Privacy Policy

The short version

• We save what you enter so the game can respond, remember context, and let you return later.
• Your conversations and related personal content are encrypted in our database.
• Ordinary conversations and feedback may be reviewed by an authorized human coach and processed by OpenAI to improve the game.
• Player feedback alone cannot change the game's coaching instructions; Jay reviews and approves any proposed change.
• Mark a conversation Private to keep it out of human, administrator, and AI-assisted quality review; making it ordinary again does not restore review.
• Memories saved in a Private conversation stay only in that conversation.
• Ordinary conversations can help the coach remember your stories, values, goals, and what has helped you. Clarify or ask it to forget through conversation.
• We do not sell your information, use it for advertising, or send your conversation to Calendly.
• The public ASPIRE Well-Being Check-In & Action Plan remembers your chosen numeric ratings in a browser cookie and your optional Describe and Prescribe notes for elements or individual factors in this browser's local storage. It also remembers which kinds of notes you choose to include in reports. Notes are not encrypted by the app or restricted to a signed-in account.
• You can download your information or delete your account from Account.

Who operates the service

AlterAbility, LLC, a New York company, operates The Happiness Game. Questions and privacy requests can be sent to [email protected].

Information we collect

We collect only information used to operate and improve the service:

• Account information: your username and information supplied by Google for sign-in, such as an account identifier, email address, name, or profile image.
• What you choose to share: conversations, messages, memories, people, relationships, subjects, drafts, reflections, wins, insights, and feedback. This may include sensitive information about health, emotions, sexuality, relationships, finances, work, or other people.
• Quality-review information: internal conversation and feedback summaries, proposed response corrections, proposed or approved general coaching changes, authorized reviewer discussion, and records showing when an ordinary conversation was opened for review.
• Service information: sign-in and access times, AI model and token usage, errors, necessary session cookies, IP address, browser information, and security or server logs.
• ASPIRE Well-Being Check-In & Action Plan: up to 55 numeric ratings you choose are stored in a persistent first-party browser cookie solely to restore the check-in on that browser or device. The cookie is scoped to /part-two, so your browser automatically includes it with matching HappinessGame requests. We do not intentionally attach these ratings to a Game account, save them to the application database, use them for analytics, or send them to an external processor. Optional Describe and Prescribe notes and your report choices are remembered in this browser's local storage. The new notes are not put in that cookie or automatically sent to our servers, an account, analytics, or an AI provider. They are not stored in the application database. Notes are not encrypted by the app and are not restricted to a signed-in account. Someone using the same browser profile may be able to read them. They do not automatically sync to another browser or device.

Please share only what you are comfortable putting into the service. If you mention another person, avoid unnecessary identifying details.

How we use information

• Provide AI-assisted coaching and communication practice you request.
• Save your history and useful context for your account.
• Authenticate accounts, manage beta access, prevent misuse, and secure the service.
• Respond to feedback, support requests, privacy requests, and legal obligations.
• Review ordinary conversations for quality and improve how the game responds.
• Use AI to summarize ordinary conversations and feedback and draft proposed improvements for authorized human review.

Depending on where you live, we rely on your request for the service, your consent, our legitimate interests in operating and securing it, and applicable legal obligations. You can withdraw consent for future sensitive-data processing by deleting your account or contacting us.

What the coach remembers

After you accept this policy, ordinary conversations may be analyzed by OpenAI to identify useful stories, wins, values, goals, preferences, and connections that can help in later conversations. We save brief supporting words and contextual notes, encrypted in our database. A coach's interpretation remains tentative; it is not a diagnosis or proof of a permanent trait.

The You page presents a readable summary. You can clarify, correct, reject, or ask the coach to forget something in conversation. Changes to your understanding and Joy Subscriptions happen through that conversation, rather than direct editing forms. The coach must respect your correction or refusal. Your account download includes the underlying saved information. Jay can inspect his own internal coaching notes to check the feature; this diagnostic view does not let him or other administrators inspect another player's internal profile.

Private and previously Private conversations do not contribute to this account-wide understanding. Making an ordinary conversation Private removes its support from future profile context. We do not automatically analyze your older conversation history when this feature is enabled.

