Be'ing Here
Privacy Policy
1. The short version
We collect only what the Sacred Path needs to hold your practice, we never sell your information, and your journal is yours alone. Be'ing Here is offered by Be'ing Here LLC, founded by Mandy-Lynn Aitken and Cherise Pollard and based in West Chester, Pennsylvania, United States. We handle personal information in the spirit of applicable privacy laws — U.S. state privacy laws and, for members abroad, frameworks such as Canada's PIPEDA and the EU's GDPR — and we treat the private things you record here, like your journal and trackers, as sensitive health information.
2. Who is responsible
Be'ing Here LLC is the controller of your personal information and is accountable for it. If you have any question or request about your privacy, write to our privacy contact at gandalf.white@be-inghere.com — a real person reads it.
3. What we collect, and from where
When you use the Sacred Path, we hold:
- your account email address and display name;
- your lesson and course progress, so your space is as you left it;
- your journal entries;
- your tracker entries;
- anything you choose to post in community spaces;
- basic records of your membership and purchases (your card details are handled by our payment processor, not stored by us);
- limited technical data your device sends automatically, such as sign-in and security logs, so the platform stays safe and works.
Most of this comes directly from you. Some comes automatically from your use of the service, and payment confirmations come from our payment processor. We do not ask for, and do not want, more than the platform needs to serve you.
4. Your journal and trackers are health information
What you write in your journal and record in your trackers can reveal how you feel in your body and mind. We treat this as sensitive consumer health information— the kind protected by laws such as Washington's My Health My Data Act. We collect and keep it only to show it back to you and run your practice, only with your consent by using the service, and we never sell it or share it for advertising. You can delete it at any time.
5. Why we use your information, and our legal bases
We use what we hold to:
- run the Sacred Path — signing you in, remembering your progress, and showing you your own journal, trackers, and community posts;
- take payment and manage your membership;
- send the emails your account needs, and marketing email only if you opted in;
- keep the platform, and you, secure.
Where the GDPR applies, our legal bases are: performance of our contractwith you (to deliver the membership and courses); your consent (for marketing email, any non-essential cookies, and — as explicit consent — the health-adjacent journal and tracker data you choose to record); and our legitimate interestsin keeping the service secure and preventing fraud. You can withdraw consent at any time.
6. Your journal is yours
Journal entries are private to you as a member. They are never shared with other members, never sold, never used for advertising, and never mined for any purpose beyond showing them back to you. They exist so you have somewhere safe to write.
7. Where it lives, and who processes it
Your account and content are stored on Supabase infrastructure, the database and authentication service the platform is built on. We also use a payment processor (to take payment) and an email provider (to send your emails). Each of these acts as our processor or service provider under contract, handles data only on our behalf, and connections to the platform are encrypted in transit. We do not sell personal information, and we do not share it with advertisers.
8. Email
We send the emails an account needs — confirmation when you join, password resets when you ask for them, and notices about your account or these policies. Marketing email is sent only if you have opted in, and every marketing email includes a way to opt out.
9. Cookies
The platform uses cookies only to keep you signed in — session authentication and nothing else. There are no advertising or third-party tracking cookies here. See our Cookie Policy for the detail; if we ever add analytics, we will ask for your consent first.
10. Do Not Track and Global Privacy Control
Because we do not track you across other websites and set no advertising cookies, there is nothing for a “Do Not Track” or Global Privacy Control (GPC) signal to switch off today. If we ever add anything that would count as sharing your information, we will honour GPC and other opt-out preference signals sent by your browser.
11. We do not sell or share your information
We do not sell your personal information, and we do not share it for cross-context behavioural advertising — so there is nothing for you to opt out of on that front. We also do not disclose your personal information to third parties for their own direct marketing. If this ever changes, we will update this policy, add a “Do Not Sell or Share My Personal Information” choice, and honour it.
12. How long we keep it, and how you let go of it
We keep your information while your account is open, and only as long as we need it for the purposes above or to meet a legal obligation. You may ask at any time to see the personal information we hold about you, to correct it, or to have your account and its data deleted — write to gandalf.white@be-inghere.com and we will act on it. When your data is deleted, it is removed from the live platform and falls out of routine backups on their own cycle.
13. Your rights and choices
Wherever you live, you may ask us to show you the personal information we hold about you, to correct it, to delete it, or to send you a copy — write to gandalf.white@be-inghere.com and we will respond within a reasonable time, and within the window the law sets (generally 30 days under PIPEDA, one month under the GDPR, and 45 days under U.S. state laws). You can opt out of marketing email at any time through the link in any such email. We do not sell personal information.
- Canada (PIPEDA). You may know what we hold, how it is used, and to whom it has been disclosed, access it, and challenge its accuracy — and you may raise a concern with the Office of the Privacy Commissioner of Canada.
- European Economic Area and the UK (GDPR). You have rights of access, rectification, erasure, restriction, portability, and objection, the right to withdraw consent, and the right to complain to your local data-protection authority.
- California and other U.S. states (CCPA/CPRA and similar). You may know what we collect, request its deletion, correct it, limit the use of sensitive information, and opt out of any sale or sharing — we do not sell or share personal information — and we will never treat you differently for exercising these rights.
14. Members outside the United States
Be'ing Here LLC is based in the United States, and the information we hold is processed and stored there. If you use the platform from another country, your information is transferred to and handled in the United States under this policy. Where we transfer personal data out of the EEA or the UK, we rely on appropriate safeguards — such as the Standard Contractual Clauses, or a provider's certification under the EU–US Data Privacy Framework — and you may ask us for more detail.
15. Children
Be'ing Here is for adults. You must be at least 18 to hold an account, and we do not knowingly collect personal information from children under 13. If you believe a child has given us information, write to gandalf.white@be-inghere.com and we will delete it.
16. Automated decisions
We do not make decisions about you by automated means that would produce legal or similarly significant effects, and we do not profile you for advertising.
17. Security and breaches
We protect your information with encryption in transit, access controls, and reputable infrastructure, though no online service can promise perfect security. If a breach ever affected your personal information, we would notify you and the relevant authorities as the law requires — without unreasonable delay, and within 72 hours of becoming aware where the GDPR applies.
18. Changes to this policy
If this policy changes in a way that matters, we will tell you by email or inside the Sacred Path before the change takes effect, and update the date above. We will never quietly widen what we do with your information.
19. Contact
Privacy questions belong at gandalf.white@be-inghere.com. Be'ing Here LLC, West Chester, Pennsylvania, United States.