Last updated: October 20, 2026
Qisalis ("we," "our," or "us") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and AI coaching companion, Compass (collectively, the "Service").
Account information — name, email address, password, and billing information, processed securely via our third-party payment processor, Stripe.
Optional emails about using Qisalis — if you tick the box at sign-up or turn it on in Account settings, we send five short emails over three weeks (a welcome, a question or practice each time, and a last note with an easy way out), then nothing more. We keep only whether you opted in, when, when you unsubscribed, and which of the five were sent. Every email has a one-click unsubscribe, and turning it off is immediate. They are off unless you choose them. Account and billing emails are separate and are not affected.
Which link you arrived through — if you reach Qisalis through a link that carries a short source code (for example from one of our social media profiles), we keep that code with your account. It is a code such as "tt" for a platform, not information about you, and we use it only to learn which places help people find Qisalis.
Sharing your first name with the Coach who invited you — if you joined through a Qisalis Coach's link, you may choose to let that Coach see your first name and the month you joined. It is off unless you turn it on (an unchecked box when you create your account, and a switch in Account settings that you can change at any time). When it is on, the Coach sees only that first name and the month; never your surname, email, conversations, journal, progress, or payments. Coaches otherwise see only counts and amounts.
Referral program information — if you take part in the referral program ("Coach Earnings"), we keep your referral code, a record of who joined through it (never their conversations, journal, or other content), the commissions recorded for you, and the status of your Stripe payout account. Stripe, not Qisalis, collects and holds the identity, bank, and tax information needed to pay you.
User-generated content and AI conversation data — the text, reflections, and prompts you provide while interacting with Compass or participating in community features ("Circles"). This may include sensitive personal reflections regarding your history, relationships, and emotional wellbeing.
Safety contact information — if you choose to add a person to your Safety Plan, we collect the label you give them (for example, "my sister") and their mobile phone number or email address. This is personal information about someone other than you. We text a phone-number contact once to ask whether they agree to be contacted, and we do not use their number for an alert unless they reply YES. They can reply STOP at any time. We store these details encrypted. See Section 4B for how alerts work and their limits.
Automated safety records — when our automated systems assess a message to Compass for signs of acute distress, we store a record of the decision: numeric scores, the names of the pattern categories that matched (never the words themselves), the reason for the outcome, and any alert or message sent. We also keep a log of each safety text, call, cancellation, and failure, with phone numbers masked. If you tap "This wasn't right" on a safety card, we record that too.
Usage and device data — IP address, browser type, operating system, device identifiers, and data about how you interact with the Service, such as which sections of the app you open and for how long, the lessons you open and complete, and the practices you use (see Section 3). Qisalis also stores small settings on your device (local storage and a cache) to remember your place and preferences. We do not use advertising cookies or third-party analytics (we keep our own anonymous visit counts; see Section 4E). Our pages load fonts from Google Fonts and software libraries from public code networks (jsDelivr, and cdnjs only if you upload a PDF resume), which receive your IP address when they do. A resume you upload is read on your device and is not uploaded; only the text you choose to send reaches Compass. We do not collect, store, track, or transmit your precise location (such as GPS or Wi-Fi location). Like any website, we receive your IP address with each request.
We use the information we collect to operate, maintain, and improve the Service, specifically to:
To provide Compass's coaching features, your messages are processed through Anthropic's Claude models via a commercial API relationship. This includes the text of your message along with relevant context — the information described in Section 3 (such as your North Star, Have To and Get To, EQ scores and core values, recent journal entries, lessons completed, recent activity, and a summary of relevant prior sessions) — since that context is what allows Compass to respond with genuine continuity across conversations, rather than treating every message as if it were the first. Anthropic's commercial API terms do not permit this data to be used to train their publicly available models.
The same AI providers process our other automated features: reviewing your Rootwork and Coach Certification submissions, checking messages for signs of distress, summarizing conversations, and summarizing the feedback you choose to send. Anthropic may keep this data for a limited time under its own terms.
Qisalis is operated entirely by automated systems, including artificial intelligence. No human reviews your information. No employee, contractor, or other person at Qisalis reads, reviews, moderates, or monitors your conversations with Compass, your journal entries, your Safety Plan, your Circle posts, or the automated safety records described above, in real time or otherwise, as part of operating the Service. Monitoring, screening, record-keeping, and every response are performed by automated systems, and our systems monitor the Service continuously. The one exception is the Feedback box: what you choose to type there is summarized each week and read by the Qisalis team in order to improve the Service, so please leave private details out of it. The optional form for sharing a few words about Qisalis works the same way: the Qisalis team reads what you choose to send there, and your words are shown publicly only if you give permission and we approve them. Nothing from your conversations, journal, Safety Plan, or Circle posts is part of that summary or those words.
We store the information you generate, including your conversations, journal entries, and Safety Plan, together with the automated safety records. A person at Qisalis may access stored information only where required by law or legal process (for example, a subpoena, court order, or lawful investigation), or as reasonably necessary to establish, exercise, or defend our legal rights. Because no person monitors the Service, no one at Qisalis will see or be notified of, or be able to respond to, distress or an emergency you experience while using it.
When our automated systems judge that a message to Compass may show acute distress, the Service displays support information (including 911, 988, and findahelpline.com). If you have added a person to your Safety Plan who has agreed (by replying YES) to be contacted, and the feature is switched on, the Service may ask you whether to let them know. If you confirm, or do not respond within a few minutes (you can turn off the second case for each person), the Service sends that person a short, fixed text message and, if you have still not told us you are safe, an automated phone call. The text says you may be having a hard time. The call says it is an automated safety notification, that you are using our self-development application and asked us to reach out if you needed immediate personal support or went silent during a session, and it gives 911 and the 988 crisis lifeline for anyone who believes you are in immediate danger. Both give your first name and ask the person to call or text you right away. They never include what you wrote to Compass. You can cancel an alert in progress, you can press a button to alert a contact yourself, and you can remove a contact at any time. Our text and voice provider processes these messages on our behalf. We do not contact emergency services for you.
We do our best, and we are limited. These features are not an emergency, medical, or crisis service and are not guaranteed. Qisalis is not liable where location services on your device are off, where you or anyone else stops, cancels, ignores, or does not answer a message, text, or call, where our automated monitoring does not detect your distress (including subtle signs) or detects it incorrectly, or where messages and calls are delayed, blocked, or not delivered because of latency, network or carrier delays, or failures of the services we rely on. Please see Sections 3A, 3B, and 14A of our Terms of Service. If you or someone else is in danger, call or text 988 or call 911 (US), or your local emergency number.
With a free account (an email address you have confirmed, no payment details), you can have up to three messages with Compass before choosing a plan. What you type is sent to Anthropic, our AI provider, so that Compass can reply. Qisalis does not store what you type or what Compass replies, and gives Compass no memory of it. Anthropic may keep the data for a limited time under its own terms. To keep this limited to three messages per person, and to keep its cost under control, we keep a count against a one-way scrambled code made from your confirmed email address (reduced to a standard form so that variations of the same address count once); the count cannot be turned back into your address and holds no message text. We also count total free messages per day. If you write something in the free lesson's practice box, it stays on your device (in your browser) until you choose to send it to Compass, and is removed from your browser once it has been used. Free messages are not available with temporary email addresses. If a message reads as acute distress, Compass does not reply as a coach; it shows fixed support information (988, 911, findahelpline.com), and nothing is stored or counted. The free taste is not therapy and is not a crisis service.
To learn which parts of our home page help people and which confuse them, we keep simple anonymous statistics about visits by people who are not signed in: which section of the page is in the middle of the screen while the person is active and for how many seconds, how far down the page they scroll, which buttons they press, which screen they reach, whether they arrived through a link we shared (such as a short code in a link), a general type of referring site (for example, a video app), and whether the device is a phone, tablet, or computer. This is our own system; we do not use a third-party analytics or advertising service, and nothing is sent to one. We do not record your IP address, your browser details, your location, your email address, anything you type, or any account information, and we set no cookie. A visit is identified only by a random code created in your browser tab that is erased when the tab is closed, so we cannot recognize you on a return visit or connect a visit to you. If you are signed in, nothing is recorded. If your browser sends Do Not Track or Global Privacy Control, the statistics are not collected at all. We keep these records for up to 120 days and then delete them. They are used only in totals to improve the Service.
We do not sell, rent, or trade your personal data to third parties for marketing purposes. We share information only in these limited circumstances:
Service providers — trusted vendors who perform services on our behalf, including payment and payout processing (Stripe), web hosting (Vercel), our database and sign-in service (Supabase), AI infrastructure (Anthropic), email delivery (Resend), and text-message and telephone delivery (which receives the number of a Safety Plan contact, the first name used in the message, and the message itself), bound by confidentiality obligations.
Business transfers — if Qisalis is part of a merger, acquisition, or sale of assets, your information may be transferred as part of it, and we will tell you if how it is handled materially changes.
Safety and legal obligations — we may disclose information if we believe in good faith it is necessary to protect someone's safety, prevent imminent harm, or comply with a valid legal obligation such as a subpoena or court order.
We use industry-standard administrative, technical, and physical safeguards — including encryption in transit and at rest, and additional encryption of Safety Plan contact details — to protect your information. We retain account data, conversations, journal entries, and the automated safety records for as long as your account remains active, or as long as necessary to fulfill the purposes described here or to comply with legal obligations and defend legal claims. You can delete your account yourself at any time in Account settings, which first cancels any billing and then erases your conversations, journal entries, progress, Safety Plan, and Circle posts. A few records remain by necessity: payment records held by Stripe; our commission records for referral earnings, which hold amounts and dates and none of your content; anything we must keep to comply with law or to defend legal claims; and routine backups until they are overwritten in the ordinary course. Our servers are in the United States, so your information is processed there. If a security incident affects your information, we will notify you as the law requires.
You have the right to:
You can delete your account yourself at any time in Account settings. To exercise any of these rights, contact support@qisalis.com. We will verify your identity before processing the request. Our website does not currently alter its behavior in response to browser "Do Not Track" signals.
The Service is intended for individuals 18 years of age or older. We do not knowingly collect personal data from anyone under the age of 18, and will delete any such data immediately if discovered.
We may update this Privacy Policy from time to time. We will note any material changes by updating the "Last updated" date above. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.
Questions or concerns about this Privacy Policy or our data practices can be directed to support@qisalis.com.
This document has not yet been reviewed by a licensed attorney, and should be kept accurate to Qisalis's real, current data practices as the platform evolves — particularly Section 4, which should be revised immediately if the AI provider or the context sent to it ever changes.