Privacy Policy

This policy explains how Innovatorly Ltd (“we”, “us”) handles personal data when you use AgentSoul — the website at agentsoul.market and the iPhone app AgentSoul: Enneagram for Bots (called 干将: 九型人格与智能体 in Chinese). Together we call these the “Service”.

Innovatorly Ltd is the controller of your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

• Company: Innovatorly Ltd, registered in England and Wales, company number [COMPANY NUMBER]
• Registered office: [REGISTERED ADDRESS]
• ICO registration number: [ICO REGISTRATION NUMBER]
• Contact: hello@agentsoul.market

• You can use AgentSoul without an account. The iPhone app has no sign-in at all.
• Flash Forge screenshots are never stored. They are processed in memory to produce your result and then discarded.
• Gao Dao conversations are not stored word for word. We keep a paraphrased summary, structured observations and your final report.
• The app identifies your phone with a random ID. Our servers keep only a salted hash of it.
• We use Google’s Gemini API to generate results. We do not sell your data, show ads, or track you across other companies’ apps or websites.
• You can delete your app data at any time in Settings → Delete my data, or email us.

Deep Forge (Enneagram questionnaire)

Your answer to each question, whether you are forging for yourself or an ideal agent, an optional name you give the agent, and the computed result (type, wing, subtype, tritype, scores). We also store the four generated files so your result page loads quickly.

Flash Forge

See section 5. We keep the derived report, the number of screenshots and a one-way fingerprint (SHA-256 hash) of the upload — never the images.

Gao Dao

See section 6.

Email and profiles (optional)

If you ask us to email your files, or to save a result to a profile, we collect your email address. Profiles use a “magic link” sign-in, so we never hold a password. A profile stores your email, an optional display name, whether you agreed to receive product news, and the results you have saved or published.

Published souls

If you publish a soul to the public directory at /soul, its content, name and your display name become public, along with install and upvote counts.

Technical data

Like any website, our hosting provider receives your IP address, browser details and the pages you request. We use your IP address to apply rate limits (for example, a small number of Flash Forge and Gao Dao sessions per day) to prevent abuse and control costs.

The app is a native shell around the AgentSoul service. It has no accounts in this version.

• Device identifier. On first use the app creates a random identifier and stores it on your phone in a secure, app-only cookie called as_device. Our servers store only a salted SHA-256 hash of it, never the identifier itself. We use the hash to show your “My Souls” library, to apply per-device rate limits, and to find everything to erase when you choose “Delete my data”. It is not your Apple advertising identifier (IDFA), and we never ask for tracking permission because we do not track you.
• Your forge content. The results, reports and files you create, linked to the hashed device identifier.
• Photos you choose. The app uses Apple’s photo picker, so it can only see the screenshots you select — it has no access to the rest of your photo library. Images are resized and their metadata (including location) is stripped on your phone before upload. They are handled as described in section 5.
• Voice input (optional). If you use hold-to-talk in Gao Dao, speech is converted to text by Apple’s speech recognition entirely on your iPhone — the audio never leaves your phone and is never stored. Where on-device recognition isn’t available for your language, the talk button isn’t shown. We receive only the text you review and choose to send, never audio.
• Push notifications (optional). If you allow notifications, we store the push token Apple gives us so we can tell you when your soul is ready. You can turn this off in the app’s Settings or in iOS Settings at any time.
• App integrity checks. Where enabled, we use Apple’s App Attest service to confirm that requests come from a genuine copy of the app. This helps us stop abuse; it does not identify you.
• Product analytics. See section 8.
• Language setting. Your preferred language, so we can show the app in English or Chinese.

Deleting the app removes the identifier from your phone, but not the data on our servers. To erase that, use Settings → Delete my data before deleting the app, or email us.

Flash Forge reads 3–10 screenshots you choose — for example chats, emails or posts you wrote — to infer how you communicate.

• The images are sent to Google’s Gemini API for analysis and are processed in memory only. We never write them to our database, file storage or logs, and we do not keep them on your phone’s app storage.
• We keep only the derived report (signals, a written synthesis and the four agent files), the number of screenshots, and a SHA-256 fingerprint of the upload set used to detect duplicates. The fingerprint cannot be turned back into the images.
• The analysis is instructed to focus only on your messages, not the other people in a conversation, and to paraphrase rather than quote screenshot text.

