Privacy Policy — Naya

Effective Date: April 2026 · Last Updated: April 2026

This Privacy Policy explains how Naya ("the App"), created by Chrysalis Leadership Studio, collects, uses, stores, and protects your personal information.


1. What We Collect

Account Information

Your name, email address, and account credentials. Passwords are securely hashed — we cannot read or recover your password.

Coaching Profile

Your preferred name, threshold territory, transition contexts, and wellbeing level. Stored on your user account — only you can read or update this information.

Conversation Data

Conversations are saved automatically so you can revisit them. Session summaries, somatic check-in responses, and emerging patterns (constellation data) are also stored to provide continuity across sessions. Only you can view, edit, or delete your conversation data.

Journal Entries

If you choose to save a reflection as a journal entry, it is stored with creator-only access — meaning only you can view, edit, or delete it.

Coaching Improvement Consent

Whether you have opted in to allow your saved conversations to be reviewed for coaching improvement. This setting defaults to off and can be changed at any time in your Profile settings. See Section 2 for details.

Usage Data

Session timestamps and basic app interaction data.


2. How We Use Your Data

Providing coaching conversations: Your coaching profile (name, threshold territory, transition contexts) and previous session summaries are sent to the AI at the start of each conversation so Naya can provide personalized coaching.

Generating session summaries: After each conversation, a summary is generated and stored automatically to support continuity across sessions.

Identifying emerging patterns: Themes and patterns (constellation data) are tracked across your sessions to deepen Naya's understanding of your crossing over time.

Coaching improvement (opt-in only): Your saved conversations are private by default. They are not reviewed by anyone unless you explicitly opt in. If you choose to enable "Help improve Naya" in your Profile settings, Aaron Perkins (the coach who built Naya) may occasionally review your saved sessions to identify patterns and refine the coaching. This setting defaults to off. You can turn it on or off at any time, and turning it off prevents any future review of your conversations. Conversations are never shared outside Chrysalis Leadership Studio.

We do NOT use your data to:

  • Train AI models
  • Sell to third parties
  • Target advertising
  • Share with employers, organizations, or any external party without your explicit consent

3. How Conversations Are Processed

When you have a conversation with Naya:

  1. Your message is sent to the AI processing service (Claude by Anthropic) along with your coaching profile and relevant context from previous sessions.
  2. The AI generates a response based on your input and the coaching methodology embedded in Naya's system.
  3. Your conversation is saved automatically along with session summaries and emerging patterns, so you can revisit past sessions and Naya can provide continuity across conversations.
  4. Anthropic (Claude API) retains API data briefly — up to 7 days — for abuse monitoring purposes only. After that window, data is automatically deleted on Anthropic's end. Anthropic does not use your conversation data to train its AI models, per the Anthropic Commercial Terms of Service.

Data Processing Chain

Service Role Data Access
Base44 App hosting & database Stores conversations, session summaries, journal entries, and user profiles. SOC 2 Type II, ISO 27001 certified.
Anthropic (Claude API) AI processing Processes messages in real time. Retains API data for up to 7 days for abuse monitoring only. Does NOT use it for training.
Chrysalis Leadership Studio Developer Conversations are reviewed only if the user has explicitly opted in to coaching improvement. Default is off. Individual data is never shared externally.

4. Where Your Data Is Stored

Data is stored on Base44's servers in the United States. The infrastructure is SOC 2 Type II certified, ISO 27001 certified, encrypted at rest and in transit, with Row-Level Security enforced so users can only access their own records.


5. Data Retention

Active Accounts

Conversations, session summaries, and constellation data are retained as long as your account is active or until you delete them. Journal entries are retained as long as your account is active or until you delete them. Account and profile data are retained as long as your account exists.

After Your Subscription Ends

If your subscription ends — whether through cancellation, expiration, or downgrade — your session history, journal entries, and session summaries will remain accessible in read-only mode. You may continue to export your data at any time from your Profile page.

We will retain your data for 12 months after your subscription ends. After this retention period, your data will be permanently deleted unless you contact us before the period expires to request an extension.

Deletion Requests

You may request deletion of your data at any time, regardless of subscription status. Upon deletion request, your data will be permanently removed within 30 days, except where retention is required by law.


6. Data Security

All saved data is encrypted at rest and in transit. Authentication is required for all access. Row-Level Security ensures users can only access their own data. The hosting platform maintains SOC 2 Type II and ISO 27001 certifications. Database access is limited to the developer and Base44 infrastructure systems.

No system is perfectly secure. While we take reasonable measures to protect your data, we cannot guarantee absolute security.


7. Third-Party Services

Base44 (hosting & database): base44.com/privacy-policy

Anthropic (AI processing): anthropic.com/privacy

We do not share your data with any other third parties, except as required by law.


8. Your Rights

You have the right to: access a copy of your personal data; request correction of inaccurate data; request permanent deletion of your account and all saved data; withdraw from using Naya at any time; opt out of coaching improvement review at any time via your Profile settings; and request your data in a portable format where feasible.

For EU/EEA residents (GDPR): You have additional rights including restriction of processing, objection to processing, and the right to lodge a complaint with a supervisory authority. Legal basis for processing: your consent and our legitimate interest in providing the service.

Contact: aaron@chrysalisleaders.com — we respond within 30 days.


9. Children's Privacy

Naya is not intended for anyone under 18. We do not knowingly collect data from minors.


10. AI-Specific Considerations

Your messages are sent to an external AI service (Anthropic) for real-time processing. Anthropic retains API data briefly (up to 7 days) for abuse monitoring only and does not use it to train its models. No human reads your messages during a conversation — the live exchange is entirely between you and the AI. Your saved conversations remain private and are reviewed by the developer only if you explicitly opt in to coaching improvement (off by default; see Section 2). Session summaries are AI-generated and may not perfectly capture your experience. AI systems can produce inaccurate, biased, or inappropriate responses — use your own judgment.

Naya is an AI coaching companion — not a licensed therapist, counselor, or medical professional. Naya is not equipped to provide mental health treatment, crisis intervention, or clinical support. Conversations with Naya should not be considered a substitute for professional care. If you are experiencing a mental health crisis, please contact a licensed professional or emergency services immediately. For more detail on Naya's coaching scope and limitations, please refer to our Terms of Service.


11. Changes to This Policy

We may update this policy to reflect changes in practices or legal requirements. Significant changes will be communicated within the App or via email. Continued use constitutes acceptance.


12. Contact

Chrysalis Leadership Studio
Email: aaron@chrysalisleaders.com
Web: chrysalisleaders.com

Subject line for data requests: "Naya — Data Request"