How your data is handled
If you use the scorecard without signing in, nothing is stored in our database. The free tier runs in your browser, and your answers leave your machine only if you choose to email yourself your scorecard analysis: on that submission, your email address and scorecard content go to our serverless function and to Resend for delivery, and MailChimp receives your email address, your consent status, and a scorecard-user tag. The application itself stores nothing; Resend and your email provider retain the message under their own policies.
If you sign in as a member, five things are stored: the journal entries you choose to save and the date you saved each one, the email address you sign in with, the way you have customized the scorecard, meaning your questions and the points you assign to each answer, any feedback you send me through the in-app feedback box, and the dates on which you open the app while signed in. Journal entries are saved only when you press Save, and they are not changed afterward. Your customized questions and points are saved only when you press Apply on the Edit questions screen, not automatically as you adjust them. Feedback is saved only when you press Send in the feedback box; the saved feedback is the durable record, and the app then tries to email it to me with your address so I can reply. The email is best effort: your feedback is kept even if that email does not go through, and you cannot read other members' feedback (or your own) from the app.
Your data lives in a Supabase database hosted in the US-East region and is encrypted at rest. One thing I want to be plain about: as the operator of the database, I can technically access stored entries. I have no reason or intention to read yours, but you should know this is standard server storage, not zero-knowledge encryption. If something is too sensitive to sit on a server I administer, leave it out of the entry.
You can export everything you have saved at any time, as a CSV, from the journal screen.
There are no analytics, no trackers, and no third-party scripts beyond the database client itself. The only usage data the app keeps is a date: when you open the app while signed in, it records that you used it that day (in UTC), and nothing about what you looked at or did. I look at those dates only in aggregate, to see how many members are active in a given week or month and whether people who join actually start using the tool.
If your membership lapses, your data stays where it is. Login is blocked, but nothing is deleted. Email me to restore access or to request a full export of your entries.
Questions or concerns: gary@behavioralvalueinvestor.com.