**Sherpa Privacy Policy**

**Last Updated:** September 21, 2025

Your privacy is the foundation of Sherpa. You are trusting us with your personal journey, your goals, and your private thoughts. We take that trust seriously. Our commitment is to keep your data safe, secure, and to be completely transparent about how we use it.

This Privacy Policy outlines how Sherpa Labs, Inc. ("Sherpa," "we," "us," or "our") collects, uses, and protects your information when you use our services. If anything is unclear, or if you have any questions, please don't hesitate to contact us at **hello@sherpahabits.com**

**Our Privacy Commitment at a Glance**

We know legal documents can be dense. Here are the most important things you need to know, in plain English:

• **We DO NOT sell your data.** We will never sell your personal information to advertisers or data brokers.
• **Your goals and conversations are encrypted.** Sensitive entries like your goals, journal, and AI conversations are encrypted in storage to protect them. We treat them as strictly confidential.
• **You are in control.** You have the right to request the complete deletion of your account and all associated data at any time.
• **We use AI partners to power our features.** To provide AI coaching, we send your conversation data to third-party AI providers (like OpenAI or Anthropic). We take steps to protect your identity but cannot guarantee that all personally identifiable information is removed from the content you write.

**1. What Information We Collect**

We collect information to provide and improve our service to you. We encourage you to only provide data that is necessary for using Sherpa.

**a. Information You Provide Directly:**

• **Email Address:** Used for account login, security, and essential service communications.
• **Goals & Conversations:** Your goals, journal entries, and conversations with the Sherpa AI coach are the core of your experience. This data is stored securely and treated as highly confidential.
• **AI Artifacts:** Summaries, themes, or questions generated by the AI based on your entries are treated with the same level of security and confidentiality as your original entries.
• **Phone Number (Optional):** If you choose to set up features like SMS reminders, we will store your phone number.

**b. Information Collected Automatically:**

• **Usage Data:** We collect information about your activity, such as how often you log in and which features you use. This helps us understand what's working and how to improve the app.
• **Device & Browser Information:** We may collect standard technical information like your browser type and device metadata to ensure the app functions correctly and to diagnose technical issues.

**2. How We Use Your Information**

We use your data for the following purposes:

• **To Provide and Maintain the Service:** To operate your account, track your goals, power the AI coach, and deliver the core functionality of Sherpa.
• **To Improve Our Product:** We analyze anonymized and aggregated usage data to understand user needs and enhance our features.
• **To Communicate With You:** We may send you essential service-related emails (e.g., security alerts). Subject to your preference, we may also send you emails about new features or news relevant to your journey. You can opt out of promotional emails at any time.
• **For Safety and Legal Reasons:** To enforce our Terms of Service, comply with legal obligations, and protect the rights and safety of Sherpa, our users, and the public.

**3. How We Share Your Information**

We do not sell your data. We only share it in the following limited circumstances:

• **With Third-Party Service Providers:** We use trusted partners to help us operate our service, such as for authentication, payment processing (if applicable), and sending emails. They are only given access to the data necessary to perform their function.
• **With AI Partners:** To power the AI coaching features, we send data from your conversations to third-party AI API providers (such as OpenAI and Anthropic). By using Sherpa, you acknowledge and agree to the privacy policies of these providers. We attempt to remove direct personal identifiers before sending data, but we cannot guarantee that identifiable information you include in your free-form text is not sent.
• **For Legal Requirements:** We may disclose your information if we believe it's reasonably necessary to comply with a law, regulation, or legal request; to protect the safety of any person; to address fraud or security issues; or to protect our rights.
• **Anonymized & Aggregated Data:** We may share data in a completely anonymized or aggregated form (which cannot be used to identify you) for our own internal business purposes, such as product improvement analysis.

**4. Security of Your Information**

We take the security of your data seriously and implement appropriate technical and organizational safeguards to protect it. Sensitive data, including your goals and conversations, is encrypted in storage. While we strive to use commercially acceptable means to protect your information, no method of transmission over the Internet is 100% secure. In the event of a security breach, we will notify affected users as required by law.

**5. Your Privacy Rights & Choices**

You are in control of your personal information. You have the right to:

• **Access Your Information:** You can request a copy of the personal data we hold about you.
• **Request Deletion:** You have the right to request the complete deletion of your account and all associated data.
• **Opt-Out of Communications:** You can unsubscribe from our promotional emails at any time by using the link provided in the email.

To exercise any of these rights, please contact our support team at **hello@sherpahabits.com**. We may need to verify your identity before processing your request to protect your data from unauthorized access.

**6. Children's Policy**

Sherpa is intended for adults only. You must be at least eighteen (18) years of age to use our services. We do not knowingly collect personal information from anyone under the age of 18. If we become aware that we have collected data from a minor, we will take steps to delete that information immediately.

**7. International Users**

Our services are operated from the United States. If you are using Sherpa from outside the U.S., please be aware that your information will be transferred to, stored, and processed in the United States, where our servers are located. Data protection laws in the U.S. may differ from those in your country.

**8. Changes to This Privacy Policy**

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date at the top. Your continued use of Sherpa after any changes constitutes your acceptance of the new policy.

**9. How to Contact Us**

If you have any questions, comments, or concerns about this Privacy Policy, please contact us:

**By Email:** privacy@yoursherpa.app