Privacy Policy

1. Who is the controller and how you reach us

The controller for the PersonalityVIEW app and website is Ovvio Solutions, trading as personalityview.com.

Our registered address is Nieuwe Rijn 55B, 2312 JH Leiden, Netherlands.

For anything about privacy, write to privacy@personalityview.com. For anything else, info@personalityview.com.

We are established in the Netherlands, so Dutch data protection law applies alongside the GDPR.

2. What we collect and why

This section covers all personal information we collect. It is split into information you give us and information the app produces when you use it.

2.1 Information you give us

Email address

We collect your email address. We store it in Firebase Auth and in your user record. We use it for account identity, sign-in, and password reset.

Display name and photo

We collect your display name and photo if you provide them. We store them in your user record, in public profiles, and in profile storage. We use them so friends can recognise each other.

Username

We collect a username if you choose one. We store it in a lowercased form and in your public profile. Your username creates your public profile URL at /u/{username}.

Age band and other demographics

We collect an age band and other demographic details if you choose to provide them. They are optional. We use them for norms and research only. They are never shown to other users.

Test answers

We collect your answers to personality tests. We store them with your results. We use them to produce and re-score your result.

Personality result

We collect and store your personality result. It is part of the product. Your result is stored with your test data and can appear in your public profile only if you turn that on.

Messages to the AI coach

We collect messages you send to the AI coach. We store them in a conversation thread. We use them to hold the conversation.

Voice dictation in the AI coach

The AI coach chat has an optional microphone button that turns your speech into text. Your phone's own speech recognition service does the conversion: Apple's speech recognition on iOS, or the device's speech recognizer on Android, usually provided by Google. Depending on your device and language, that provider may process the audio on its own servers under its own privacy terms. We never receive or store the audio. We receive only the text you choose to send, and we handle it like any other message to the coach, as described under "Messages to the AI coach" above. Dictation needs microphone and speech recognition permission, which you can revoke at any time in your device settings. It never listens until you tap the button.

Feedback and AI reports

We collect feedback you send and reports related to the AI coach. We store them for support and safety review.

2.2 Information produced when you use the app

Friendships and circles

The app records friendships, circles, and circle invites. We use this data for the social features.

Entitlement state

The app records what you have paid for. We use this to know who has paid for what.

AI usage counters and cost

The app records AI usage counts and cost. We use this for budget caps and abuse limits.

Device push tokens

The app stores a push token for each device. We use it to send notifications.

Crash reports and performance traces

Crash reports and performance traces are collected by Firebase Crashlytics and Firebase Performance. We use them to fix the app.

Analytics events

Firebase Analytics collects events about which features are used. We use this to understand how the app is used.

2.3 A note on sensitive information

Your personality result and the answers behind it are intimate. Under GDPR, personality data is not automatically a special category. We still treat it as sensitive in practice.

Your answers are never shown to another user. Only your four-letter result and chosen strengths appear on a public profile. That happens only when you turn the public profile on.

3. Our legal bases

We use your personal information only when the law allows it. This section explains the legal bases in plain words.

3.1 Contract

We use some information because it is necessary to provide the service you asked for.

This includes:

• Email address for account creation, sign-in, and password reset.
• Test answers and personality results because the product is the personality test result.
• Display name, photo, and username because they identify your profile.
• Friendships and circles because they make the social features work.
• Entitlement state because we need to know what you paid for.
• AI usage counters because we need to enforce limits and prevent abuse.
• Purchase data for billing and subscription state.

When you use a third-party sign-in like Apple or Google, we process the data needed to authenticate you. This is part of creating the account you asked for.

3.2 Consent

We use some information only because you agree to it.

This includes:

• Showing your personality result and chosen strengths on a public profile.
• Optional demographics like age band and other details.
• Messages to the AI coach. You choose to use the coach. You can withdraw by not using it.
• Push notifications. We only use push tokens if you allow notifications.
• Analytics events. You can withdraw consent in the app settings.
• Ads. AdMob uses your advertising identifier only if you consent through the UMP consent form.

