Privacy Policy for Becoming Last Updated: October 23, 2026 THE SHORT VERSION - Becoming is a self-reflection and habit tool for adults dealing with everyday stress, habits and confidence. It does not diagnose, monitor or treat any disease or mental health condition. - We store what you share so the app and Zya can work and remember. - With your permission, we send it to OpenAI and Google, whose AI writes Zya's replies. - If you tap the mic, Google turns your voice into text. We do not keep the recording. - We do not sell your data, show ads, or use your content to train AI. - You can withdraw AI permission, get a copy of your data, or delete your account at any time. 1. WHO WE ARE Zager Consulting LLC is a company organized in the State of Iowa, United States. We run the Becoming app. Contact us at support@becoming.help. We are not a healthcare provider or health plan, so the federal health privacy law HIPAA does not apply to Becoming. We still treat what you share as sensitive and protect it as this policy describes. Some of it is "consumer health data" under state laws; our Consumer Health Data Privacy Policy covers that in detail. 2. INFORMATION WE COLLECT Account information - The name you ask us to call you and your email address. - If you sign in with Apple or Google: the name, email address (for Apple, possibly a private relay address) and account identifier they give us. - Your password is handled by Firebase Authentication. We never see it. Age and location check - Whether you are 18 or older. We do not store your age or date of birth. - The state you tell us you live in, and whether Becoming is available there. What you share (this can include health information) - Your chats with Zya. - Moods, gratitude entries and reflections. - Goals, plans, practice notes and results, and awareness logs. - Answers you give while setting up the app. What the app creates from what you share - Summaries, patterns and insights about themes in your chats and goals, which Zya uses to personalize replies. This is a kind of profiling. We use it only to run the app for you, and it is never used for decisions with legal or similarly significant effects. Voice - If you tap the mic to speak instead of type, the app records a short clip and sends it to Google Cloud Speech-to-Text to turn it into text. The text appears in the message box so you can change it before you send it. - We do not store the recording. It is deleted from your phone as soon as it is sent, and our servers pass it to Google without saving it. We do not use your voice to identify you. Safety information - If the app detects possible signs of a crisis, we record that this happened, when, and how it was detected. We do not copy your message into that record. Feedback and reports - What you send us in Send Feedback, and an email address if you choose to give one. - If you report one of Zya's replies: the reason you choose, any details you add, the reported reply and your message just before it, and technical details about how that reply was produced. A report is stored so our team can read it, so this copy is not encrypted like your chats. Settings - Notification choices, reminder times and your time zone. Usage and diagnostics - Counts such as messages sent, goals created and features used. - Records of AI requests (model used, size and cost) linked to your account ID. - Crash and error reports: device model, operating system, app version and technical error details. These are set up not to include your name, email, account ID or chat content. Consent records - When you accepted the Terms and when you allowed or withdrew AI processing. Subscription information - If you buy the Become plan: which plan you have (monthly or yearly), whether it is active, in a free trial, cancelled or ended, its renewal or end date, and whether you bought it through Apple or Google. This purchase history comes from Apple or Google through RevenueCat and is linked to your account ID. - Apple or Google take the payment. We never receive your card number, bank details or billing address. We do not collect your precise location, contacts, photos, advertising identifiers or payment card details, and we do not keep voice recordings. 3. HOW WE USE YOUR INFORMATION We use your information to: - Create and run your account. - Provide Zya's replies, goals, practices, reflections and insights. - Remember context so conversations can continue. - Show crisis resources when the app detects possible signs of a crisis. - Keep the app secure, prevent abuse, and find and fix problems. - Understand how features are used, in aggregate, so we can improve them. - Reply to your messages and feedback. - Give you the Become plan if you subscribe, apply the free plan's limits, and restore your plan on a new phone. - Meet legal obligations. We do not: - Sell your personal information, or share it for targeted advertising. - Show ads. - Use your conversations or other content to train AI models, ours or anyone else's. - Contact you, your family or emergency services about your conversations. 