MyPassion.ai

Privacy Policy

Last updated: July 23, 2026

1. Who We Are

MyPassion.AI is operated by Enlix, LLC, 2810 N Church St STE 88358, Wilmington, DE 19802, United States. We are the controller of your personal data. Contact us at support@mypassion.ai for anything in this policy, including privacy requests.

2. Data We Collect

  • Identifiers: email address, and a display name if you provide one.
  • Quiz answers: your responses to our career questions, including free-text answers where you describe your work history, goals, and what you find unfulfilling. Please do not enter information you would rather not share, such as health or financial details.
  • Results: the career matches, scores, and report we generate for you, plus your progress if you use the dashboard.
  • Commercial data: what you bought, when, and the amount. Card details go directly to Stripe and never reach our servers.
  • Technical and usage data: IP address, browser and device type, pages viewed, and referral source, collected through cookies and similar technologies.
  • Email engagement: whether our emails to you were delivered, opened, or clicked.

3. How We Use Data, and Our Legal Bases

  • To generate and deliver your results and report, and to run your account. Legal basis: performance of a contract.
  • To process payments, prevent fraud, and meet tax and accounting obligations. Legal basis: contract and legal obligation.
  • To send service emails about your results and purchases. Legal basis: contract.
  • To send marketing emails, which you can unsubscribe from in any message. Legal basis: consent, or legitimate interest where permitted.
  • To measure and improve the Service, and to measure our advertising. Legal basis: consent for non-essential cookies, otherwise legitimate interest.

4. AI Processing of Your Quiz Answers

We use third-party AI providers, currently OpenAI and Anthropic, to turn your quiz answers into your career matches and written report. Your answers, which can include the free text you wrote, are sent to these providers to produce that output. They act as our processors and are contractually restricted to providing the service to us. We do not permit them to use your data to train their models.

Your report is generated automatically. It is informational career guidance, it is not a decision that produces a legal or similarly significant effect about you, and a human is not required to review it. You are free to disregard it, and you can contact us if you believe a result is wrong.

5. Who We Share Data With

We do not sell your personal data for money. We share it with the following categories of recipients:

  • Infrastructure and hosting: Vercel, Supabase.
  • Payments: Stripe.
  • AI providers: OpenAI, Anthropic, as described above.
  • Email delivery: Resend.
  • Analytics and advertising: Google (Analytics and Tag Manager) and Meta. To measure and target our ads, we share online identifiers and event data, which can include a hashed version of your email address, with these platforms.
  • Legal: authorities where we are required by law, and a buyer or successor if the business is sold.

Under California law, our use of advertising and analytics cookies counts as “sharing” personal information for cross-context behavioral advertising, and may count as a “sale” under that law’s broad definition, even though no money changes hands. See section 8 for how to opt out.

6. How Long We Keep Data

  • Account, quiz answers, and results: until you delete your account, or until you ask us to delete them.
  • Purchase records: up to 7 years after the transaction, because tax and accounting law requires it. When you delete your account we remove the personal identifiers from these records and keep only the transaction itself.
  • Deletion log: we keep an irreversible cryptographic hash of the deleted email address, plus the date, so we can evidence that we honored your request. This cannot be reversed to recover your address.
  • Marketing suppression: if you unsubscribe without deleting your account, we keep the minimum record needed to keep you unsubscribed.

7. Deleting Your Account Yourself

If you have an account, go to Account details and choose “Delete my account”. This permanently erases your login, quiz answers, results, report, dashboard progress, and email history. It happens immediately, it cannot be undone, and we cannot recover any of it afterwards. The only thing that survives is described under “Purchase records” above.

If you took the quiz without creating an account, email support@mypassion.ai from the address you used and we will delete your data for you.

8. Your Privacy Rights

Everyone. You can ask us to access, correct, or delete your personal data, or to receive a copy of it, by emailing support@mypassion.ai. We do not charge for this and we will not treat you differently for asking.

California residents (CCPA and CPRA). You have the right to know what we collect and why, to delete it, to correct it, to opt out of the sale or sharing of your personal information, and to be free from discrimination for exercising these rights. To opt out of sharing for advertising, email us with the subject “Do Not Sell or Share My Personal Information”, or set your browser’s Global Privacy Control signal. We respond within 45 days and can extend once by a further 45 days where permitted. You may use an authorized agent, and we may ask you to verify your identity first. We do not knowingly collect or share the personal information of anyone under 16.

EU, EEA, UK, and Switzerland (GDPR and UK GDPR). You have the rights of access, rectification, erasure, restriction, portability, and objection, including objection to direct marketing at any time. Where we rely on consent you may withdraw it at any time, which does not affect processing carried out before you withdrew it. We respond within one month. You may also complain to your national data protection authority, or to the UK Information Commissioner’s Office.

9. Cookies

We use cookies that are strictly necessary to run the Service and keep you signed in, and non-essential cookies for analytics and advertising as listed in section 5. You can block or delete cookies in your browser settings, though the Service may not work correctly without the necessary ones.

10. International Transfers

We are based in the United States and our providers operate globally, so your data is transferred to and processed in the United States and other countries. Where we transfer personal data out of the EEA, the UK, or Switzerland, we rely on the European Commission’s Standard Contractual Clauses, the UK Addendum, or another lawful transfer mechanism. You can ask us for details.

11. Security

We use encryption in transit, access controls, and row-level database security to protect your data. No system is completely secure, but we take these obligations seriously and will notify you and the relevant regulator of a personal data breach where the law requires it. Please keep your password and any private result links confidential.

12. Children

The Service is not intended for anyone under 16 and we do not knowingly collect their data. Where the law of your country sets a higher minimum age, that higher age applies. If you believe a child has given us personal data, contact us and we will delete it.

13. Changes

We may update this Privacy Policy. We will change the date at the top, and for material changes we will tell you by email or in the Service before they take effect.