Privacy Policy

Scope

This Privacy Policy explains how Better Mind Media LLC collects, uses, shares, and protects personal information when you use geidid.com and related account, assessment, report, payment, and support features.

Who We Are and Contact

GeidID is owned and operated by Better Mind Media LLC, a Georgia limited liability company ("Better Mind Media," "we," "us," or "our").

GeidID is a behavioral intelligence platform serving the personal development and wellness market. For privacy questions or rights requests, contact support@geidid.com.

Information We Collect

We collect information in the following categories:

• Information you provide: name, birth month and day (not birth year), personality and Enneagram selections or assessment answers, email address, password, and optional feature-launch interests.
• Account and sign-in information: account profile details, session information, and optional data from a third-party sign-in provider if you choose that option.
• Generated content: The First Layer and paid Core Reports generated from your assessment inputs.
• Payment metadata: purchase selection, unlock status, a payment transaction identifier, and related fulfillment records. Our payment processor handles card and payment method details; GeidID does not store full card numbers.
• Technical information: session tokens, IP address, authentication cookies, and basic request metadata needed to operate and secure the service.
• Optional product analytics: after you opt in, a pseudonymous account ID when signed in; whether you completed The First Layer and currently have paid access; page views, Web Vitals, content-free first-party API request telemetry, selected assessment, report, checkout, and purchase events; referring domain and validated marketing source, medium, and campaign labels; and basic device and browser context. The analytics provider may receive the request IP address. We remove query strings, fragments, request and response headers and bodies, and identifier-shaped URL segments from network analytics. Third-party service requests are excluded.
• Operational generation analytics: an opaque account identifier, an attempt-scoped internal job or resource identifier, and model, token-count, latency, cost, and error metadata used to monitor generation. This does not include prompts, responses, assessment inputs, generated content, lease data, or payment data.

Cookies and Browser Storage

GeidID uses essential authentication cookies with the geidid prefix to keep you signed in and protect account flows. These cookies are configured with SameSite=Lax and are secure in production.

If you opt in to product analytics, GeidID and Amplitude use local and session storage to remember your preference, queue events, and maintain pseudonymous context for the current browser-tab session. Optional browser product analytics is disabled unless you consent, and you can change your choice below. We do not use advertising cookies or cross-context behavioral advertising.

Product Analytics Choices

Browser product analytics is optional and consent-gated. It helps us understand which pages and features are used and where users encounter friction. Session Replay is disabled, so we do not record or reconstruct videos of your browsing session.

We do not send your name, email address, birth month and day, assessment answers or selected types, generated reading or report content, credentials, or payment references to Amplitude. Form values, visible page text, network headers, and network body content are also excluded. Automatic element, form, download, and session events are disabled.

This preference governs optional browser product analytics. It does not affect essential service processing or the content-free operational generation analytics described above.

How We Use Information

We use personal information to:

• Create and secure your account.
• Generate and store The First Layer and Core Reports.
• Process purchases and unlock paid reports.
• Send transactional emails such as account and purchase emails.
• Send a launch notice when you explicitly ask to hear about an upcoming feature.
• Provide support and respond to requests.
• Analyze consented, pseudonymous product usage and improve user journeys.
• Monitor generation reliability, latency, token use, cost, and errors.
• Maintain, debug, prevent abuse, and improve the service.
• Comply with legal, tax, accounting, and security obligations.

Legal Bases

If GDPR or similar law applies, we process personal information under these legal bases:

• Contract: to provide accounts, assessment results, reports, purchases, and support.
• Consent: for optional product analytics and where you choose optional inputs, communications, or integrations. You may withdraw analytics consent at any time.
• Legitimate interests: to secure, maintain, debug, monitor generation, improve GeidID, and prevent misuse.
• Legal obligation: to comply with applicable tax, accounting, payment, dispute, and regulatory requirements.

AI Processing

To generate The First Layer and Core Reports, GeidID sends a derived profile containing your Sun sign, personality, and Enneagram evidence to a third-party AI provider. We do not send the provider your name or the birth month and day you entered. The output is stored in your account so you can view unlocked content later. Do not submit assessment information you do not want used for AI-generated readings.

Sub-Processors and Sharing

We do not sell your personal data. We share information with service providers that help us operate GeidID:

• Payment processor: payment processing, payment metadata, fraud checks, receipts, and disputes.
• AI provider: generation of The First Layer and Core Reports from the derived Sun sign, personality, and Enneagram evidence described above.
• Email provider: transactional email delivery from support@geidid.com.
• Sign-in provider: optional single sign-on if you choose that option.
• Hosting and database provider: storage and retrieval of account, assessment, report, session, and purchase records.
• Bot-protection provider: Google reCAPTCHA v3 receives IP address and browser signals to verify login, registration, and password-reset requests.
• Analytics provider: Amplitude processes consented, pseudonymous browser product events and content-free operational generation metadata as our service provider.

We may also disclose information if required by law, to protect rights and safety, or in connection with a merger, acquisition, financing, or sale of assets.

Data Retention

We keep account, assessment, report, purchase, session, and feature-interest records as needed to provide the service and honor your choices. Signed-in users can permanently delete their account and linked private content from the Data & privacy section of their profile. We may retain limited financial evidence without an active account link where needed for legal, tax, accounting, dispute, fraud-prevention, or security reasons.

Browser product analytics and operational generation analytics are retained according to our Amplitude project settings and then deleted or aggregated. To request deletion of linked analytics data before or after deleting your account, email support@geidid.com. When we can link the request to the pseudonymous account identifier, we will submit the corresponding provider deletion request.

Your Rights

Depending on where you live, you may have privacy rights over your personal information. Signed-in users can download a portable JSON copy of their data or permanently delete their account from the Data & privacy section of their profile. For broader access, correction, restriction, objection, analytics access or deletion, or retention requests, contact support@geidid.com.

For GDPR and similar laws, these rights may include:

• Accessing the personal information we hold about you.
• Correcting inaccurate or incomplete information.
• Requesting deletion of personal information.
• Restricting or objecting to certain processing.
• Receiving a portable copy of your information.
• Withdrawing consent where processing is based on consent.

For CCPA/CPRA and similar laws, these rights may include:

• Knowing the categories and specific pieces of information collected.
• Requesting deletion of personal information.
• Correcting inaccurate personal information.
• Opting out of sale or sharing for cross-context behavioral advertising, where applicable. GeidID does not sell personal data and does not use cross-context behavioral advertising.
• Receiving non-discriminatory treatment for exercising rights.

International Data Transfers

GeidID and its service providers may process information in countries other than where you live. When required, we rely on appropriate transfer safeguards, such as contractual protections, to protect transferred personal information.

Data Security

We use technical and organizational safeguards designed to protect personal information, including TLS in transit, hashed passwords, access controls, and service-provider security controls. No online service can guarantee absolute security.

Children's Privacy

GeidID is not directed to children under 16 and paid features are not intended for anyone under 18 or the age of majority where they live. If you believe a child has provided personal information, contact us so we can review and delete it where appropriate.

Email Communications

GeidID sends transactional emails, such as account messages, password messages, and purchase receipts, from support@geidid.com. If you submit a Notify Me form, we may also send the feature-launch notice you requested. That opt-in does not subscribe you to unrelated marketing.

Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new last updated date.

Contact

Privacy questions and rights requests can be sent to support@geidid.com.