Privacy Policy

Last updated: September 30, 2026

EnneagramGenius (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains what information we collect when you use EnneagramGenius, how we use it, who we share it with, and what rights you have over your data.

Note: this policy is currently under legal review. It was revised in August 2026 to describe accurately what our systems actually do, including corrections to what our data export contains and which providers receive your data. If anything here is unclear or looks wrong to you, write to privacy@enneagramgenius.com and we’ll answer plainly.

Information We Collect

  • Account information: your name, email address, and optional phone number when you register.
  • Assessment responses and results: every option you pick in the Enneagram assessment (about 54 forced-choice items, plus one optional written reflection at the end), how long you spent on each item, and the derived outputs: your core type, wing, tritype, instinct stack, and confidence band.
  • Group and relationship data: the groups you create or join (partner, family, friend, team, or organization contexts), your role within those groups, and the context type selected for each group.
  • AI-generated content: the relational intelligence reports, pairing insights, and group dynamics analyses generated on your behalf. These are cached to your account so you don't need to regenerate them.
  • Situation Reads and Deep Letters: what you write for a Situation Read (up to 2,000 characters), the topic you choose or name for a Deep Letter, the read written for you, and the time you agreed to send your words to our AI provider for that read. What you wrote, the topic, and the read are encrypted at rest.
  • Ask Genius and Ask about Us: the questions you write, Genius's replies, the conversation's title (its first question), and the time you agreed to send your words to our AI provider. An Ask Genius conversation is yours alone. An Ask about Us conversation is shared: your partner sees every question and every reply. Questions, replies, and titles are encrypted at rest.
  • Course replies: what you write back to a course (a Weekly Reflection answer or a Growth Sprint check-in), Genius's reply back, and the time you agreed to send your words to our AI provider. Only you can see them, and they're encrypted at rest.
  • Team programs: for a 1:1 Prep, Feedback Script, or Mediation Guide, what you write for it (a 1:1 Prep note is optional) and the read written for you. Only you can open it, and only while everyone it's about still shares their full reading with the team. What you wrote and the read are encrypted at rest.
  • Credit wallet and billing activity: your credit balance, credit consumption events, and subscription tier. Payment details (card numbers) are handled entirely by Stripe and are never stored on EnneagramGenius servers.
  • Coach-client data: if you're a coach, the session notes, session focus, Session Prep, and communication threads you create in relation to your clients. If you're a client of a coach, you may be included in that coach's session data with your consent. Your coach's notes, session focus, and Session Prep are shown only to your coach, never to you, and are encrypted at rest.
  • Usage data: page views, feature interactions, error events, and session metadata. This data is used to improve the platform and is not sold.
  • Interaction signals while you take the assessment: counts of taps, key presses, tab switches, and edits to the written reflection, along with whether your browser reports itself as automated. We use these to tell people apart from bots and scripted traffic, so the assessment stays free and the research behind it stays trustworthy. They hold none of the text you wrote, they say nothing about your answers or your type, and they never change what you see or the result you get.
  • Cookies and local storage: session tokens to keep you authenticated, and preference settings tied to your account.

How We Use Your Information

  • To provide the EnneagramGenius service: scoring your assessment, generating your Enneagram profile, enabling group formation, and delivering AI-generated relational intelligence content.
  • To write a Situation Read or Deep Letter you've asked for, and to keep it in Your reads so you can come back to it. We use what you write for a read only to write and show you that read.
  • To write Genius's replies in Ask Genius and Ask about Us, a course's reply back to what you wrote, week four of a Growth Sprint from your check-ins, and the team programs you buy. We use what you write there only for that.
  • To improve assessment accuracy: anonymized, aggregated response patterns may inform future revisions to the instrument. Individual responses are never publicly attributed.
  • To deliver communications you have opted into: onboarding emails, result summaries, product updates, and coach-specific feature announcements. You can unsubscribe from any of these at any time.
  • To operate billing and credits: tracking your subscription status, processing credit purchases through Stripe, and applying credits when you request AI-generated content.
  • To facilitate coach-client relationships: allowing coaches to prepare for sessions using your profile data, subject to the consent and visibility settings you control.
  • We do not sell your personal information to third parties. We do not use your assessment results for advertising targeting.

