Privacy Policy
Last updated October 2026
What we collect
Your email, display name, the answers you choose to share in onboarding, your conversations with Anna including any screenshots or files you upload, your usage counts, and standard technical logs. Payment details go straight to Stripe, and we never see or store card numbers. If you enter your name and email on our membership card and do not finish joining, we keep them as a sales lead, and if you never become a member we delete that lead 180 days after you entered it. When an email address is used for the free trial we keep a record of that address so the trial cannot be repeated; if the account behind it no longer exists, that record is deleted 90 days after it was last used.
Why we collect it
To give Anna memory of your journey, to keep your account secure, to run billing, and to operate the service. We do not sell personal data, ever.
Advertising
Our public pages (the sales page, pricing, sign up and the checkout pages) carry the Meta pixel, which tells us how our ads on Facebook and Instagram are doing. On those pages Meta receives the address of the page, basic details about your browser and device, and whether you started a free chat, began a checkout or completed a purchase, with the plan and the amount, and it sets its own cookies to do so, under Meta's own privacy policy. Inside the member app it is used only to report that a checkout started or a purchase went through. It never receives your conversations, your answers or anything you do as a member.
Cookies
We use the cookies that keep you signed in. We also set one small cookie of our own, bca_attr, when you arrive through one of Anna's links that carries a campaign tag or a referral code. It holds only those tags, so we can tell which link brought you, it is never shared with an advertiser, and it expires after 90 days. Videos in the library play through YouTube's privacy enhanced mode, which sets no YouTube cookies until you press play; once you do, YouTube may set its own.
How your conversations are used
Your conversations are used to answer you and to build your own memory file, so Anna remembers your situation next time. We do not use them to train AI models, and we never sell or publish them. We do read them automatically to learn what women are struggling with across the membership: a background pass labels each conversation with things like its topic and whether it reached a breakthrough, and our team sees only combined patterns, never your transcript, with a phrase shown only once at least three different members have used it. The switch in Settings controls exactly this. Switch it off and your conversations are never selected for that pass at all, and we will honour it.
Who else processes your data
We use a small set of providers to run the service, and they only ever act on our instructions: Supabase and Amazon Web Services for hosting, database, and file storage; OpenAI to generate Anna's replies and to turn text into search vectors; Google (Gemini) as a standby that only runs if OpenAI is unavailable; Stripe for payments; Resend for email; and GoHighLevel as our customer record, which receives your email address, display name, plan, account status, your score and streak, how many messages you have used this cycle, and the dates you were last active and your plan renews. It does not receive your conversations.
Where your data lives
Black Cat Academy is operated from Queensland, Australia, and your data is stored and processed in the United States, where our hosting and AI providers run. By using the service you consent to that transfer. Data is encrypted in transit and at rest, and access is restricted by row level security so one member can never read another member's data.
How long we keep it
We keep your account data while your account is open. When you delete your account it is locked straight away and any active subscription is set to end. For the next 30 days nothing is removed, so you can email us to stop the deletion. After those 30 days we permanently delete your profile, your conversations, everything Anna remembers, your uploaded files and photo, your onboarding answers, your support messages, any testimonial you sent us, and the activity and usage records linked to you, and we ask our customer record system to delete your contact. We keep only what we have to: payment records for as long as tax and accounting law requires, with the link to your account removed; your email address on our do not email list if you asked us to stop emailing you, so that we never email you again; and a minimal record of the deletion (your email, plan and dates) for a further 30 days for fraud and billing integrity, after which the email is removed. Copies held in our database backups expire on our hosting provider's rolling backup schedule.
Deleting and exporting
You can download a copy of your data from Settings at any time, and we recommend doing that before deleting. The download includes your profile, conversations, memory, usage, billing history and the other records we hold about you, with links to your uploaded files that work for one hour. Deleting your account from Settings starts the process described above and sets any active subscription to end. Because all sales are final, deleting does not produce a refund for the period you have already paid for.
Your rights
You can access, correct, export, or delete your data, and you can object to how we use it. Most of this is self serve in Settings. For anything else, email us from your account address and we will respond. If you are unhappy with our answer you can complain to your local privacy regulator, which in Australia is the Office of the Australian Information Commissioner.
Children
This service is for adults. You must be 18 or older to hold an account, and we do not knowingly collect data from anyone under 18. If you believe a minor has created an account, email us and we will remove it.
Questions or data requests? Email annakristina-support@zach-ai.com.