Privacy Policy
Last updated: July 11, 2026
1. Introduction
This Privacy Policy explains how Eudaim ('we', 'us', 'our') collects, uses, stores, and protects your personal data. Eudaim is operated by Helios Chen, an individual sole proprietor. By using our Service, you agree to the practices described in this policy.
If you have any questions about this policy or your data rights, please contact us at support@eudaimn.com.
2. What we collect
Account information. Your email address, if you create an account or unlock a full report.
Assessment data. The conversation inputs you provide during the assessment and the personalized report generated from them.
Usage data. Basic analytics such as pages visited, timestamps, device type, browser, and referral information. We use this to improve the Service.
Payment information. We do not collect or store your payment card details. Payments are processed by Waffo Pancake, our Merchant of Record. Waffo Pancake may collect your billing name, billing address, payment method details, and transaction history. Their use of your data is governed by Waffo Pancake's Privacy Policy.
Communications. Any messages you send us, including support requests and data rights inquiries.
3. How we use your data
To provide the Service, including generating your personalized report and maintaining your account.
To process payments and manage subscriptions, memberships, and Gift Codes through Waffo Pancake.
To communicate with you about your account, purchases, report availability, and policy updates.
To improve the Service through aggregated, anonymized analytics that cannot identify you.
To protect the security and integrity of the Service and comply with legal obligations.
We do not sell your personal data. We do not use your individual conversation content to train AI models.
4. Legal basis for processing
Under GDPR, we process your personal data on the following legal bases:
Performance of a contract. Processing necessary to provide the Service and deliver your reports.
Consent. Where you have explicitly agreed, such as to marketing communications or optional analytics.
Legitimate interests. For security, fraud prevention, and product improvement, provided your rights and interests do not override these interests.
Legal obligation. Where we are required to comply with applicable laws.
5. Data retention
Anonymous assessments. If you do not create an account, your assessment data and report preview are retained for 6 hours and then automatically deleted.
Registered users. Your account information and reports are retained until you delete your account or request data deletion.
Payment records. Transaction records may be retained for as long as required by tax, accounting, and legal obligations, generally up to 7 years.
Usage analytics. Aggregated analytics are retained indefinitely in anonymized form.
6. Your reports and search engines
Your personal reports are private. Each report page is marked noindex and excluded from our sitemap. Only someone with the direct report link and, where applicable, access to your account can view it.
Your downloadable PDF report is generated on demand and is your responsibility to keep secure once downloaded.
7. Sharing and third parties
We share your data only with trusted service providers necessary to operate the Service:
Waffo Pancake. Processes payments, subscriptions, and tax compliance as our Merchant of Record.
OpenAI / Shengsuanyun router. We use OpenAI's GPT models to generate your assessment and report. Your conversation inputs are sent to OpenAI through our secure router for processing.
Vercel. Hosts our website and application infrastructure.
Neon Postgres. Provides our secure database infrastructure.
Analytics providers. May process anonymized usage data, if you consent to analytics cookies.
We may also disclose data if required by law, court order, or to protect our rights, safety, or the safety of others.
8. International transfers
Your data may be transferred to and processed in countries outside your country of residence, including the United States, where our service providers operate. When we transfer data from the European Economic Area, United Kingdom, or Switzerland, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms.
9. Your rights (GDPR / CCPA)
Depending on your location, you may have the right to: access your personal data; request a copy of your data in a portable format; request correction of inaccurate data; request deletion of your data; object to or restrict certain processing; withdraw consent where processing is based on consent; and lodge a complaint with your local data protection authority.
To exercise these rights, use the in-app data export and account deletion tools, or contact us at support@eudaimn.com. We respond within 30 days.
10. Security
We take reasonable measures to protect your data, including encryption in transit (TLS) and at rest, access controls, and secure infrastructure provided by Vercel and Neon Postgres. No online service can guarantee absolute security.
11. Children's privacy
Eudaim is not intended for children under 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will delete it.
12. Changes to this policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service at least 30 days before they take effect, where required by law. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.
13. Contact
For privacy questions, data requests, or complaints, contact us at:
Helios Chen
Email: support@eudaimn.com