Data Sharing

  • Stripe, Inc.: payment processing for subscriptions and credit pack purchases. EnneagramGenius shares only what is necessary to complete a transaction (email, billing amount). Stripe's privacy policy governs their handling of payment data.
  • Anthropic PBC (Claude AI): when you request AI-generated content, EnneagramGenius sends Anthropic the Enneagram type information and relational context needed to generate that content, for example your type and your partner's type. For a Situation Read or Deep Letter, we also send what you wrote or the topic you chose, and only after you've agreed to that in the composer for that read. We tell the model to refer to people by role or by the first name you used, and never to repeat surnames, contact details, or other identifiers. A second Anthropic model checks each finished read before you see it. Before anything is written back to you, a separate Anthropic model also reads what you wrote for signs that you or someone else may be at risk. If it finds any, nothing is written back, nothing you wrote is kept, and we show you where to get support instead. We don't send your name, email, or account identifiers, unless you write them into the text yourself. For Ask Genius, Ask about Us, a course reply, or a team program, we also send what you wrote, only after you've agreed to that for that conversation, reply, or program. Ask about Us sends both partners' Type results, and a team program sends the Type results of the people it's about. If you're a coach, your notes on a client and your focus for a session go into that client's Session Prep or Client Growth Plan only while "Use my notes" is on for that client. It's off unless you turn it on, and we remove the names, email addresses, phone numbers, and links we find in your notes before they're sent. Your written reflections from the assessment are a separate case: they are only ever included when you have explicitly opted in at the question where you wrote them. If you did not opt in, that text stays on our systems and is never sent to Anthropic. Anthropic doesn't use what we send to train its models. It deletes it within 30 days, unless its automated safety systems flag it, in which case it can keep it for up to 2 years.
  • Resend (Plus Five Five, Inc.): delivery of the email we send you: sign-in and verification codes, invitations, receipts, results, and any newsletters you have opted into. Resend receives your email address, the message content, and delivery events (sent, delivered, opened, bounced) so we can tell whether mail is reaching you.
  • OpenAI, L.P.: text embeddings for our internal knowledge-base search, which is how AI-generated content is grounded in our Enneagram research library. When a request includes text you wrote (a question or a reflection), that text may be sent to OpenAI to be converted into a numerical vector for the lookup. Nothing identifying you accompanies it.
  • Google LLC (Google Analytics 4): aggregate usage measurement covering page views, feature interactions, and error events. Analytics only run after you accept analytics cookies; decline, or opt out below, and nothing is sent to Google.
  • Ory Kratos: authentication infrastructure that manages your login session, password reset, and OAuth flows. Kratos receives your email address for auth purposes.
  • Infrastructure providers: cloud hosting, database, and object storage services operate under data processing agreements and are not permitted to use your data for their own purposes.
  • We may disclose information when required by law, court order, or to protect the rights, property, or safety of EnneagramGenius users.

Where Your Data Is Processed

  • EnneagramGenius runs on servers in the United States. The providers listed above, including Anthropic, Stripe, Resend, OpenAI, and Google, also process data in the United States. If you're in the EU, the UK, or Switzerland, using EnneagramGenius means your data is transferred to the United States.
  • Each of those providers processes your data under data processing terms that protect transfers with the European Commission's Standard Contractual Clauses and the UK Addendum, or with the EU-US Data Privacy Framework. Anthropic's, for example, is its Data Processing Addendum, which is part of its commercial terms. You can ask us for a copy of the safeguards that apply at privacy@enneagramgenius.com.