When you ask to forget a story, the app removes its usable memory and dependent notes, excludes the affected conversation material from future coaching context, and keeps only the technical markers needed to prevent automatic rediscovery. The original conversation remains in your history unless you also delete it. The coach may clarify which story you mean before taking action. Deleting a conversation or your account remains available in the app.

If you choose to discuss ASPIRE in a conversation, the ratings you say are processed and saved with that conversation. You can review and apply those chosen ratings to the existing slider check-in. The app does not silently read your browser-local notes into the conversation or send them to OpenAI.

Ordinary and Private conversations

Every conversation is encrypted in the application database. Encryption helps protect the content if someone obtains only the database or a database copy. It does not make the service end-to-end encrypted, and it cannot guarantee protection if the running application and its encryption keys are both compromised.

Ordinary conversations may be opened by an authorized human coach at any time, including while the conversation is active, to check quality and improve the game. The review screen shows your username, not your email address. Account administrators may still see email addresses separately when managing access. The app records authorized review access.

When an authorized reviewer opens an ordinary conversation containing feedback, the app may send the latest transcript and feedback to OpenAI to prepare short internal summaries. After the reviewer adds their own judgment, OpenAI may draft a corrected response or a proposed general coaching change. The reviewer can edit, reject, or approve the draft. Player feedback by itself does not change the game's coaching philosophy or instructions.

An authorized administrator may create a read-only Codex review link that is signed by the application and automatically expires after four hours. When the link is opened, it shows the then-current outstanding feedback from ordinary conversations that remain eligible for quality review, together with each flagged response and bounded conversational context plus the game's compact approved coaching-amendment history. The set may change during the link's lifetime as feedback is created or resolved. The link does not separately attach player account identifiers such as username or email, and it excludes resolved feedback and Private/ever-Private conversations.

A conversation marked Private is saved for you and still processed by the AI to respond to you, but it is blocked from human coach, administrator, and AI-assisted quality-review tools. Feedback is unavailable in Private conversations. Changing an ordinary conversation to Private blocks future review and permanently excludes that conversation from review, even if you later make it ordinary again; it cannot undo a review that already happened.

Memories have two visibility levels. An account memory may help the AI across your conversations. A memory created or saved from a Private conversation is marked Only in this conversation: the AI may use it in that exact conversation, but not in another conversation, including another Private conversation. If you make an ordinary conversation Private, its account memories are narrowed to that conversation and stay narrowed even if you later make the conversation ordinary again. Deleting the source conversation deletes those conversation-only memories; account memories that were attached to it are kept and detached. The app does not currently offer a way to promote a conversation-only memory to account-wide context.

Services that process information

• OpenAI processes conversation content to generate requested coaching responses. For ordinary conversations containing feedback, OpenAI may also process the current transcript, feedback, and an authorized reviewer's direction to generate internal summaries and proposed improvements. API-based quality-review requests use store: false. If Jay intentionally provides a temporary Codex review link to OpenAI Codex, the selected ordinary feedback material is processed within that Codex interaction under OpenAI's applicable product settings and terms. The temporary-link workflow is separate from the API store: false workflow. When you use voice, your live audio is sent to OpenAI's Realtime API and the app saves the completed speech transcript, but the app does not store the audio. OpenAI says API content is not used to train its models by default, though standard abuse-monitoring logs may retain content for up to 30 days.
• Google provides account authentication.
• DigitalOcean hosts the application and PostgreSQL database in the United States.
• Cloudflare provides DNS, encrypted traffic delivery, and security protection.
• Calendly receives information you enter after choosing “Schedule with Jay.” We do not attach your Happiness Game account or conversation to the Calendly link.
• YouTube may receive device and network information if you load an embedded video.

These providers process information under their own terms and privacy commitments. We may also disclose information when legally required, to protect someone from serious harm, to investigate abuse or security incidents, or as part of a business transfer subject to this policy.

We require service providers to protect personal information consistently with this policy and applicable law, use it only for the services they provide to us, and delete or return it when their work ends, subject to lawful retention requirements.

Consumer health data

Your entries may reveal mental or physical health, emotions, behavior, sexuality, reproductive health, relationships, treatment, medication, or other health-related information. We receive this information directly from what you enter and may derive context from it solely to provide the game, preserve your history, secure the service, and perform the human and AI-assisted quality review described above.

