Privacy Policy
Last updated: August 19, 2026 · Effective as of the date above; the prior version governs before it.
Who we are
The Unblocked Mirror and amysanders.co are operated by Lucky Sanders LLC, a Utah limited liability company doing business as Amy Sanders and Amy Sanders Coaching. This policy explains what we collect, how we use and protect it, and the choices you have. The service is offered to United States residents. Questions, anytime: hello@amysanders.co (requests sent to support@ are routed the same — you never need to resubmit).
What we collect
- Account basics — name and email, provided at purchase or when you save quiz results.
- Quiz answers and results — your responses to our Human Design and Enneagram quizzes and the results generated from them.
- Your profile — Human Design type, authority, profile; Enneagram type and wing.
- Coaching conversations — the content of your sessions with the Mirror.
- Community content — for Collective members: posts, replies, ritual entries, display name.
- Session and usage records — timestamps, session counts and duration, feature usage, subscription status.
- Purchase data — what you bought and when, from our checkout provider. Payment card numbers are collected and processed by ThriveCart and its payment processors, not stored in our application database.
- Technical, device, and attribution data — IP address and request logs (security and abuse prevention), browser/device data, cookie and local-storage identifiers, attribution and page/interaction events, and purchase-event signals, as detailed in the tracking section below.
How we use it
To provide and personalize your coaching; to maintain the running profile that lets the Mirror remember your journey; to operate the community; to send the emails described below; to secure and monitor the service; and to understand usage so we can improve the product. We do not sell your personal information, and we do not use your conversations for advertising.
AI processing
Your conversations are processed by AI providers to generate the Mirror’s coaching responses and, only as described in “Quality review” below, for quality evaluation. Our providers are OpenAI and Anthropic (which provider generates your responses depends on our current configuration). Under our current business-API settings and contractual terms with these providers, submitted content is not permitted to be used to train their general-purpose models.
Quality review (opt-in)
Our internal quality evaluation runs on test scenarios, not on member conversations. Excerpts from real conversations are reviewed for quality only if you have opted in via Settings, and only after reasonable steps to remove direct identifiers. You can withdraw that consent anytime in Settings.
Sensitive and health-adjacent information
Coaching conversations can touch your emotional life, mental wellbeing, relationships, and body. We treat all of it as sensitive: encrypted at rest, never sold, never used for advertising or marketing, and disclosed outside our listed service providers only when required by law or legal process, necessary to protect rights or safety, directed by you, or as part of a properly disclosed business transfer. Where a law such as Washington’s My Health My Data Act requires separate affirmative consent before collecting or using regulated consumer health data, we obtain it.
How we protect it
Conversation content and community posts are encrypted with AES-256-GCM before storage, with the encryption key held separately from the database. Cryptographic decryption is performed on our servers; the resulting content is transmitted securely to your authenticated browser for display.
How long we keep it — by category
Three things are separate events: cancelling a subscription (stops renewal), membership expiration (paid access ends), and account deletion(removes your account). A free account continues until you delete it, even if a paid membership ends. Category rules — these specific periods control over any general statement:
- Raw conversation messages: deleted automatically 30 days after a session ends.
- Encrypted session summaries: kept while your account exists, so the Mirror remembers your journey.
- After a paid membership ends (and you have no continuing free account activity): personal data is scheduled for deletion 90 days later, during which you can reactivate or request an export.
- Expired-trial and inactive free accounts: deleted or de-identified on the same 90-day schedule once inactive, unless you keep the account active.
- Community posts of departed members: may remain, de-identified (“a member who has left”), as described in the Terms — account deletion does not necessarily remove them.
- Records we must keep: purchase, tax, consent, suppression-list, dispute, security, and fraud-prevention records, plus rotating backups, are retained as long as necessary for those purposes even after deletion.
- Irreversibly de-identified aggregate metrics — data not reasonably linkable to you — may be retained for business analytics.
Emails we send
- Service emails — sent as applicable to account holders and purchasers: sign-in links, account notices, and the purchase acknowledgments and renewal notices described in the Terms. Purchase receipts come from ThriveCart; our own service email is delivered by Postmark.
- Marketing emails — Amy’s letters and product news, sent through Kit only if you said yes (for example, the checkbox when saving quiz results). Every marketing email has one-click unsubscribe; unsubscribing never affects your membership.
Cookies, analytics, and advertising — the honest inventory
Cookies and local storage we set:
| Name | What it does | Lifetime |
|---|---|---|
| Clerk authentication cookies | Keep you signed in | Until you sign out or the authentication session expires under our sign-in provider’s configuration |
_mirror_attribution | Records which partner or influencer link brought you here — a short partner code; it does not itself contain your name or email, though it may be linked to later account or purchase activity for commission and attribution purposes | 30 days |
_mirror_first_touch | Records how you first found us (ad, search, referral), for our own attribution | 30 days |
_mirror_theme | Remembers your theme choice | 30 days |
| Onboarding cookie | Remembers you finished onboarding, for faster page loads | 1 year |
| First-touch UTM values (localStorage) | Same attribution purpose, stored in your browser | Until cleared |
Analytics. We use PostHog for product analytics, including session replayconfigured to mask text-entry fields and conversation content — and we prohibit intentional capture of conversation text in replay. We use Google Analytics for site-traffic measurement. Identification uses an opaque account ID, never conversation content.
Advertising measurement. Our public marketing pages load the Meta (Facebook) Pixel and Google Analytics tags, which set third-party cookies (like _fbp and _ga) and send page-visit and purchase signals to Meta and Google so we can measure our advertising. These tags do not run on authentication pages, and conversation content is never shared with advertisers. Meta’s and Google’s handling of measurement data is governed by our agreements with them and by their applicable service terms; their roles differ from our other providers’. To opt out: your browser’s cookie controls, ad blockers, and the ad-preference settings in your Meta and Google accounts. Where applicable law requires us to honor a recognized opt-out signal such as Global Privacy Control, we do so.
The companies that help us run the service
| Provider | What they do | Data involved |
|---|---|---|
| OpenAI / Anthropic | Generate coaching responses; quality evaluation only as described above | Conversation content |
| Supabase | Database | Stored account data (conversations encrypted) |
| Vercel | Hosting | Technical/request data |
| Clerk | Sign-in and accounts | Name, email, sign-in metadata |
| ThriveCart + its payment processors | Checkout, billing, receipts | Name, email, payment details |
| Kit | Marketing email | Email, name, quiz-type tags, consent status |
| Postmark | Service email | Email, name |
| PostHog | Product analytics, masked session replay | Usage events, opaque IDs |
| Google / Meta | Advertising and traffic measurement (see above — different role) | Page-visit and purchase signals |
| Vimeo | Hosts Collective videos | Playback requests |
Providers other than Google/Meta process data on our instructions to deliver their function and may not sell it or use it for their own marketing.
Your rights — extended to everyone
Directly from Settings: export a copy of your data; request deletionof your account and personal data, subject to the retention exceptions described above (protected by fresh re-authentication; remember to cancel any active subscription first — deletion does not cancel billing); correct your profile; withdraw quality-review or marketing consent. Or email hello@amysanders.co. We extend these options to every member regardless of which state’s law applies to them.
Children
The service is for adults 18 and older. We do not knowingly collect information from anyone under 18.
Changes to this policy
Material changes will be announced to existing subscribers by email and an in-app notice before they take effect, with the effective date stated; the prior version governs until then. Where applicable law requires your affirmative consent to a change — for example, a new use of regulated health data — that change will not apply to you until you give it.
Contact
Privacy questions or requests: hello@amysanders.co.