Legal Bases for Processing

  • For users in the UK, EU, and other jurisdictions with equivalent law, we rely on the following lawful bases (GDPR Article 6). Where the basis is consent, you may withdraw it at any time and we'll stop that processing.
  • If you choose to include health or other sensitive details about yourself in a Situation Read or Deep Letter, we process them only with your explicit consent (GDPR Article 9(2)(a)), which you give in the composer for that read. Deleting the read withdraws it for that read.
What we processLawful basisWhy
Account data (email, name)Contract, Art. 6(1)(b)We cannot provide an account, or send you a sign-in link, without it.
Assessment responses and resultsConsent, Art. 6(1)(a)You choose to take the assessment; submitting it is the consent. You can delete this data at any time.
Written reflections sent to our AI providerConsent, Art. 6(1)(a)Separately opted in at the question itself, and never shared without that opt-in.
What you write for a Situation Read or Deep Letter, sent to our AI providerConsent, Art. 6(1)(a), and explicit consent, Art. 9(2)(a), for any health or other sensitive details you includeYou agree in the composer before each read. Without that agreement nothing you wrote is sent and no credit is spent.
Situation Reads and Deep Letters you've boughtContract, Art. 6(1)(b)Writing the read and keeping it in Your reads is what the credit pays for.
What you write about other people in a readLegitimate interest, Art. 6(1)(f)Getting help with your own life means writing about the people in it. We tell the model to refer to them by role or by the first name you used, we ask you to leave out their health, sexuality, or beliefs, and what you wrote about them is deleted when you delete the read or your account.
Payment and subscription dataContract, Art. 6(1)(b)Necessary to execute the subscription or one-time purchase you asked for.
Coach notes about clientsLegitimate interest, Art. 6(1)(f), and contractCoaches have a professional interest in keeping session records. Clients are told that coaches keep private notes.
Analytics and usage eventsConsent, Art. 6(1)(a)Collected only after you accept analytics cookies, and minimized at collection.
Transactional email (sign-in, receipts, results)Contract, Art. 6(1)(b)This is the service operating; it is not marketing and cannot be switched off separately.
Marketing email and newslettersConsent, Art. 6(1)(a)Opt-in, and unsubscribable from any message with one click.
Security logging and abuse preventionLegitimate interest, Art. 6(1)(f)Necessary to keep accounts and psychological data safe.
Interaction signals on the assessment, and telling automated traffic apartLegitimate interest, Art. 6(1)(f)A free, unauthenticated assessment attracts scripted traffic. These counts are how we keep it out of our research data. This is abuse prevention rather than analytics, so it runs whatever you choose about analytics cookies, and it never affects your result.

Data Retention

  • Account data, assessment results, group memberships, and AI-generated content are retained for as long as your account is active.
  • Situation Reads and Deep Letters, including what you wrote for them, are kept until you delete the read or your account, so you can reread them. You can delete a read, and what you wrote for it, at any time: open the read and choose "Delete this read." It's removed from our systems right away, and from our backups within 35 days. Deleting your account deletes all of them.
  • When a read isn't finished, or our safety checks hold it back, we keep no read text. What you wrote is kept until you delete that read or your account.
  • When what you wrote describes a risk of harm and we show you support resources instead of a read or a reply, we keep no read or reply text and none of what you wrote.
  • Ask Genius and Ask about Us messages are deleted 120 days after the last message in the conversation. The conversation stays, with no messages or title, so messages you've paid for and not used aren't lost. You can delete a conversation at any time. In Ask about Us either of you can delete it, and it's deleted for both of you.
  • What you write back to a course, and Genius's reply back, are deleted 120 days after you wrote it. The course days themselves stay with your course.
  • A 1:1 Prep, Feedback Script, or Mediation Guide, and what you wrote for it, is kept until you delete it or your account. If the person it's about deletes their account, the read and what you wrote about them are removed.
  • A coach's notes, session focus, and Session Prep are kept while the coach's account is active, and are deleted with it. If you're a client and delete your account, your name, your email address, and your coach's general notes on you are removed from the coach's records. The notes, focus, and prep your coach wrote for individual sessions stay in the coach's records, no longer linked to your account, name, or email address, until the coach deletes their account.
  • When you delete your account, your personal data is removed from our systems within 30 days. This includes your assessment responses, profile, group memberships, credit history, Ask conversations, courses and course replies, and coach-client records tied to your account (with the exception for session notes described above). If either partner deletes their account, an Ask about Us conversation is deleted for both of them.
  • Anonymized, aggregated statistical data derived from assessment responses, where no individual can be identified, may be retained for platform improvement purposes after account deletion.
  • If you take the assessment without creating an account, that submission and its result are held for 30 days so you can come back to them, and are deleted after that. Adding an email to save the result keeps it for as long as your account is active.
  • Billing records may be retained for up to 7 years as required by financial regulations.