4. HOW THE AI WORKS AI features only run after you allow them on the AI consent screen. When you use them, we send the relevant parts of your messages, goals and history to our AI providers, OpenAI (API) and Google (Vertex AI), so their models can write Zya's replies and the app's goals and insights. These providers act as our service providers. Under their business terms they do not use this data to train their models. They may keep it for a limited time to detect abuse; for example, OpenAI may keep API data for up to 30 days. If you use the mic, your recording is sent to Google Cloud Speech-to-Text only to turn it into text. Google returns the text and does not keep the recording or use it to train its models. You can withdraw your permission in Settings, AI & Your Data. AI features then stop until you allow them again. Our team does not read your conversations as a routine, other than reviewing a reply you report and your message before it. A small number of authorized staff can access account data when needed to fix a problem, keep the service secure, or meet a legal duty. 5. WHO WE SHARE INFORMATION WITH We share information only with service providers that help us run Becoming, under contracts that limit how they use it: - Google (Firebase Authentication, Cloud Firestore, Cloud Functions, Cloud Storage, Vertex AI and Cloud Speech-to-Text): hosting, storage, sign-in, AI processing and turning voice into text. - OpenAI: AI processing. - Sentry (Functional Software, Inc.): crash and error reports. - Resend: sends our team an email when you send feedback or report a reply, including what you sent (for a report, the reported reply and your message before it) and your contact email if given. - Telegram: a notice to our team that new feedback arrived. It contains no feedback text, email or account ID. - RevenueCat, Inc.: manages subscriptions. It receives your account ID and your purchase history from Apple or Google, and tells us which plan you have. It does not receive your chats or other content. - Apple and Google: if you choose to sign in with them, and if you buy the Become plan through the App Store or Google Play. They handle the payment under their own privacy policies. We may also disclose information if the law requires it, to protect someone's safety, or as part of a merger or sale of our business (and we will tell you first). We do not share information with data brokers or advertisers. 6. HOW WE PROTECT YOUR INFORMATION Your data is stored on Google Cloud servers in the United States. It is encrypted in transit (TLS). Sensitive content, such as chats and reflections, is also encrypted in storage with keys for your account that our servers manage. Our servers can decrypt this content to run the service, so this is not end-to-end encryption. We limit who can access data and use access controls. No system is perfectly secure. If a breach affects your information, we will notify you and the authorities as the law requires. 7. HOW LONG WE KEEP INFORMATION - While your account is open, we keep your information so the app works. - When you delete your account, it is closed and scheduled for deletion. If you sign in within 30 days, the deletion is cancelled. After 30 days, we permanently delete your account and the data linked to it, including your content, feedback, safety records and usage records. - If you tell us you are under 18, we delete the account right away. - Voice recordings are not kept. They are deleted once they are turned into text. - Some copies may remain for a limited time in our providers' systems (such as the AI providers' abuse-monitoring logs) or in backups before they are deleted on their normal schedule. - Crash reports are kept by Sentry for up to 90 days. - When your account is permanently deleted, we delete the plan details we store and ask RevenueCat to delete your purchase records. Apple and Google keep their own purchase records under their own rules, for example for tax and refunds. - We keep a record of consents and deletion requests as long as needed to show we followed the law, and statistics that cannot identify you. 8. YOUR RIGHTS Wherever you live in the U.S., you can ask us to: - Confirm whether we have your information and give you a copy. - Correct information that is wrong. - Delete your information. - Withdraw your consent to AI processing or health data collection. You can delete your account in Settings, Account, and manage AI permission in Settings, AI & Your Data. For anything else, email support@becoming.help from the email address on your account. We may need to confirm it is you. You may use an authorized agent. We respond within 45 days, and we will tell you if we need up to 45 more. We will not treat you differently for using your rights. Appeals: If we decline your request, you can appeal by replying with "Appeal" in the subject. We will answer within 45 days. If you disagree with the result, you can contact your state attorney general. California residents: In the last 12 months we collected the categories listed in Section 2 (identifiers, personal records, commercial information such as your subscription purchase history, sensitive personal information including health information, usage and diagnostic information, and inferences) from you, your device and our AI processing, for the purposes in Section 3, and disclosed them to the service providers in Section 5. We do not sell or share personal information, and we use sensitive personal information only to provide the service you request. Washington, Nevada and Connecticut residents: See our Consumer Health Data Privacy Policy. 9. CHILDREN Becoming is for adults 18 and older. We do not knowingly collect information from anyone under 18. If you believe a minor is using Becoming, contact us and we will delete the account. 10. CHANGES TO THIS POLICY If we make a material change, we will tell you in the app before it takes effect and ask you to review it again. 11. CONTACT Zager Consulting LLC Iowa, United States support@becoming.help