Privacy Policy

Effective Date: August 6, 2026

Odyssey by Phantom Labs ("we," "our," or "us") provides an AI-powered life coaching application. This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights regarding your data.

1. Information We Collect

Anonymous Accounts

When you first open Odyssey, we create an anonymous account for you automatically so the app works immediately without a signup screen. This is a real account on our servers, identified by a random ID rather than by your name or email. From that point, your goals, messages, check-ins, and coaching data are stored on our servers under that account, exactly as described below. You can attach an email or an Apple/Google identity to it later, at which point the same account becomes yours to sign back into.

Account Information

• Name and email address (if you choose to register or sign in via Apple/Google)
• Profile photo URL (if signing in with Google)
• A profile photo, if you choose one from your device. The image you select is uploaded to our storage and is not used for anything other than displaying your profile. We do not access your photo library otherwise.
• Authentication credentials (passwords are hashed and never stored in plain text)

Coaching Data

• Goals, descriptions, and target values you set
• Motivations, future vision, and personal reflections you share
• Life satisfaction scores across areas like health, career, relationships, finances, and mindset
• Milestones, tasks, and progress tracking
• Belief reframes (old and new beliefs you identify)

Chat Messages

• Messages you send to your AI coach and the coach's responses
• AI-generated coaching notes about patterns, breakthroughs, and strategies that work for you

Check-ins & Wellbeing Data

The following data may include information about your mental and emotional wellbeing. We treat it with additional care and use it only as described in this policy.

• Daily mood and energy ratings (1-5 scale)
• Free-text reflections on how you're feeling
• Daily plans and completion status
• Streak and activity data

Device & Usage Information

• Device type, operating system, and app version
• App usage events (e.g., screens visited, features used)
• Session duration and engagement patterns
• Your device's vendor identifier (IDFV) — an identifier Apple scopes to apps published by Phantom Labs, which cannot be used to identify you inside another company's app
• Your IP address, used to approximate the country or region an install came from
• We do not collect precise or GPS location data, the advertising identifier (IDFA), or your contacts

Attribution & Advertising Measurement

If you install Odyssey after seeing an ad or following a link, we use AppsFlyer to understand which ad or link led to that install. This measurement uses your device's vendor identifier (IDFV), your IP address, and app events such as opening the app for the first time, viewing the paywall, or starting a subscription.

Those app events are forwarded to Meta so that Meta can measure how its ads perform. What is shared is the fact that an event occurred and the device it occurred on — never your chat messages, goals, check-ins, or reflections. Section 4 below describes what we deliberately do not collect for advertising purposes.

2. How We Use Your Information

• Personalized coaching: Your goals, reflections, and chat history are used to provide tailored AI coaching responses and track your progress
• Coach memory: The AI maintains notes about your patterns and preferences to deliver more relevant guidance over time
• Service operation: Account management, authentication, subscription processing, and rate limiting
• Product improvement: Aggregated, anonymized usage analytics to understand how people use the app and improve the experience
• Attribution and ad measurement: Install and app-event data is used to understand which ads or links bring people to Odyssey and how well those campaigns perform
• Notifications: Scheduled locally on your device for check-in reminders and streak alerts (no notification data is sent to external servers)

3. Third-Party Services

We use the following services to operate Odyssey. Each processes your data under their own privacy policies:

Supabase (Backend & Database)

• Stores your account, goals, chat messages, check-ins, and coaching data
• Handles authentication and session management (including anonymous accounts)
• Hosted on AWS infrastructure
• Privacy policy: supabase.com/privacy

Anthropic (AI Coaching)

• Your chat messages and goal context are sent to Anthropic's Claude API to generate coaching responses
• Data is processed via a secure server-side function — your device never communicates directly with Anthropic
• Your conversations are not used to train Anthropic's models
• Anthropic's API data retention policies apply
• Privacy policy: anthropic.com/privacy

RevenueCat (Subscriptions)

• Manages subscription status, purchase history, and billing
• Receives your user ID, device identifier, and purchase data
• Does not receive your coaching data or chat messages
• Privacy policy: revenuecat.com/privacy

PostHog (Analytics)

• Tracks anonymized usage events (e.g., "onboarding completed," "message sent")
• Receives your user ID, device type, and app version
• Does not receive your chat messages, goals, or personal reflections
• US-based servers
• Privacy policy: posthog.com/privacy

AppsFlyer (Install Attribution)

• Measures which ad or link led to your install of Odyssey
• Receives your device's vendor identifier (IDFV), IP address, and app events such as first open, paywall view, and subscription start
• Does not receive your chat messages, goals, check-ins, or personal reflections
• Privacy policy: appsflyer.com/legal/services-privacy-policy

Meta (Advertising Measurement)

• The app events described above are forwarded to Meta through AppsFlyer so that Meta can measure the performance of ads it serves
• Receives those events and the associated device identifier
• Does not receive your chat messages, goals, check-ins, or personal reflections
• Privacy policy: facebook.com/privacy/policy

Apple (Authentication, Payments & SKAdNetwork)

• Processes in-app purchases and manages Apple Sign-In
• Odyssey also participates in SKAdNetwork, Apple's privacy-preserving attribution framework. SKAdNetwork reports install and conversion data to ad networks in aggregate form, with no identifier that would let anyone tie a conversion back to you or your device
• Privacy policy: apple.com/privacy

4. Tracking & Advertising Identifiers

Odyssey does not track you across other companies' apps or websites. Specifically:

• No IDFA. We do not collect or use Apple's Identifier for Advertisers, the device identifier that makes cross-app and cross-site advertising tracking possible
• No cross-app or cross-site tracking. None of the data we collect is used to build a profile of your activity in other companies' apps or on the web, and we do not sell your data or share it with data brokers
• No App Tracking Transparency prompt. Odyssey does not present Apple's "Ask App Not to Track" prompt, because it does not access the IDFA and does not combine your data with third-party data in order to target advertising to you. There is nothing for you to opt into or out of
• The vendor identifier (IDFV) described above is scoped by Apple to apps published by Phantom Labs and cannot be used to identify you inside another company's app

5. Data Storage & Security

• Your data is stored on Supabase's cloud infrastructure with encryption at rest and in transit
• A copy of your data is also cached locally on your device for offline access, protected by your device's built-in encryption
• Authentication tokens are short-lived and automatically refreshed
• We use row-level security policies to ensure users can only access their own data

6. Data Retention

• Your data is retained as long as your account is active, including anonymous accounts
• Chat history, goals, and check-ins are stored indefinitely while your account exists
• Daily plans older than 30 days are automatically cleaned up on your device
• If you delete your account (via Settings in the app or by contacting us), all associated data is deleted from our servers

7. Your Rights

You have the right to:

• Access your personal data — all your data is visible within the app
• Delete your account and all associated data — you can do this from Settings inside the app. If you cannot access the app, contact us at the email below
• Opt out of notifications at any time via the app's settings
• Export your data — contact us to request a copy

Anonymous accounts: If you are using Odyssey without having attached an email address, we have no way to identify your account by email. To delete an anonymous account, use the in-app deletion option in Settings.

8. Children's Privacy

Odyssey is not intended for users under 18. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided us with personal data, please contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or by email. Continued use of Odyssey after changes constitutes acceptance of the updated policy.

10. Contact Us