This information may be processed by AlterAbility’s authorized coaches and the service providers listed above. We do not sell it or use it for advertising. You can access it, download it, delete it, or withdraw consent for future collection and sharing through your Account page or by emailing us. We will not discriminate against you for making a privacy request.

The public ASPIRE ratings are stored only in the first-party browser cookie described above. The browser automatically sends that cookie with matching /part-two requests to HappinessGame, but the app does not intentionally attach the ratings to an account, save them in the application database, use them for analytics, or send them to an external processor. Optional Describe and Prescribe notes and report choices stay in this browser's local storage. The notes are not automatically sent to our servers, an account, analytics, or an AI provider, and are not stored in the application database. The app does not encrypt these notes or restrict them to a signed-in account; someone using the same browser profile may be able to read them. Export backup creates a local file containing your scores and notes, regardless of report choices. Backup files are not encrypted by the app. Import reads your chosen backup locally in this browser; it is not a server upload or automatic synchronization. Explicitly choosing Share passes only the selected text report to a destination you choose in your device's sharing interface. Copy, Share and PDF reports cannot be imported.

Retention and deletion

We keep account content until you delete it or your account, unless a shorter period applies or we must retain limited information for security or legal reasons. Operational logs are kept only as long as reasonably needed for reliability, security, and troubleshooting.

Internal summaries, feedback-review discussions, and unapproved proposals tied to a conversation are deleted when that conversation or its account is deleted. A general coaching change that Jay explicitly approves may remain as part of the game's instructions after the source conversation is deleted. An approved general change must omit names, identifying details, and situation-specific facts, and it is detached from the deleted source.

Production backups are not currently enabled. If encrypted backups are enabled later, this policy will be updated with their retention period before they are used.

Browser and user privacy controls can clear or evict the ASPIRE cookie, and browser limits may shorten its requested long-lived expiration. Clearing HappinessGame site data removes the browser copy, including its optional Describe and Prescribe notes and report choices. Use reset on the check-in to remove its scores and notes from this browser. Browser settings and storage limits may prevent saving or erase data. Account deletion and account export do not manage these browser-only notes. During import, a temporary browser-local recovery copy protects the previous check-in. The app removes it after a successful restore or recovery, but a copy may remain when browser storage cleanup fails; the check-in shows a retry warning. Reset also clears recovery storage. Reset does not delete backup files or reports already saved or shared elsewhere. Export backup, Copy, Share or PDF lets you keep a separate copy; copies you keep or share outside the app are outside the app's reset control. Because the app does not intentionally save these ratings or notes to an account or the application database, there is no app-side ASPIRE copy to delete.

Account deletion removes your account and associated app data from the active database, subject to the de-identified approved coaching changes described above. OpenAI and other providers may retain limited information under their own retention rules. Deleting an account does not erase information that another person independently shared in their own account.

Your choices and rights

You can review your information, clarify the coach's understanding through conversation, change your username, mark conversations Private, download a machine-readable copy, delete individual conversations, or delete your account. You may also ask us to confirm what we hold, correct it, restrict or object to processing, provide it in a portable form, withdraw consent, or delete it.

Email [email protected]. We may ask you to sign in or provide enough information to verify the request. We will respond within the time required where you live. If we deny a request, you may appeal by replying with “Privacy appeal.” You may also complain to your local privacy or data-protection authority.

International use

AlterAbility and its primary hosting operate in the United States. If you use the service elsewhere, your information is transferred to and processed in the United States. Mandatory privacy rights where you live continue to apply even if this policy or the Terms say otherwise. Where required, we and our providers use approved contractual or other legal safeguards for international transfers. Contact us for information about safeguards relevant to your data.

Automated processing

The AI generates coaching responses and grounded player-understanding notes, and may generate internal quality-review summaries and proposed improvements. An authorized human decides whether to apply a proposed coaching change; player feedback alone cannot update the game's instructions. The service does not make decisions about you that produce legal or similarly significant effects. Account eligibility and enforcement decisions are not made solely by the AI.

Security, adults, and changes

We use encrypted connections, application-level database encryption for sensitive content, access controls, restricted database networking, protected credentials, and service monitoring. No online service can promise perfect security.

The Happiness Game is for adults 18 and older. We do not knowingly allow children to create accounts. Contact us if you believe a child has provided information.

We may update this policy as the beta changes. Material changes will be shown in the app and may require renewed acknowledgement. The version is 2026-09-07.