Your Rights

  • Access: you can view your Enneagram profile, assessment results, and group memberships at any time from your dashboard.
  • Export: you can download a machine-readable copy of your data from Settings > Exports. The export contains your account details, your computed type profile (core type, wing, tritype, instinct stack), your assessment submission history, your group memberships, your credit wallet and transactions, your subscription status, your Situation Reads and Deep Letters (what you wrote, the topic, and the read), your Ask conversations (your own questions and every reply), your courses (each day, what you wrote back, and the replies back), and, if you're a coach, your client notes, session focus, and Session Prep. Your raw question-by-question answers and your other AI-generated reports aren't in the self-service file yet. Request them at privacy@enneagramgenius.com and we'll send them to you.
  • Correction: you can update your account information from Settings > Profile.
  • Deletion: you can delete your account from Settings > Profile. This queues a full data deletion within 30 days, including every Situation Read and Deep Letter. To delete a single read and keep your account, open the read and choose "Delete this read."
  • Opt-out: you can unsubscribe from any email communications using the unsubscribe link in any email, or by adjusting notification preferences in Settings > Notifications.
  • To raise a privacy concern or request assistance with any of the above, contact us at privacy@enneagramgenius.com.

Data Security

  • All data travels encrypted using TLS. Your assessment answers, your written reflection, and what you write for a Situation Read or Deep Letter, along with the read itself, are also encrypted field by field in our database. So are Ask messages, course replies and Genius's replies back, what you write for a team program, and a coach's notes, session focus, and Session Prep.
  • Access to production data is restricted to services that require it to function. Human access to user data is limited to authorized personnel for support and security purposes only.
  • We conduct regular security reviews and address vulnerabilities promptly.
  • No system is perfectly secure. If you believe your account has been compromised, contact us immediately at privacy@enneagramgenius.com.

Cookies

  • We use essential cookies to keep you signed in, to protect the sign-in and account forms from being submitted by another site, and, when you visit a coach's own branded address, to carry that coach's branding. We also keep a small amount of storage in your browser to hold your place in an assessment and to finish an invite you opened before signing in.
  • We use one analytics cookie to understand aggregate usage patterns: which features are used, where errors occur, and how people move through the platform. It is anonymized, and it does not load until you accept it. Decline and nothing is requested from Google at all.
  • We do not use advertising cookies or cross-site tracking.
  • The full list of every cookie and browser storage key, what it does, and how long it lasts, is on the Cookies page linked below.

Usage analytics

Anonymized, aggregate data about which pages and features get used, so we know what to improve. Never includes your assessment answers, your type result, or anything from your groups.

This preference is stored in this browser, so set it once per device.

See every cookie and storage key we use →

Children's Privacy

  • EnneagramGenius is intended for adults aged 18 and older. We don't knowingly collect personal information from anyone under 18.
  • If you believe someone under 18 has created an account, please contact us at privacy@enneagramgenius.com and we'll remove the account promptly.

Changes to This Policy

  • We may update this Privacy Policy from time to time. When we do, we'll notify you by email and update the "Last Updated" date below.
  • Continued use of EnneagramGenius after changes constitutes acceptance of the updated policy.

Questions about this Privacy Policy? Contact us at privacy@enneagramgenius.com or visit our contact page.