You can withdraw consent at any time. The rights section explains how.

3.3 Legitimate interest

We use some information for our legitimate interests. We have balanced these interests against your rights.

This includes:

• Crash reports and performance traces to fix the app.
• Feedback and AI reports for support and safety review.
• AI usage counters to stop abuse, even when consent is not the main basis.

We do not use legitimate interest for anything unexpected.

4. Who we share data with

We do not sell personal information. We do not allow cross-app tracking.

We share data only with the providers listed here. Each provider gets only what is described.

Google, through Firebase

Google receives the backend data described in this policy. This includes account details, profile data, test answers, results, friendships, entitlements, AI usage data, push tokens, crash reports, performance traces, and analytics events. Google provides Firebase Auth, Firestore, Storage, Functions, Messaging, Analytics, Crashlytics, Performance, Remote Config, and App Check. Google processes this data in the EU or the US under Google's terms.

Apple Sign in with Apple

Apple receives your Apple relay email or real email. This is used for sign-in.

Google Sign-In

Google receives your email, name, and photo. This is used for sign-in.

RevenueCat

RevenueCat receives a pseudonymous app user ID and purchase events. This is used for subscription state and receipt validation.

Apple and Google in-app purchase

The stores receive purchase and receipt data. This is used for billing.

The AI provider

The AI provider receives coach messages, your personality type, and a result summary. This is used to generate replies.

Google AdMob

AdMob receives your advertising identifier if you consent. Ads are shown only on the free tier and only inside the test flow.

We do not use data brokers, a CRM, an email marketing list, or cross-app tracking.

5. International transfers

Some of our providers process data outside your country.

Google Firebase stores data in the EU or the US.

Apple, Google, RevenueCat, and the AI provider may process data in the countries where they operate. Some of those countries are outside the EEA.

Where a transfer outside the EEA happens, we rely on the legal safeguards that apply to that transfer.

You can ask us for details by writing to privacy@personalityview.com.

6. How long we keep data

We keep data only as long as described here.

Account and profile

We keep your account and profile data until the account is deleted.

Results

We keep your results until the account is deleted. This is deliberate. The timeline is a feature of the app.

Coach messages

We keep AI coach messages for 90 days. You can clear coach messages at any time in the app.

Crash and performance data

Crash and performance data are kept according to Firebase defaults.

Legacy MySQL dump

An encrypted legacy MySQL dump is kept for 12 months after cutover. Then it is destroyed.

Deleted accounts

When you delete your account, we remove it from Auth, Firestore, and Storage. We alias the account in RevenueCat.

7. Your rights and how you use them

This section explains your rights. It also tells you how to exercise each one in this app.

Access and portability

You have the right to access your personal information and to receive a copy of it.

How to use it: use the in-app export. This produces a JSON archive of every collection that holds your data.

Erasure

You have the right to delete your personal information.

How to use it: use the in-app delete account action.

Rectification

You have the right to fix incorrect personal information.

How to use it: edit your profile in the app. For anything else, email privacy@personalityview.com.

Objection and restriction

You have the right to object to certain processing and to ask us to restrict certain processing.

How to use it: email privacy@personalityview.com.

Withdraw consent

You have the right to withdraw consent at any time.

How to use it:

• For ads, use the UMP consent form.
• For analytics, use the settings screen.
• For the AI coach, stop using the coach.

You also have the right to data portability, which the in-app export covers.

8. Children

The app is for people aged 13 and over. The AI coach has an 18+ gate.

The app is not directed at children. We do not knowingly collect personal information from children under 13.

9. Changes to this policy

We may change this policy. If a change affects your rights, we will tell you in the app or through the contact details you gave us.

The latest version is always the one that applies.

10. How to complain

You have the right to complain to a data protection supervisory authority.

You can complain in the country where you live, where you work, or where you believe an issue happened.

Our lead supervisory authority is the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

You can also contact us first. We will try to help.