Privacy, plainly.

Shadow Work Guide (including the deployment at inagoodway.app) is run by People Work Life Ltd, a company registered in England, based in Ascot, United Kingdom. We are the data controller. Contact: rob@peopleworklife.com.

Your account — name, email address, a securely hashed password, and (only if you opt in to reminders) a verified phone number.

Your inner work — session transcripts with the AI companion, journal entries, parts and archetype work, assessments, check-ins, and any retreat journals and intake forms. We treat all of this as sensitive psychological data.

Retreat and billing records — if you facilitate, your retreat set-up and subscription state. We never see or store card numbers; payment details live with Stripe.

Technical records — sanitised error reports, and AI usage counts (token counts, never content). There are no advertising trackers.

Your data is stored server-side in a database hosted by Turso in the AWS eu-west-1 region (Ireland), encrypted in transit. Being honest about the state of things today:

• Retreat journal entries and retreat intake forms (medical, dietary, and emergency-contact details) are additionally encrypted at rest with AES-256-GCM.
• AI session transcripts, personal journal entries, and parts are protected by the database's own security but are not yet field-level encrypted. Extending encryption to them is on our roadmap.

Facilitators cannot read your AI sessions unless you explicitly switch on sharing — it is off by default. No one at People Work Life reads your reflections.

To make the app work, some of your data is processed by these companies on our behalf, under data-processing agreements:

• Anthropic (US) — your session messages, journal text you ask for a reflection on, and help/book chat questions are sent to Anthropic's Claude models to generate responses.
• ElevenLabs (US) — when guided audio is generated, the script text is sent to ElevenLabs for the voice.
• Turso (US company, data held in Ireland) — the database.
• Vercel (US) — hosting.
• Resend (US) — transactional email (magic links, retreat invitations, notifications).
• Twilio (US) — SMS/WhatsApp reminders and phone verification, only if you opt in.
• Stripe (US/IE) — facilitator subscription billing.
• Sentry (US) — error monitoring, with sanitised reports; we do not send your reflections to Sentry.

Sending content to the US-based providers involves an international transfer, made under the providers' standard contractual safeguards (the UK International Data Transfer Addendum or equivalent). Your content is not used to train AI models. We never sell your data.

Running your account rests on our contract with you. AI processing of your reflections rests on your explicit consent — the one-time consent moment before your first AI session — which you can withdraw at any time by deleting your account or emailing us. Reminders rest on your opt-in. Billing, security, and error monitoring rest on contract and legitimate interests.

Your sessions, journals, and parts stay until you delete them — there is currently no automatic expiry of session transcripts, and we say that plainly rather than imply otherwise. You can archive parts in the app, and you can delete your whole account — with everything in it — from your Profile page. Deletion is immediate and permanent.

Under UK GDPR you can ask us for a copy of your data, ask us to correct it, delete it, restrict or object to how we use it, or receive it in a portable format. Email rob@peopleworklife.com and we will respond within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk).

Shadow Work Guide is for adults. You must be 18 or over to use it.

If this policy changes in any way that matters, we will say so plainly in the app before the change takes effect. The date at the top is always the date of the last change.