Privacy Policy

Driftwork · driftwork.app

Effective date: March 17, 2026

ZiggyTech Ventures LLC ("we," "us," or "our"), EIN 41-4738365, a Nevada limited liability company, operates the Driftwork AI Habit Coach app at driftwork.app. This Privacy Policy explains how we collect, use, store, and protect your information when you use Driftwork. By using the app, you agree to the practices described here.

1. Information We Collect

When you create an account and use Driftwork, we collect:

• Account information — Your email address and password (stored securely via Supabase Auth).
• Habit data — The habits you choose to build (Forge mode) or break (Release mode), including names, descriptions, frequency goals, and progress check-ins.
• Mood and check-in data — Emotional state, energy levels, and reflections you log during coaching sessions.
• AI conversation history — Messages you send to and receive from Driftwork's AI coach within each session.
• Profile information — Your first name, age range, and any optional preferences set during onboarding.
• Usage and analytics data — Basic usage patterns (features used, session frequency) collected in aggregated, non-personally-identifiable form to improve the service.
• Device data — Device type, operating system, and browser information transmitted with standard web requests.

2. How We Use Your Data

We use your information to:

• Provide and operate the Driftwork AI coaching experience.
• Personalize your coaching based on your habit goals, mood data, and history.
• Process your messages through Anthropic's Claude API to generate coaching responses (see Section 4).
• Improve the product using anonymized, aggregated analytics — never your individually identifiable data.
• Communicate with you about your account, billing, and service updates.

3. Data Storage & Security

Your data is stored with the following infrastructure partners:

• Supabase — Your account data, habit records, mood check-ins, and conversation history are stored in a Supabase-managed PostgreSQL database, encrypted at rest and in transit.
• Vercel — Driftwork's application is hosted on Vercel. All traffic is encrypted via HTTPS/TLS.
• Anthropic — AI coaching responses are generated by Anthropic's API (see Section 4).

We take reasonable technical and organizational measures to protect your data. No system is entirely secure, and we cannot guarantee absolute security.

4. AI Processing — Claude by Anthropic

• We do not store raw AI conversation content beyond your active session in our systems. Conversation context is held temporarily to maintain conversational continuity, then discarded.
• We do not share your name, email, or account details with Anthropic — only the conversation content required to generate a response.
• Anthropic processes data in accordance with their own policies. Review Anthropic's privacy policy at anthropic.com/privacy.

5. Data Sharing

We do not sell your personal data. Ever.

We share data only with the three service processors listed in Section 3 (Supabase, Vercel, Anthropic), and only to the extent necessary to operate the service. We have no advertising partners and do not share data with data brokers.

Your habit and mood data will never be shared with employers, insurance companies, or law enforcement except in response to a valid court order or legal compulsion. In the event we are required to disclose data by law, we will notify you to the extent permitted.

6. Washington My Health My Data Act (MHMDA)

Under MHMDA, Washington residents have the right to:

• Access — Request a copy of the health-related data we hold about you.
• Correct — Request correction of inaccurate health data.
• Delete — Request deletion of your health-related data. We will fulfill deletion requests within 30 days.
• Withdraw consent — Opt out of any collection of health data not essential to the service.

To exercise MHMDA rights, email ziggytech@icloud.com.

7. Your Rights (CCPA / GDPR)

Regardless of where you live, you have the right to:

• Access — request the personal data we hold about you.
• Portability — receive a copy of your data in a portable format.
• Correction — request correction of inaccurate information.
• Deletion — request deletion of your account and all associated personal data within 30 days.
• Opt-out — California residents may opt out of the sale of personal information. We do not sell data, so this right is satisfied by default.
• Withdraw consent — EU/UK residents may withdraw consent for processing at any time.

To exercise any right, email ziggytech@icloud.com. We will respond within 30 days.

8. Sensitive Data Protections

Habit and mood data are treated as sensitive. We commit to the following:

• Your data will never be sold to or shared with employers, insurance companies, advertisers, or data brokers.
• We will never share your data with law enforcement without a valid court order, and will notify you when legally permissible.
• We will not use your mood or habit data to make automated decisions that legally or significantly affect you.

9. Children (COPPA)

Driftwork is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has used Driftwork, contact us immediately at ziggytech@icloud.com and we will delete the data promptly.

10. Data Retention

Your data is retained while your account is active. When you delete your account, we will delete your personal data within 30 days. Some anonymized, aggregated usage statistics (not linked to you) may be retained for internal product analytics.

11. Changes to This Policy

We may update this Privacy Policy as Driftwork evolves. When we make material changes, we will update the effective date and may notify you by email. Continued use of Driftwork after changes constitutes acceptance of the updated policy.

12. Contact Us

Questions, requests, or concerns about this Privacy Policy: