Skip to content
Verapsy
Back to home

Privacy Policy

Last updated: 9 July 2026. This is a customised template, not legal advice, have it reviewed by a lawyer before launch, especially the sections on health-related data, minors and international transfers.

Verapsy is a web application for self-knowledge and mental well-being: psychological self-assessment tests, personalised reports, articles, a user account and paid subscriptions. This policy explains what personal data we process and why.

1. Data controller

The controller of your personal data is [[TO COMPLETE: legal entity name, legal form and registration number]], [[TO COMPLETE: registered address]], a company established in the United States.

You can contact us about privacy at [[TO COMPLETE: email contact for legal inquiries]].

2. Data we collect

Data you give us

  • Account data: your email address, a hashed password, and optionally your name

and date of birth.

  • Test data: your answers to psychological tests and the resulting scores and

reports you choose to save.

  • Support data: any information you send us when you contact support.

Data we collect automatically

  • Basic technical data needed to operate the service (e.g. server logs

including IP address and timestamps for security and troubleshooting).

We do not use advertising trackers, third-party analytics, social-login, or advertising identifiers.

Sensitive data. Your test answers and results may reveal information about your mental well-being. Where this qualifies as health data under Article 9 of the GDPR, we process it only on the basis of your explicit consent and to provide the results you request.

3. Purposes and legal bases

  • Create and manage your account, performance of our contract with you.
  • Score your tests and generate personalised reports (including AI-generated

interpretations), your explicit consent and performance of the contract.

  • Process subscriptions and payments, performance of the contract and legal

obligations (accounting).

  • Send transactional emails (e.g. password reset), performance of the contract.
  • Keep the service secure and prevent abuse, our legitimate interest.

4. Recipients and processors

We share data only with the processors needed to run the service:

  • Stripe, payment processing and subscription billing.
  • OpenAI, generating the written interpretation of your test results. Your

answers and scores for a given test are sent to OpenAI to produce that report.

  • [[TO COMPLETE: hosting provider (name and country)]]
  • [[TO COMPLETE: email/SMTP provider used to send transactional emails]]

We do not sell your personal data.

5. International transfers

We are established in the United States and your data is processed there, as well as by the processors listed above (e.g. Stripe, OpenAI), which are also located in the United States. If you are in the European Economic Area, the United Kingdom or Switzerland, these transfers are protected by appropriate safeguards such as the EU-U.S. Data Privacy Framework (where the recipient is certified) or the European Commission's Standard Contractual Clauses.

6. Retention

  • Account data: for as long as your account exists, then deleted or anonymised

within 30 days after account deletion.

  • Test results: until you delete them or your account.
  • Billing records: for the period required by applicable tax and accounting law

(up to 10 years).

  • Server logs: 12 months.

7. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, port and object to the processing of your personal data, and to withdraw consent at any time. To exercise these rights, contact us at [[TO COMPLETE: email contact for legal inquiries]]. You may also lodge a complaint with the data protection authority of your country of residence (for example, the CNIL if you live in France).

8. Local storage (no advertising cookies)

Verapsy stores a few items in your browser's local storage to run the service, your session token, a cached copy of your profile, your saved results and your language preference. These are essential or functional only. See our Cookie Policy for details.

9. Security

We protect your data with measures such as password hashing, encrypted transport (HTTPS) and access controls. No method of transmission or storage is completely secure, but we work to protect your information.

10. Minors

The Service is intended for adults only. You must be at least 18 years old to create an account and use Verapsy. We do not knowingly collect personal data from anyone under 18; if we learn that we have done so, we will delete the account and the associated data.

11. Changes

We may update this policy. We will indicate the "last updated" date above and, where appropriate, notify you of significant changes.

12. Contact

Questions about this policy: [[TO COMPLETE: email contact for legal inquiries]].