Screenshots can contain other people’s names and messages. Please only upload material you have the right to share, and crop or avoid other people’s private information where you can (see our Terms of Use).

Gao Dao is a guided conversation with an AI mentor. To reply to you, each message you send is passed to Google’s Gemini API.

• Before a message is sent to the AI, we automatically mask common identifiers such as phone numbers, email addresses, ID numbers and bank card numbers.
• We do not store your messages word for word. We store a paraphrased running summary, structured observations the mentor draws from the conversation, the conversation’s progress, and — at the end — your result and the Gao Dao in-depth report.
• For each AI call we record technical telemetry (model, token counts, cost, response time, errors). This contains no message text and helps us keep the service reliable and affordable.
• If our safety checks detect signs that you may be in crisis, the conversation stops, we show you where to find help, and we record a safety flag on the session.

Conversations about personality can touch on emotions, relationships or health. We do not ask you for this kind of information, and you do not need to share it to get a result. If you choose to share it, we process it only to provide your Gao Dao result, on the basis described in section 7.

• To provide the Service you ask for — generating results, reports and files, showing your library, emailing files you request, and deleting data when you ask. Basis: performance of a contract (UK GDPR Art. 6(1)(b)).
• To keep the Service safe, reliable and affordable — rate limits, abuse prevention, App Attest checks, error and cost telemetry, safety checks. Basis: our legitimate interests (Art. 6(1)(f)) in running a secure, sustainable free service.
• To understand and improve the product — privacy-friendly analytics (section 8). Basis: legitimate interests (Art. 6(1)(f)). You can object at any time.
• Push notifications and product news emails — only if you opt in. Basis: consent (Art. 6(1)(a)), which you can withdraw at any time.
• Sensitive information you choose to share in Gao Dao — [ARTICLE 9 CONDITION — CONFIRM WITH LEGAL REVIEW].
• To meet legal obligations and to establish or defend legal claims (Art. 6(1)(c) and (f)).

Your result is an automated inference about personality type. It does not produce legal or similarly significant effects on you, and we do not use it to make decisions about you.

On the website

• Essential cookies — if you sign in to a profile, Supabase sets authentication cookies so you stay signed in.
• Preferences — your light/dark theme choice is saved in your browser’s local storage.
• Vercel Web Analytics and Speed Insights — cookieless, aggregated page-view and performance measurement.

In the iPhone app

• The as_device identifier (section 4), stored only inside the app.
• PostHog (EU cloud), configured to run without cookies. We record a small set of product events — for example app opened, mode selected, forge started, soul revealed, files sent, report opened, notifications enabled, data deleted — keyed to your hashed device identifier. We do not send your forge content, messages or images to PostHog.

We do not use advertising cookies, tracking pixels, advertising identifiers or cross-app tracking, and we do not sell or share your data for advertising.

We use the following service providers (“processors”), who handle data only on our instructions:

• Google (Gemini API) — generates Flash Forge and Gao Dao results. We use the paid Gemini API, under whose terms Google does not use your prompts or responses to improve its products [CONFIRM: BILLING ENABLED ON THE GEMINI API PROJECT]. Gemini API terms
• Supabase — our database, hosted in the EU West (London) region, and profile sign-in.
• Vercel — website and API hosting, content delivery, web analytics.
• Upstash — short-lived rate-limit and cost counters.
• Resend — sends the emails you request (files, sign-in links).
• PostHog (EU) — cookieless product analytics in the iPhone app.
• Apple — delivers push notifications and verifies app integrity (App Attest). Apple’s own handling of your data as App Store operator is covered by Apple’s privacy policy.

We may also disclose data if required by law, or to a buyer or successor if our business is reorganised, subject to this policy. We do not sell personal data.

Our database is in the UK (London). Some providers — including Google, Vercel, Upstash and Resend — may process data in the United States or other countries. Where personal data leaves the UK, we rely on UK adequacy regulations (including the UK–US Data Bridge where the recipient is certified) or on the UK International Data Transfer Agreement / UK Addendum to the EU Standard Contractual Clauses [CONFIRM TRANSFER MECHANISM PER PROVIDER]. PostHog analytics data is hosted in the EU. You can ask us for details of these safeguards.

