Strata
Privacy

Your record is yours.

Strata is a quiet, personal product. We collect only what we need to keep your record running, we never sell it, and we never share it. Last updated May 28, 2026.

1. The short version

Strata stores three things about you: who you are (the Google account you signed in with), how you felt on each day you captured (a mood number, an energy number, and an optional word or short note), and — once you connect the bot — your Telegram chat id. Nothing leaves our database except to render your own dashboard. We do not sell your data, we do not use it for advertising, and we do not feed your notes into any AI service to analyze you.

2. Who runs Strata

Strata is operated by WheyDev LLC, a limited liability company registered in the State of Wyoming, United States. For any question in this policy, contact us at support@whey.dev.

3. What we collect

Account data

When you sign in with Google, we receive your email address, your full name, and your profile picture URL. We store those on your Strata user row along with the timezone we infer for you and a plan label (free, pro, or founding).

Your captured days (the layers)

Every day you check in, we store one row: the date, a mood score (1–5), an energy score (1–5), and the optional word or short note you sent along with them. The note is the only free-text content in your record; it is shown only to you and is never sent to a third party for analysis.

Streak state

We keep a small denormalized counter — your current streak, longest streak, last entry date, and total entries — so the bot and the dashboard can answer “where am I” without rescanning your record.

Telegram link

If — and only if — you connect the Telegram bot, we store the numeric chat id Telegram assigns to your conversation with our bot, plus the timestamp the link was made. We do not store your Telegram username, your phone number, your contacts, or any group chats. The bot only reads messages sent directly to it from a chat that has been linked to a Strata account; it parses the two scale numbers and the optional note, writes that as a layer, and discards the rest of the raw message body.

Share links (only if you create one)

If you mint a public share link, we store the link id, the scope you chose (a month, a year, or all-time), an expiration if you set one, and a counter of how many times the public page has been viewed. We never store your free-text notes on a share link, and our render pipeline drops them before any public page is built.

Billing identifiers

If you upgrade, we store the customer id and subscription id Polar gives us, along with the current period dates and the cancellation state. We never see, handle, or store your card number, CVC, or bank details — those live entirely with Polar.

Dashboard analytics

Once you are signed in and inside the dashboard, we use PostHog to record page views, feature usage, and button clicks under a stable internal id. We do not send your name, your email, your notes, or any captured content to PostHog as event properties. The landing page, pricing page, public share pages, and these legal pages do not load PostHog at all.

4. What we do with it

  • Render your record. The mood, energy, and note rows are read by the 3D dashboard and the share-image exporter, on your behalf.
  • Run the conversation. The bot uses your timezone, your chat id, and your last-entry date to know when to send a prompt and what to call you.
  • Enforce plan rules. The free tier's 90-day window and the watermark on its exports are enforced from the plan label on your user row.
  • Improve Strata. We look at anonymous, aggregated usage patterns inside the dashboard to understand what people use and what they don't.
  • We never sell your data, never use it for advertising, and never share it with anyone else for their own purposes.

5. Third-party services we use

Strata is a small, dependency-light product. The services below are the only ones that ever see any of your data, and only the minimum they need to do their job.

  • Google (OAuth): used only to sign you in. Subject to Google's own Privacy Policy.
  • Telegram:the conversation surface. By using the bot you are also using Telegram, subject to Telegram's Privacy Policy. Messages between you and the bot flow through Telegram's infrastructure; we control what the bot stores once it receives a message, but not what Telegram itself retains.
  • Supabase:our Postgres database and authentication provider. Your data lives on Supabase's servers in the United States, protected by row-level security so one user's queries can never reach another user's rows.
  • Polar: our payment processor. Handles checkout, card data, and invoices for Pro and Founding purchases.
  • Vercel: hosts the web app.
  • PostHog: product analytics, signed-in dashboard pages only. No PII or captured content is sent as event properties.

