Information We Collect

When you use IRL MAXX, we collect information to operate the app and personalise your experience. This includes:

• Account information: Email address, username, and any profile details you provide when you create an account or sign in.
• IRL Stats and assessments: The scores, self-assessment answers, and ratings you enter across life areas (Looks, Physique, Style, Discipline, Money, Social, Relationships) to generate your MAXX Score and Stat Radar.
• Missions, habits, and streaks: Daily mission completions, XP earned, habit check-ins, streak counts, active arcs, and weekly review data — so we can track your progress and deliver personalised daily plans.
• Mirror AI conversations: Messages and inputs you submit to the Mirror AI coach so we can generate contextually relevant responses. Conversation history may be retained to maintain continuity across sessions.
• Vault journal entries: Private text you write in The Vault. These are stored securely and used only to provide the journalling feature to you.
• Claims vs. Receipts data: Self-assessments and evidence inputs you log when auditing the gap between your stated intentions and demonstrated behaviour.
• Usage and interaction data: Feature usage patterns, session duration, screen views, and interaction events used to improve the product and personalise your experience.
• Device and technical data: Device type, operating system version, app version, unique device identifiers, crash logs, and diagnostic information used to maintain reliability.
• Support communications: Messages, contact information, and attachments you send when you contact us for help.

How We Use Your Information

We use your information to:

• Create and maintain your account and Player Card.
• Calculate your MAXX Score, Stat Radar, XP, levels, streaks, and rank-ups.
• Deliver personalised daily missions, upgrade arcs, and habit plans.
• Power Mirror AI responses, including maintaining conversational context across sessions.
• Store and display your Vault journal entries privately within the app.
• Generate your weekly Rank-Up summary and progress insights.
• Send in-app notifications and (where you opt in) push notifications about missions, streaks, and progress.
• Diagnose and fix technical issues, crashes, and bugs.
• Respond to support requests.
• Improve and develop the app, including training and testing AI features (using anonymised or aggregated data where possible).

Mirror AI and Data Processing

Mirror AI is an AI-guided reflection coach. When you start a Mirror session, your inputs — including your stated claims, evidence you provide, and conversation messages — are sent to our AI processing infrastructure to generate a response.

Mirror AI conversation history may be stored to maintain session continuity and improve response quality. We do not use your individual Mirror AI conversations to train commercial third-party AI models without your consent.

Mirror AI is designed for healthy self-reflection and personal development. It is not a therapist, counsellor, financial adviser, or medical professional. It does not replace professional advice in any of these areas.

The Vault — Private Journal

Vault entries are personal journal notes you write within IRL MAXX. They are stored securely on our servers, tied to your account, and are not used for advertising, shared with third parties for their own purposes, or surfaced to other users.

You can delete individual Vault entries at any time within the app, or request full deletion of your Vault data by submitting a data deletion request.

Data Sharing

We do not sell your personal information. We may share data only in the following circumstances:

• Service providers: Trusted vendors who help us operate the app — such as cloud hosting, AI infrastructure, analytics, and email delivery — under strict data processing agreements.
• Legal requirements: When required by law, court order, or to protect the rights, safety, and property of Galadriel Labs, our users, or the public.
• Business transfers: In connection with a merger, acquisition, or sale of assets, where your data may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.

Data Retention

We retain your account data, IRL Stats, missions, streaks, Vault entries, and Mirror AI conversations for as long as your account is active or as needed to provide the service.

If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required by law to retain it for longer.

Aggregated, anonymised usage data (with no link to individual accounts) may be retained indefinitely for product research and improvement.

Your Choices and Rights

• Access and correction: You can view and update your profile information, IRL Stats, and app preferences at any time within the app.
• Delete specific data: You can delete individual missions, Vault entries, and arc history from within the app. To request deletion of specific account data, use our Data Deletion page.
• Delete your account: You can permanently delete your account and all associated data via the Account Deletion page or from within the app settings.
• Push notifications: You can enable or disable push notifications at any time through your device's system settings or the app's notification preferences.
• Legal rights: Depending on your location, you may have rights under applicable law (such as GDPR or CCPA) to access, correct, port, restrict, or object to the processing of your personal data. Contact us at privacy@galadriel.app to exercise these rights.

Security

We use industry-standard security measures — including encryption in transit and at rest, access controls, and regular security reviews — to protect your data.

Your Vault journal entries and IRL Stats are treated as sensitive personal data and are protected accordingly. No security system is perfect, but we are committed to maintaining the integrity of your private progress data.

Children's Privacy

IRL MAXX is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, please contact us at privacy@galadriel.app so we can take appropriate action.

Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and notify you via in-app notice or email before the changes take effect.

Contact

For privacy questions, data requests, or to exercise your rights, contact Galadriel Labs at privacy@galadriel.app or reach our support team at support@galadriel.app.