Privacy policy

Effective November 3, 2026

Reagale is a survey platform where answering feels like a conversation. That only works if people can trust what happens to their words, so this policy says plainly what we collect, how AI is involved, who can see what, and how it's protected. It applies to reagale.com and the Reagale apps. Questions, or requests we haven't built a button for yet: founders@reagale.com.

What we collect

• Account information. Email address, password (stored only as a hash by our authentication provider — we never see it), and the profile details you choose to add: first and last name, username, organization, and display preferences.
• Surveys you create. Survey names, questions, quiz result sets, settings, and your conversations with the Survey Architect while drafting and editing.
• Survey responses. When you take a survey: your answers, the full conversation transcript (including everything you type to Pip, our AI interviewer), and the name you choose to attach — your real name, a username, or nothing. You can answer most surveys without an account; some surveys require sign-in, and that requirement is shown before you start.
• AI-generated derivatives of responses. From each response we generate extracted answers, emergent themes with quotes, per-question sentiment, and — for quizzes — a personalized result. These are stored alongside the response.
• Team invitations. Email addresses that survey admins invite as collaborators. Invite records are purged once accepted (membership itself is the durable record) or after they expire.
• Consent records. Every survey opens with a consent step. When you submit, we store when you passed it and a fingerprint (hash) of the exact consent wording you were shown, so there is a durable record of what you agreed to.
• Usage records.Counts and timestamps of product events (surveys started, submitted, results viewed), and logs of our AI calls (which feature ran, token counts, and the associated account and survey) used to operate the service and understand costs. These records are visible only to Reagale administrators. Separately, each survey keeps an append-only audit log — every change to the survey or its responses, plus results views, exports, and reports — visible to that survey's admins. We use no third-party analytics, ad trackers, or advertising of any kind.
• Cookies and on-device storage.A session cookie keeps you signed in. Your browser's local storage holds small conveniences — a pending team invite, an anonymous conversation waiting to be claimed by a new account, and flags like “has seen the how-to-advance tip.” No cross-site tracking.

How AI processes your data

AI is the heart of the product, so here is exactly where it touches your words. Survey content and responses are sent to two AI model providers over encrypted connections: Anthropic (Claude models — drafting surveys, extracting answers, finding themes, sentiment, quiz results, analytical reports, and simulated test responses) and OpenAI(the Pip interviewer that conducts conversational surveys and asks follow-up questions). What they receive is what the feature needs: the survey's questions, the response or conversation being processed, and the display name attached to it.

We do not train AI models on your data. Our providers process API data to serve our requests and state that API inputs and outputs are not used to train their models by default; we have not opted into any training programs. AI outputs about you (quiz results, extracted answers, themes) are stored in your response and shown according to the visibility rules below.

Who can see what

• Survey creators and their teams. The creator of a survey sees its results, including full conversation transcripts. Creators can invite collaborators with tiered roles: viewers see aggregate results and exports without raw transcripts; editors and admins also see full transcripts. When you respond to a survey, assume the people who run it — not just one person — can read your answers.
• Other respondents and the feed.Your individual answers are not shown to other respondents unless you explicitly share them. Sharing a social-survey response makes it visible to others who took that survey; sharing a quiz result publishes it to other users' feeds. Both are off until you press share, and you can unshare.
• Aggregates. Published surveys show aggregate results (counts, percentages, theme names) to takers; quotes appear only from shared responses or to the survey team.
• Your public profile and leaderboards. You choose whether leaderboards show your name, your username, or keep you anonymous, and whether your email appears on your public profile. Profiles show display name, organization, member-since date, activity stats, and your live surveys.
• Nobody else. We do not sell personal data, rent it, or share it with advertisers. Ever.

Services we rely on

Your data is processed by a short list of infrastructure providers acting on our instructions: Supabase (database and authentication), Vercel (application hosting), Anthropic and OpenAI (AI processing, as described above), and Resend (the emails we send — response notifications and team invitations). Each receives only what its job requires.

How it's protected

Data is encrypted in transit (TLS) and at rest by our database provider. Access inside the product is enforced at the database layer with row-level security: respondents can read only their own responses, survey teams only their surveys' data, and the viewer/editor transcript boundary is enforced in the database, not just the interface. Every change to a survey or its responses, and every results view, export, and report, is written to an append-only audit log that no one — including us through the product — can edit or delete. Operational logs are restricted to Reagale administrators. Passwords are handled entirely by our authentication provider as salted hashes.

Retention and deletion

• Delete your account yourself — the button is in your profile editor. This permanently deletes your account, the surveys you created, and all responses those surveys collected.
• Responses you gave to other people's surveys are disconnected from your account when you delete it, but the response itself — including any name you typed when answering — remains part of that survey's results. To have a specific response removed, ask the survey's creator to delete it, or email us and we'll help.
• Survey teams can delete individual responses or entire surveys at any time; deleting a survey deletes its responses.
• Otherwise we retain data for as long as your account or the relevant survey exists, because the product's purpose is letting creators revisit their results.

Children

Reagale is not directed to children under 13, and we don't knowingly collect their data. If you believe a child has created an account, contact us and we'll delete it.

Changes and contact

When our practices change — a new processor, a new feature that touches your data — we'll update this page and its effective date. Material changes get an in-product notice. For anything this page doesn't answer, or to exercise a request we haven't built a button for: founders@reagale.com.