We do not use Google Gemini, OpenAI, Anthropic, or any other AI service to read, score, summarize, or otherwise analyze the content of your notes. The bot parses your reply with a small regular expression; nothing leaves our stack to be interpreted by a model.

6. How long we keep your data

  • Account data: kept while your account exists. Deleted on account deletion.
  • Captured days: kept while your account exists, or until you delete the individual entry from the dashboard. Free-tier users can only see the last 90 days, but the older layers stay in the database and re-appear if you upgrade. If that is not what you want, delete the entries.
  • Telegram link: kept while your account exists. You can disconnect at any time, which removes the chat id we store. After that, the bot will not respond to that chat until you re-link.
  • Share links: kept until you revoke them, until they expire (if you set an expiration), or until you delete your account.
  • Billing records: kept for as long as US tax and accounting law requires us to (typically seven years after the last transaction), even after the rest of your account is deleted. We keep the minimum needed for the books — invoice id, amount, date — not your captured days.

7. Export and deletion

Export. Pro and Founders can export the visual record as a full-resolution PNG from the dashboard. For a structured export of your raw entries (JSON of mood, energy, note, and date), email support@whey.dev from the address on your account and we will send it within 30 days. A self-serve JSON export is on the roadmap.

Per-entry deletion. Delete any single layer from the dashboard. The row is removed and the streak counters are recomputed.

Account deletion. Email support@whey.dev from the address on your account and ask us to delete it. We will remove your user row, which cascades to every entry, your streak state, your Telegram link, and every share link you minted. Anything we are legally required to keep (see billing records above) is the only thing left, and it cannot be tied back to your captured days. An in-product “delete my account” button is on the roadmap.

Access. Every layer we store about you is visible in your dashboard.

8. Telegram, specifically

Telegram is its own service, run by its own company, under its own privacy policy. When you message the Strata bot, Telegram sees those messages because they pass through its network — that is unavoidable for any Telegram bot. What Strata does on top of that is intentionally small: the bot only listens to chats that have been linked to a Strata account through your one-time deep link; it parses the two scale numbers and any optional word out of your reply; it writes that as a layer; and it discards the rest of the raw message body so it never lands in our database. We do not store the daily prompt-and-reply transcript, only the parsed entry.

9. Sharing

The only data that ever leaves your account is what you actively choose to share by minting a share link. Even then, the public page renders a deliberately reduced slice: the visual record for the scope you picked, no free-text notes, no email, no streak counter, no account identifiers. You can revoke any share link at any time from your dashboard; once revoked, the public URL stops resolving immediately.

10. Cookies and local storage

We use essential cookies to keep you signed in (the Supabase session) and a small amount of local storage to remember UI preferences like the theme you picked on a share sheet. Inside the signed-in dashboard, PostHog sets its own analytics cookie under a stable internal id. We do not run any advertising, retargeting, or third-party tracking cookies on any Strata surface.

11. Children

Strata is not intended for children under 13, in compliance with COPPA. We do not knowingly collect data from anyone under 13. If you believe a child has signed up anyway, email us and we will delete the account.

12. International users

Strata is operated from the United States, and your data is stored on US servers. By using the service, you consent to the transfer and processing of your data in the United States. If you are in the European Economic Area, the UK, or another jurisdiction with data-protection rights of access, rectification, deletion, or portability — those rights are honored in full through the export and deletion process described above.

13. Security

Your record is protected by Supabase row-level security: every query is filtered down to your own user id before Postgres returns anything, and there is no policy that grants public read on your entries. The Polar webhook is the only server-side path that can change your plan label, and a column-level grant in our database blocks any client-side attempt to promote yourself. We rotate secrets when needed and log webhook deliveries so a retry is never a privilege escalation.

14. Changes

If we update this policy, the new version replaces this one on this page, with the updated effective date at the top. For changes that meaningfully expand what we store or who we share with, we will email you at the address on your account before they take effect.

15. Contact

Questions about your data, this policy, or how to delete something? Email support@whey.dev. We answer from the same address that runs the bot.

See also our Terms of Service.