• Forge results, reports, generated files and Gao Dao session summaries — until you delete them (in the app) or ask us to, and in any case no longer than [RETENTION PERIOD — CONFIRM].
• Deep Forge answers — [RETENTION PERIOD — CONFIRM].
• Flash Forge images — not retained; discarded once analysis finishes.
• Gao Dao telemetry and error logs (no message text) — [RETENTION PERIOD — CONFIRM].
• Rate-limit counters (keyed to IP address or hashed device identifier) — expire automatically after about 24 hours.
• Profiles — until you ask us to delete your profile.
• App push tokens and device records — until you choose “Delete my data” or [RETENTION PERIOD — CONFIRM] after the device was last seen.
• Analytics events — [RETENTION PERIOD — CONFIRM].
• Hosting and email delivery logs — kept by Vercel and Resend under their own retention settings [RETENTION PERIOD — CONFIRM].
• Correspondence with us — as long as needed to deal with your request, then [RETENTION PERIOD — CONFIRM].

Under UK GDPR you have the right to:

• access the personal data we hold about you;
• correct inaccurate data;
• erase your data;
• restrict how we use it;
• receive your data in a portable format;
• object to processing based on legitimate interests, including analytics;
• withdraw consent at any time, where we rely on consent.

To use these rights, email hello@agentsoul.market. Because most of AgentSoul works without accounts, we may not be able to link data to you by name. It helps to include your result link(s), or — for a profile — to write from the email address on the profile. In the iPhone app, you can erase your data yourself (section 13). We will reply within one month, as the law requires.

In the iPhone app

Open Settings → Delete my data and confirm. This permanently deletes every result, report, library entry and device record linked to your phone’s identifier, and clears the identifier from the app. It cannot be undone.

On the website, or by email

Email hello@agentsoul.market with the result link(s) you want removed, or from the email address on your profile. You can unpublish a soul you published from your profile at any time.

AgentSoul is not directed at children under 13, and the iPhone app is rated 13+. We do not knowingly collect personal data from children under 13. If you believe a child has used the Service, contact us and we will delete their data.

Your AgentSoul result is generated with the help of AI. It is a type hypothesis for reflection and for configuring AI agents — not a diagnosis, not a scientific measurement, and not psychological, medical or professional advice. It can be wrong. If you are struggling, please speak to a qualified professional or your local emergency services.

We use HTTPS for all traffic, row-level security in our database, server-side-only access to sensitive tables, one-way hashing of device identifiers, and on-device image resizing and metadata removal in the app. No system is perfectly secure, but we work to protect your data and will notify you and the ICO of a breach where the law requires.

We will update this policy when our Service or the law changes. We will change the date at the top of this page and, for significant changes, tell you in the app or on the website before they take effect.

Innovatorly Ltd
[REGISTERED ADDRESS]
Email: hello@agentsoul.market

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the UK Information Commissioner’s Office (ICO).

To produce a reading, AgentSoul sends some of your content to a third-party AI service: Google LLC's Gemini API. In the iPhone app this happens only after you agree on a consent screen that appears before anything is sent; you can withdraw that permission at any time in Settings.

What is sent

• Flash Forge: the chat screenshots you choose (or the sample chats), including any text and names visible in them.
• Gao Dao: the answers you type or dictate in the conversation, and the Agent type you choose. Phone numbers, email addresses, ID and bank-card numbers are masked before sending.
• Deep Forge (web): no content is sent to an AI service; scoring runs on our servers.

Who receives it and why

Google LLC receives this content through the Gemini API and processes it on our behalf, as our processor, solely to analyse it and return your personality reading and the text of your agent files. We do not use it for advertising and we do not sell it.

Protection

Google processes the content under its Gemini API terms and its data processing terms, which require it to protect personal data to a standard at least equal to the one described in this policy, including appropriate safeguards for international transfers.

What we keep

Flash screenshots are processed in memory and are not stored by us. We store the resulting reading. For Gao Dao we store a summary and your result, not your raw messages.

Voice input

Dictation in the app is recognised on your device. Audio is not sent to us or to Google.