Your privacy
Last updated 9 October 2026
Principiamo is run by Astrasum, Inc., a Delaware corporation ("we"). This page explains what we keep, why, who helps us run the service, and what you can do about it. We keep as little as the service needs, and we never sell your information or use it for advertising.
What we keep
- Your email address, to identify your account and send your sign-in codes.
- What you make and keep: your personal moments, the thoughts you recognise, keep and choose as principles, your starting point, the feelings you report, and your journey. This can be personal and sensitive, so it is private to your account and used only to give you the experience.
- Paintings generated for your moments.
- Subscription status from Stripe. We never see or store your card details.
- Technical records: fingerprints of network addresses to limit sign-in abuse, account-linked generation usage, and service spending totals. Error logs contain no personal moment text and are kept for 14 days.
The offered collection can be explored without an account. That progress stays in your browser for the visit unless you choose to keep it in an account.
The “What’s on your mind?” finder keeps its draft choices and words only in the open guide. Leaving clears them; they are not added to your account or learning reports. Where written interpretation is offered, asking for a suggestion sends only the words and preoccupations you submit to the stated AI service. Its possible reading is yours to confirm or correct; previous visits, feelings reports and personal notes are not included.
Why we use it
To run the service you ask for: signing you in, making and saving your moments, and managing your subscription. We use your feelings reports only to show you your own journey. We do not use your moments to train AI models, and we do not look at them except when you ask us for help or the law requires it.
Optional learning and feedback
Where offered, you can separately choose to share coarse counts or send feedback to help us improve the experience. Both are optional. We do not mine your private account progress, moments, thoughts, feelings or paintings for this purpose.
Count sharing starts only when you choose it and lasts for the open page. It uses no analytics cookie. We count a few milestones, such as reaching a choice or completing a step, without account, session or visit identifiers, your chosen actions, or any personal or generated content. Counts are grouped by release and week and become unavailable within 90 days. Expired storage records are removed automatically afterward. They count events, not people or linked journeys. Switching sharing off stops future counts; earlier totals cannot be withdrawn because they have no link to you.
Feedback consists of response choices and optional written words. Please leave out names, contact details and private moments. Written feedback can still identify you; removing identifiers does not guarantee anonymity. Raw feedback is available for human review for seven days; expired records are removed from collection storage automatically afterward. Any human-review copy is deleted by the same original seven-day deadline. Raw feedback is never sent to AI. A human removes identifiers and identifying context before themes become learning evidence.
Feedback is separate from your account. Save its receipt and use Delete feedback if you want to remove it within seven days; deleting your account cannot locate an unlinked submission. We do not attach account or network identifiers to learning records. Our servers still handle network information to deliver requests and run the service.
Who helps us
To create, continue or revise your personal scenes and check safety, we send relevant writing, scene descriptions and reference paintings to our AI providers. Your feelings reports and personal notes are excluded.
- Amazon Web Services stores your account and paintings in the United States, sends sign-in email, and generates and checks text and reviews paintings through Bedrock.
- Cloudflare Workers AI paints scenes using descriptions and reference paintings.
- Stripe handles payments and keeps payment records.
AI processing can occur in other countries through these providers' networks. Their handling of information follows their service terms. AWS may retain requests flagged by abuse detection for up to 30 days; deleting your account does not erase that separate provider record. See Bedrock's data handling and Workers AI's data usage.
How long we keep it
Clearing an occasion removes its draft from your progress. Stored copies, begun or kept visits and painting files can remain until account deletion. Records kept for generation retries expire after thirty days and are removed automatically.
Sign-in codes expire after ten minutes and sessions after thirty days. Our servers store only fingerprints of codes and session tokens. An essential secure cookie keeps you signed in; we use no advertising or analytics cookies.
Where regional routing is enabled, a country signal derived from your network address determines whether the global service can be accessed. Detected mainland-China connections receive only an entry notice for the separately operated mainland service; existing accounts and sign-in cookies do not override this access rule. This signal is used for the request and is not added to your account, learning records or request logs. Routing sets no preference cookie. The global and mainland services have separate operators, accounts, subscriptions and saved data; opening the mainland service does not transfer them.
Deletion closes your account to new activity and removes your moments, thoughts, feelings, journey and paintings. It cancels your subscription without waiting for the paid period to end. If work is finishing or a provider is unavailable, cancellation and removal retry automatically. We retain an opaque identifier to prevent old requests restoring erased data. Stripe retains payment records under its legal obligations.
Your choices
- Delete your account from My account, including its subscription.
- Ask for access to your information, a copy, or a correction at contact@astrasum.com. Depending on where you live, you may also have the right to object, to restrict processing, or to complain to your data protection authority.
Children
Principiamo is for people aged 18 and over.
Changes
If we change this page in a way that matters, we will email you before the change applies.
Astrasum, Inc. · contact@astrasum.com