Privacy Policy
We take the privacy of your psychological data seriously. This policy explains what we collect, why, and how we protect it — in plain language.
The short version
You apply for a reading. If accepted, you complete a 2,160-card assessment over six stages. We store your responses and generate your Reading and your Anatomy using AI, and every reading is reviewed by a human before release. We use your email to run your application, deliver your results, and remind you about your own unfinished trace — nothing else. We never sell your data. You can request deletion at any time.
1. Who we are
PsychoQuant is operated by [Your registered business name and address]. For data protection purposes, we are the data controller. You can contact us at support@enkian.com.
2. What we collect and why
Application data
- Your name, email, and written answers on the application form — to review your application and, if accepted, to deliver the service.
- Applications we decline are deleted within 90 days.
- Legal basis: Steps prior to a contract, and legitimate interest in operating an application-based service.
Assessment responses
- Your card responses (yes / no), response timing per card, the exact text of each card as shown to you, and your chosen pace.
- Legal basis: Explicit consent. Assessment responses may constitute psychological profiling data, a special category under UK GDPR. You can withdraw consent at any time (Section 8).
Generated results
- Your Reading and your Anatomy, generated from your responses.
- Legal basis: Explicit consent (as above).
Payment and delivery
- Stripe customer and transaction records — we never store card numbers. See Stripe’s privacy policy.
- Delivery address — your bound Anatomy is a physical book. Your address is used solely for courier fulfilment and deleted after delivery is confirmed.
- Legal basis: Contract performance.
Referral cookie
- If you arrive via a partner’s link, a single first-party cookie (
deep_ref, 90-day expiry) records which partner referred you, so they can be credited if you purchase. - It tracks nothing else, and no advertising or third-party analytics cookies are used.
- Legal basis: Legitimate interest.
Technical data
- Authentication and session tokens — to keep your trace connected to you.
3. How we protect your data
All data is encrypted in transit (TLS) and at rest. Access is deny-by-default: your responses are readable only by our internal systems, never directly by the browser. Row-level security policies ensure authenticated users can only access their own data.
Your responses are recorded exactly as shown to you — the card text you saw is stored with each response and cannot be retrospectively rewritten. If a card’s wording is ever updated after you answered, your record still reflects what you actually saw.
4. AI generation and human review
Your Reading and Anatomy are generated by an AI model from your responses, and reviewed by a person before release to you. Our AI provider is used in a configuration that does not permit your data to be used to train their models, and does not retain your data between sessions. Each generation is independent.
5. Who processes your data
| Provider | What they process | Where | Their policy |
|---|---|---|---|
| Supabase | Database hosting | EU (eu-north-1, Stockholm) | supabase.com/privacy |
| Stripe | Payment processing | EU / US | stripe.com/privacy |
| Anthropic | AI generation of your Reading & Anatomy | US | anthropic.com/privacy |
| Postmark | Transactional email delivery | US | postmarkapp.com/privacy |
| Cloudflare | Website hosting and delivery | Global CDN | cloudflare.com/privacy |
| Bookbinder & courier | Printing, binding, and delivery of your bound Anatomy | UK | [to be named when appointed] |
All processors are bound by data processing agreements. Where data is transferred outside the UK / EEA, appropriate safeguards are in place (Standard Contractual Clauses or equivalent).
6. How long we keep your data
- Active accounts: retained so you can return to your trace and your results.
- Declined applications: 90 days, then deleted.
- Delivery addresses: until delivery of your bound Anatomy is confirmed, then deleted.
- Payment records: 7 years (UK tax and accounting law), anonymised where possible.
- On deletion request: your identity, responses, and results are permanently removed within 30 days.
7. Automated decision-making
Your results involve automated processing, but no result is released without human review — a person reviews every Reading before you receive it. You additionally have the right to contest any aspect of your results, to express your point of view, and to request further human review at any time.
To request further review, email support@enkian.com.
8. Your rights
Under UK GDPR, you have the right to:
- Withdraw consent — your responses and results will be deleted within 30 days. To withdraw, email us.
- Access your data.
- Rectify inaccurate data.
- Delete your data — permanent removal of your account and all associated data.
- Port your data.
- Object to processing in certain circumstances.
- Request human review of automated results (see Section 7).
- Complain to the Information Commissioner’s Office (ICO) at ico.org.uk.
To exercise any of these rights, email support@enkian.com. We will respond within 30 days.
9. Age restriction
Deep Map is available to individuals aged 18 and over. We do not knowingly collect data from anyone under 18.
10. Changes to this policy
We may update this policy from time to time. Material changes will be communicated by email to accepted applicants and active respondents. The “last updated” date at the top of this page will always reflect the current version.
11. Contact
Email: support@enkian.com
For complaints about data protection, you can also contact the ICO:
Information Commissioner’s Office · ico.org.uk · 0303 123 1113