Privacy Policy
Last updated October 17, 2026
gpt4idiot technologies runs Candid at heyjess.org. This policy explains what we collect, why, who we share it with, and the choices you have. Questions or requests: everettkane68@gmail.com.
Your photo
When you send a selfie, it goes to OpenAI so Cee can read it, after OpenAI’s safety filter checks it. We never store your photo. It isn’t saved on our servers, in your plan, or in your share card. We don’t create or keep a faceprint or any other biometric identifier from it. OpenAI handles it under its API terms: it doesn’t use API data to train its models, and may keep it for up to 30 days to monitor abuse.
What we collect
- Your conversations with Cee: what you ask, your answers, and what Cee says back, including ratings and odds.
- Your plan and progress if you save or start a plan: tasks, check-ins, focus areas, XP and rank.
- Your account if you sign in with Google: your name, email address and Google account ID. We don’t get your Google password.
- Payment details if you subscribe. Stripe handles payment. We get your email, a Stripe customer and subscription ID, and whether you’ve paid. We never see or store your card number.
- Email addresses you give us for reminders or the waitlist.
- Usage: counts of what happens on the site (for example, how many people reached a verdict), which link or ad brought you, and a one-way scrambled version of your IP address that we use to limit abuse without storing the address itself.
- On your device: your browser keeps your account link and settings in local storage, and a sign-in cookie. We don’t use advertising or third-party tracking cookies.
Why we use it
- To give you Cee’s answers, keep your plan and progress, and remember you across devices.
- To charge your subscription, send receipts, and handle cancellations and refunds.
- To keep Candid safe: refusing unsafe photos, preventing abuse, and enforcing limits.
- To make Cee better. We read conversations to improve answers, but never photos, because we don’t have them.
- To send reminders you asked for, and messages about your account or subscription. We send marketing emails only if you agree to them, and every one has an unsubscribe link.
Who else sees it
We don’t sell your personal information, and we don’t share it for cross-context behavioural advertising. We share it only with the services that run Candid for us, only for that purpose:
- OpenAI: generates Cee’s answers and checks photos.
- Stripe: processes payments.
- Google: signs you in.
- Railway: hosts our servers and database.
- Cloudflare: runs our domain name records.
We may also disclose information if the law requires it, to protect someone’s safety, or to whoever takes over Candid, under this same policy.
Where it’s stored
These providers store and process data in the United States, so your information may be accessible to authorities there under US law. If you live in Canada, you agree to this transfer by using Candid. We choose providers that protect it with security measures comparable to what Canadian law expects.
How long we keep it
We keep your conversations, plan and account while you use Candid, and delete them when you ask. Stripe keeps payment records as long as tax and accounting law requires. Usage counts don’t identify you and may be kept longer.
Saved plans and share links
Anyone with your saved-plan link or account link can open it. Treat them like private links, and don’t post them.
Your rights
Depending on where you live (for example in Canada under PIPEDA and Quebec’s Law 25, or in US states such as California), you can ask us to:
- tell you what we have about you and give you a copy;
- correct it;
- delete it;
- stop using it for anything you haven’t agreed to, and withdraw your consent.
Email everettkane68@gmail.com from the address on your account, or include your plan link. We reply within 30 days and won’t treat you differently for asking. If you’re unhappy with our answer, you can complain to your privacy regulator, such as the Office of the Privacy Commissioner of Canada, Quebec’s Commission d’accès à l’information, or your state attorney general.
The person responsible for privacy at gpt4idiot technologies is its owner, reachable at everettkane68@gmail.com, 3939 West 38th Avenue, Vancouver, BC, Canada.
Adults only
Candid is for people 18 and over. We don’t knowingly collect information from anyone under 18. If we learn we have, we delete it.
Security
Connections are encrypted (HTTPS). Account links are stored only in scrambled form, and access to our systems is limited. No system is perfectly secure. If a breach puts you at real risk, we’ll tell you and the regulators as the law requires.
Changes
If we change this policy in a way that matters, we’ll tell you on the site or by email before it applies.