Last updated 2026-07-18

Privacy Policy

Bearing is a goal coach that can navigate by your Persona Matrix chart. The design rule behind everything below: Bearing stores your goals, your chat, and encrypted keys to your chart — never the chart itself. Every statement here describes shipped, tested behavior.

What Bearing stores

Account. Your email address and passwordless sign-in records (magic links, sessions). Session records deliberately store no IP address and no browser user-agent — both are forced to NULL on creation.

Goals. Title, description, kind, status, target date, and your explore dial. Signed-out use keeps goals in your browser only; nothing reaches our database.

Coach chat.When signed in, your messages and the coach's replies are stored per goal, capped at the newest 200 messages per goal — older messages are deleted as new ones arrive. Signed-out coaching is not persisted.

Mind connection.If you connect your Persona Matrix chart, Bearing stores the OAuth tokens for that grant encrypted with AES-256-GCM; the encryption key lives only in server configuration, never in the database. Compiled directive blocks are cached for at most 15 minutes, then deleted. Your chart itself — scores, regions, raw profile — is never written to Bearing's database.

The coach and AI processing

Coach replies are generated by a large language model reached through Vercel's AI Gateway. What is sent per reply: the goal you are chatting about, the recent chat messages, and — only if you connected your chart — a compiled directive block (style directives, not your raw scores). We send no email address, no identifiers beyond the conversation itself, and we run no analytics on chat content.

Logging

At the application layer we keep no request logs, no IP addresses, no analytics — our code writes none of these. Our hosting platform (Vercel, a listed subprocessor) transiently processes IP addresses to serve requests and retains short-lived platform request logs outside our control.

Cookies

Three first-party, HTTP-only cookies; no analytics, advertising, or third-party cookies exist:

better-auth.session_token — keeps you signed in (7 days; __Secure- prefixed in production).
bearing_oauth_tx — signed, 10-minute cookie that carries an in-progress chart connection (OAuth state/PKCE) and is cleared when the flow completes.
bearing_coach_quota — signed, 24-hour counter that rate-limits the signed-out coach. It holds a number, not an identifier — we cannot recognize you by it.

Subprocessors

Vercel — hosting, compute, and AI Gateway (chat generation). Transient IP processing and short-lived platform logs, as above.
Neon — Postgres database holding the stored data described above, encrypted at rest.
Resend — delivers magic-link sign-in email; receives your email address for that purpose only.
Model provider via AI Gateway — receives the coach conversation content described above to generate replies.

Deleting your data

You can delete any goal (which deletes its chat with it) and disconnect your chart at any time — disconnecting deletes the stored encrypted tokens and the directive cache. Revoking Bearing's grant from your Persona Matrix account page cuts off chart access server-side as well. Full account deletion is currently by request: contact the operator at the address published on this site and we will hard-delete your account and everything attached to it. All Bearing tables cascade-delete from the account row.

Contact & changes

Operator legal-entity details: [Thomas Wash — to be completed at incorporation]. We update this page and its date when behavior changes; policy text is checked against shipped code in CI.