Here's what data the tool collects, how it's handled, and what you can do about it. No corporate fog.
Last updated: June 22, 2026 · Effective: May 7, 2026
Your responses are stored encrypted. We don't casually browse user assessments. Access is limited to: troubleshooting an issue you've reported, reviewing a flagged crisis event, or coaching you've explicitly requested. Every access is logged. Conversations are processed by Anthropic's Claude AI under their commercial terms — Anthropic does not use this data to train AI models. Your data is never sold, never used for advertising, and never shared with outside parties.
While you're an active subscriber, your data stays available. After cancellation, your records remain in view-only mode for 12 months in case you return, then are permanently deleted. You can request immediate deletion at any time.
You can export your transcripts and profile as a PDF at any time from your account.
The Second Half Assessment is operated by Warp 10 LLC, a Tennessee limited liability company. For all privacy questions, contact support@theredeemedsecondhalf.com.
Your email address (used for authentication and necessary service messages) and your password (stored as a one-way cryptographic hash — we can't read it, though you can reset it through the app).
We don't collect your name, phone number, address, age, or demographic information at account creation.
The answers you type or speak during an assessment, the conversational exchanges with the AI interviewer, which domains you selected, and the profile and 90-day action plan generated at the end. All of this is stored in our database (Supabase), encrypted at rest, and tied to your user ID.
Basic server logs for error tracking and security monitoring. These don't contain the content of your assessment. Logs are purged on a regular rotation.
Inside the assessment application itself — every screen where you answer questions, talk with the AI interviewer, or read your profile and 90-day plan — we run no third-party analytics, tracking, or advertising. No Google Analytics, no Facebook Pixel, no behavioral tracking, no fingerprinting, no ad networks, no data brokers.
Our public pages — everything outside the assessment application, including the landing page, How It Works, About, sign-in, the post-checkout thank-you page, and these policy pages (privacy, terms, safety, refund) — use Google Analytics (GA4) to measure aggregate traffic: how many people visit, which pages they land on, and where they came from. GA4 sets a first-party cookie and records approximate location (derived from your IP, which we don't store), device, and browser. It never sees your assessment content, and it stops at the application boundary — the moment you enter the assessment, no analytics runs.
If you use your device's native voice dictation (the mic button on your phone keyboard) to type answers, that processing is handled by your device or keyboard provider — not by the app — and only the transcribed text gets saved alongside your assessment.
The application uses your browser's localStorage to keep you signed in across visits (authentication tokens from Supabase). It also caches a minimal amount of app data locally for performance. The application sets no advertising cookies, no tracking pixels, no fingerprinting, and runs no behavioral analytics. On our public pages only, Google Analytics sets a first-party analytics cookie (described above); it is never set inside the assessment application and is not used for advertising.
Be clear about this. This tool doesn't use end-to-end encryption. Your assessment content is stored encrypted at rest, but it isn't cryptographically hidden from the operator.
What that means in practice:
You can always see your own assessments through the app. Other users cannot (enforced at the database level through row-level security).
Vic Holtreman, as the operator of Warp 10 LLC, has administrative access to the database. We don't casually browse user assessments. Access is limited to three purposes:
Every access is logged. Vic does not share, publish, or discuss transcripts with anyone else.
A future release of this tool will move to per-session, user-granted access (where Vic does not access transcripts unless you grant temporary access for support or coaching, and you see every grant and access event in your account log). Until that ships, the access posture above is what governs.
No one else. Your data is not shared with any third party outside the service providers listed in Section 5, and never for advertising, marketing, or resale.
We use your data only to operate the tool:
We do not: use your data for advertising or behavioral targeting; sell, rent, lease, or broker your personal data; use your content to train AI models; share your assessment content or account information with analytics companies, ad networks, or data brokers; use sensitive content (beliefs, reflections, emotional material) for any secondary purpose.
We keep this list short on purpose.
On our public pages we keep third-party tools to a minimum. No Mixpanel, no HubSpot, no Mailchimp, no data enrichment services, no data brokers.
When you type an answer during an assessment:
Anthropic's commercial API terms state that data submitted through their API is not used to train their models. We do not send your email address or other identifying information alongside your conversation content in API calls.
An honest self-assessment involves sharing personal reflections, beliefs, and emotional experiences. Religious and philosophical beliefs are treated as a special category of personal information under GDPR (EU users) and sensitive personal information under CCPA (California users).
Because of that, we ask for your explicit, separate consent at signup before you can use the tool — not buried in the Terms, but as its own dedicated checkbox. You can withdraw that consent at any time by deleting your account.
The retention model below applies once subscription billing is active. While the tool is in its Founder phase and pre-subscription, your account and data stay available without time limit; deletion only happens if you request it (see User-requested deletion, below).
No matter where you live, you have the following rights regarding your data:
To exercise any of these rights, email support@theredeemedsecondhalf.com. We aim to respond within 5 business days and no later than 30 days.
If you're in the European Union or European Economic Area, GDPR applies to your data. In addition to the rights in Section 9, you have:
Data transfers outside the EU. Your session data is processed through US-based services (Anthropic, Supabase, Vercel). Standard Contractual Clauses apply through the respective service providers' data processing agreements.
Legal basis for processing. Account creation, authentication, and storing your assessment content rest on contractual necessity (Art. 6(1)(b)). Processing of reflections and beliefs you choose to share rests on explicit consent (Art. 9(2)(a)) — captured via a dedicated signup checkbox. Server error logging rests on legitimate interests (Art. 6(1)(f)).
California residents have rights under the CCPA and CPRA, including rights to know, delete, correct, opt out of sale or sharing, and limit use of sensitive personal information.
We do not sell or share your personal information for behavioral advertising. Full stop.
Sensitive personal information we may process includes philosophical beliefs (§ 1798.140(ae)(4)) and reflections that touch on mental or emotional health (§ 1798.140(ae)(8)). We use this information only to operate the tool — not for profiling, advertising, or any secondary purpose.
To exercise California rights, email support@theredeemedsecondhalf.com.
You're interacting with AI, not a human being. The AI will identify itself as AI if asked directly and will never claim to be human or a licensed professional. We will not use your assessment content to train AI models.
Your content is encrypted at rest (via Supabase) and in transit (TLS / HTTPS). Access to the database is restricted. We use row-level security policies so users can only access their own records through the app.
No security system is perfect. If we become aware of a breach affecting your personal data, we'll notify affected users and relevant authorities as required by applicable law. You're responsible for keeping your password secure.
The tool is for users 18 and older. We don't knowingly collect personal information from anyone under 18. If you believe someone under 18 has created an account, email us and we'll delete the account and all associated data.
We'll post updates here and update the "Last updated" date at the top. For material changes, we'll notify active users by email before the change takes effect.
Questions, requests, complaints, or anything else privacy-related:
support@theredeemedsecondhalf.com
Warp 10 LLC
Tennessee, USA
We respond within 5 business days for most inquiries, and no later than 30 days for formal data subject requests.