Privacy

Arbor keeps a hosted copy of your Life Tree so the coach can stay with it. This page says what that copy contains, who else touches it, and how you take it back.

An account stores your email and a hash of your password. The password itself is not kept. A password reset stores only a hash of the link until it expires or is used. The Life Tree is the document you build: nodes, edges, events, reviews, and the rest of that snapshot. Coach conversations are stored with the account. Each model call also stores the route, the model name, token counts, and, for voice, how long the audio was. The words stay in the conversation. If you take a seat, Stripe’s customer id, subscription id, and billing status are stored too. A waitlist signup stores only the email you leave. The free life audit keeps unfinished answers in this browser. Those ratings and notes are not uploaded. If you save goals into Arbor, only the goals and first actions you confirm are stored with your Life Tree. Reflections are included only if you choose that.

Vercel hosts the app. Neon stores the database in AWS us-east-2. Stripe processes payment for a seat. When an OpenAI key is configured, coach messages, the slice of the tree the coach needs, and voice transcription are sent to OpenAI. Without that key, the coach answers inside the app and that text is not sent to OpenAI.

On You, you can export the Life Tree, download a readable copy, or delete it. Deleting a hosted account removes the user, the tree, the coach chats, the model-call log, and the sessions that belong to them.

The contact address is set when Arbor is hosted.