

1. Our Commitment

Aiua is committed to full transparency about how we handle your information. This Privacy Policy explains what we collect, why we collect it, how we use it, and the rights you have over your data.

2. Who We Are

Aiua is a community-governed platform for daily guided self-reflection. We build an open, CC0-licensed human-values training dataset contributed voluntarily by people around the world.

Contact: aiuaai@proton.me · Website: aiua.earth

3. Information We Collect

3.1 Information You Provide

·Account information (username, email, password hash managed by Supabase Auth)
·Contribution content (written text or voice recording transcripts)
·Voice recordings (processed to text transcript; high-quality audio archived permanently on Arweave, not on our servers)
·Referral codes
·Shipping address (only if ordering merchandise)
·Payment information (processed by third-party providers; we do not store card details)

3.2 Information Generated by the Platform

·AI scores across 12 human-values dimensions
·AI reflection and AI Advisor responses
·Points, tier, and streak data
·SHA-256 content hash of each contribution
·Submission timestamps
·Language detected in your contribution

3.3 Technical Information

·Server request logs (IP address, timestamp, response code)
·Time spent on the contribution page (used for anti-bot detection only)
·Device type for PWA installation prompts

4. How We Use Your Information

4.1 To Operate the Platform

We use your information to authenticate your account, generate personalized daily prompts, score contributions, track points and tiers, and power the AI Advisor.

4.2 To Build and Publish the Dataset

The core purpose of this platform is the creation and publication of a CC0 1.0 Universal human-values dataset. Qualifying contributions (score ≥ 100/250) are exported to Hugging Face, anchored to the Cardano blockchain via weekly Merkle roots, and archived to Arweave.

Contributions in the public dataset are pseudonymous — your username and contributor ID are not included. Each entry is identified by an anonymous UUID.

Important: Once a contribution has been anchored on-chain or uploaded to Arweave, it cannot be fully deleted from those decentralized systems. Please reflect carefully before submitting.

4.3 To Send Notifications

If you opt in, we send daily reflection reminders and governance notifications (Voice tier and above) via web push or email.

4.4 To Prevent Fraud and Maintain Quality

We use time-on-page signals, SHA-256 content hash deduplication, AI-generated-content detection, and community reporting to maintain dataset integrity.

5. What We Do Not Do

·Sell your personal data to any third party
·Use your data for advertising or behavioral profiling
·Send marketing emails beyond auth confirmations and opted-in notifications
·Store voice recordings on our servers (Arweave only, for contributions scoring 130+)
·Use your contributions to train proprietary AI models
·Share your identity with dataset consumers

6. Data Sharing

6.1 Service Providers

·Supabase — database, authentication, row-level security
·Anthropic Claude — AI scoring, reflections, and Advisor responses (text only, not retained)
·OpenAI Whisper — voice transcription (audio processed, not retained)
·ElevenLabs — text-to-speech (text only, not retained)
·Vercel — application hosting
·Blockfrost — Cardano blockchain API
·Hugging Face — public dataset hosting

6.2 The Public Dataset

The CC0 dataset is the intended output of this platform. By submitting a qualifying contribution you explicitly agree to this release. Dataset consumers may use contributions for any purpose without restriction.

6.3 Third-Party AI Data Processing

Aiua uses third-party AI services to score contributions and transcribe voice recordings. We want to be transparent about exactly what happens to your data when it passes through these services.

Anthropic (Claude API): Your written and transcribed contributions are sent to Anthropic's Claude API for scoring, safety analysis, and content sanitization. Aiua uses the Anthropic API under commercial terms. Under Anthropic's commercial API policy, your data is never used to train Anthropic's AI models. This protection applies to all commercial API customers. Anthropic's data training policies apply only to consumer accounts (Free, Pro, and Max plans) — not to commercial API traffic like Aiua's. API logs are automatically deleted within 7 days.

OpenAI (Whisper API): Voice recordings are sent to OpenAI's Whisper API for transcription only. Under OpenAI's API terms, data submitted through the API is not used to train or improve their models. The audio is processed for transcription and is not retained by OpenAI beyond the processing window.

ElevenLabs (Text-to-Speech): If you use voice playback, your contribution text (sanitized version only) is sent to ElevenLabs for text-to-speech conversion. The generated audio is played back in your browser and not stored. ElevenLabs' API terms prohibit using API inputs for model training.

What this means: The only permanent record of your contribution exists in Aiua's own database, governed by this privacy policy — not by any third party's terms. Your reflections are never used to improve commercial AI models without your explicit, intentional consent. The entire purpose of Aiua's CC0 dataset is to create alignment training data through informed, voluntary participation — not through passive data collection.

Data flow summary: Your contribution → Claude API (scored, logs deleted in 7 days) → Sanitized by Claude (names/locations removed) → Stored in Aiua's database → Published to CC0 dataset (sanitized only) → Anchored on Cardano/Arweave (hash only). Voice contributions: Audio → Whisper API (transcribed, not retained) → Audio immediately discarded → Only transcribed text, hash, and attestation are saved.

6.4 Legal Requirements

We may disclose information if required by law or valid legal process. Where permitted, we will notify affected users before disclosure.

7. Data Retention

·Account data — retained until deletion, removed within 30 days of account deletion request
·Contributions in our database — deletable at any time from your journal
·Contributions in the CC0 dataset — cannot be removed from Hugging Face exports, Cardano anchors, or Arweave archives
·Voice recordings — never stored; transcribed in memory, hashed, then immediately discarded
·Server logs — retained for 90 days

8. Cookies and Tracking

·Authentication cookies — session-based, required for login
·localStorage — used for theme and TTS preferences only; not transmitted to our servers unless you explicitly save settings
·No third-party analytics
·No advertising or tracking cookies

9. Your Rights

Access and Portability

Download a complete archive of your contributions at any time from your Profile page.

Correction

Update your username and email from your profile settings.

Deletion

Delete individual contributions from your journal at any time. Request full account deletion by emailing aiuaai@proton.me — personal data removed within 30 days. Note: contributions already exported to the CC0 dataset, anchored on Cardano, or archived on Arweave cannot be removed from those systems.

Opt-Out

Disable push notifications from your browser settings or Profile preferences. Opt out of public leaderboard from Profile settings.

GDPR and CCPA

If you are located in the EU or California, you have additional rights including the right to object to processing and to lodge a complaint with a supervisory authority. Contact aiuaai@proton.me. We respond within 30 days.

10. Children's Privacy

Aiua is not intended for users under 16 years of age. We require age verification at signup and do not knowingly collect information from children. If you believe a child has submitted information, contact aiuaai@proton.me and we will delete it promptly.

11. Security

·All data transmitted over HTTPS/TLS
·Passwords managed by Supabase Auth (bcrypt hashing, never stored in plaintext)
·Row-level security policies on all database tables
·API keys stored as environment variables, never exposed client-side
·Content integrity protected by SHA-256 hashing

To report a security vulnerability, contact aiuaai@proton.me.

12. Changes to This Policy

We will post any updated Privacy Policy on this page with a new "Last updated" date. For material changes, we will notify users via email or platform notification. We will never retroactively change how already-published CC0 dataset entries are treated.

13. Contact

Questions or requests regarding this Privacy Policy:

Email: aiuaai@proton.me · Website: aiua.earth · Last updated: March 14, 2026

Aiua — Encode Your Values