Privacy Policy

This Privacy Policy explains how CauseAndCorrelation ("CauseAndCorrelation," "we," "us") collects, uses, and shares information when you use the CauseAndCorrelation web application (the "Service").

1. Who we are

We're operated by Andre Turrettini, based in the USA. If you have questions about this policy or your data, contact us at trackingmytrends@gmail.com.

2. Information we collect

From your sign-in provider. We use Google, a third-party identity provider, for sign-in. When you sign in, your provider shares your verified email address and (if available) your display name with us. We don't receive or store your provider password, and don't request access to your email, files, calendar, or any other data from your provider beyond basic sign-in identity — sign-in is all this integration is used for.

Information you provide by using the Service. This is the core of what we store:

• Your timezone (used to determine "today" for daily check-ins and reminders).
• The studies you create, including each custom cause/result question you write.
• Your daily logged answers to those questions.
• Notification preferences (reminder time and channel per study).
• If you connect an AI assistant, a record of each connection: the assistant's name, which studies you allowed it to read, and when the connection was made or disconnected.

Some of the questions you choose to track may relate to health, symptoms, medication, mood, sleep, or similar topics — see "Health-related information" below.

Information generated by using the Service. Correlation results computed from your own logged answers (effect sizes, significance, lag profiles), the explanations Ask AI writes if you use it (and a log of the requests and responses behind them), and account activity like sign-in timestamps.

Analytics information. We use PostHog to understand how the Service is used, including by visitors who haven't signed in. It records the pages you view (a link that contains a private access token, such as an emailed check-in link, is recorded without the token), that you clicked something (but not the text or details of what you clicked), how you arrived (the website that referred you and any campaign tags on the link), your browser and device type, and your approximate location, which PostHog derives from your IP address. It also records actions such as signing in, creating a study, completing a check-in, using Ask AI, or exporting results, but never their content: not study names, question wording, your answers, or Ask AI text. We don't record your screen or your sessions. Once you sign in, this activity is linked to your account by a random internal ID; we don't send PostHog your email address or display name.

Cookies and similar technologies. We use cookies that are strictly necessary to keep you signed in and to complete sign-in. PostHog also stores an identifier in your browser (in a cookie and/or local storage) so it can recognize repeat visits and, if you sign up, connect your earlier visits to your account. We don't use advertising cookies. You can clear or block these in your browser settings; blocking PostHog's identifier doesn't affect how the Service works.

What we don't collect. We don't run third-party advertising trackers, and we don't sell, rent, or share your information with data brokers or advertisers.

3. How we use your information

We use your information to:

• Operate the Service — running your daily check-ins, computing your correlation results, sending reminder emails you've configured.
• Maintain your account — authenticating you via your sign-in provider, keeping your studies and history associated with your account.
• Communicate with you — reminder emails you've scheduled, and service-related notices (e.g. account or security notices).
• Improve the Service — understanding, in aggregate, how it's used (e.g. how visitors find it, which pages are used, and how many studies reach a meaningful result), not by reading the content of any individual's studies for this purpose.

We do not use your logged data to train any AI model, and we do not use it for advertising or profiling.

4. How we share your information

We don't sell your personal information. We share it only in these circumstances:

• When you choose to share it. We let you export a PDF snapshot of one specific study's results — for example, to share with a doctor. You control this entirely: the export is scoped to that one study, requires no account for anyone you share it with, and the file is yours once downloaded — we keep no record of who you share it with or what happens to it afterward.
• When you connect your own AI assistant. The Service can optionally be connected to Claude or another MCP-compatible AI assistant (via MCP) so you can ask about your own data conversationally. This is opt-in per study, read-only, and only exposes data from studies you've explicitly connected — we don't share your data with that assistant's provider or anyone else on our own initiative.
• When you use Ask AI. If you use the optional Ask AI button, we send an AI model provider (Anthropic or DigitalOcean's hosted models, depending on how the feature is configured) the study's name and description, the wording of the relevant questions, the computed results and, for a single cause/result pair, the daily values you logged for those two questions, so it can write a plain-language explanation. We don't send your email address or display name. We keep a log of these requests and responses to review the feature's safety and quality.
• Service providers. We use these providers to operate the Service. Except for Google, which acts as your sign-in provider rather than on our behalf, they process data only on our behalf, under contract, and only as needed to provide their service to us.
  • DigitalOcean — hosts the Service and its database, stores our database backups, and may run the AI models behind Ask AI.
  • Anthropic — may provide the AI models behind Ask AI (see "When you use Ask AI" above).
  • Google — sign-in (see "Information we collect" above).
  • Resend — sends reminder emails, so it receives your email address and the content of the reminder.
  • Grafana Labs (Grafana Cloud) — monitoring and server logs, which include IP addresses and the pages requested.
  • PostHog (US Cloud) — product analytics, described under "Analytics information" above: which pages visitors view, what they click, and where they came from, including visitors who aren't signed in; if you later sign up, we link that earlier activity to your account. It processes this data in the United States.
• Legal reasons. If required by law, subpoena, or other legal process, or to protect our rights, property, or safety, or those of our users or others.
• Business transfers. If we're involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction; we'll notify you before it becomes subject to a different privacy policy.

5. Health-related information

Because we let you create your own tracking questions, some of what you log may be health-related (symptoms, sleep, medication timing, mood, and similar). This data is self-reported by you, for your own use — we don't verify it, provide medical advice, or diagnose anything, and its correlation results describe statistical association, not causation. We're not a HIPAA "covered entity" or acting as one, since our relationship is directly with you, not with a healthcare provider on your behalf. Depending on where you live, this kind of data may additionally be protected under state consumer-health-data laws; we handle it with the same care described throughout this policy regardless of which specific law applies.

We don't routinely read what you log, so we can't respond to anything you write in a study. If the optional Ask AI feature sees that a study is about harming yourself or someone else, it won't evaluate that study and will point you to a crisis line instead. If you're in danger or in crisis, see "Not for emergencies" in our Terms of Service.

6. Data retention and deletion

We retain your account and logged data for as long as your account is active, so that your correlation results remain meaningful over time.

You can pause or archive a study at any time from within the app, which stops new logging for it; archived studies and their history remain viewable.

We don't currently offer self-service permanent deletion of a study or account from within the app. If you'd like your account and associated data permanently deleted, contact us at trackingmytrends@gmail.com and we will delete it, including your analytics profile in PostHog, within 10 days, except where we're required to retain limited information for legal or security purposes (e.g. fraud prevention records).

7. Your choices

• Access and export. You can view your full logged history within the app, and export your data, including as a PDF snapshot of a study's results to share with someone else.
• Disconnect an AI assistant/MCP access. Any per-study AI assistant connection can be disconnected at any time.
• Disconnect your sign-in provider account. You can revoke our access from your provider's account/security settings at any time; this will prevent future sign-ins but does not by itself delete your data with us (see "Data retention and deletion" above).
• Analytics. You can block or clear PostHog's identifier with your browser settings or a tracking-protection extension; the Service works the same without it. To have your analytics profile deleted, contact us (see "Data retention and deletion" above).
• Reminder emails. You can change or turn off reminder scheduling per study from that study's settings.

8. Security

We use industry-standard measures to protect your information, including encrypted connections (HTTPS) and secure, signed authentication tokens. No method of storage or transmission is 100% secure, and we can't guarantee absolute security.

9. Children's privacy

We're not directed to children under 13 (or the applicable minimum age in your jurisdiction), and we do not knowingly collect information from them. If you believe a child has provided us information, contact us at trackingmytrends@gmail.com and we will delete it.

10. International users

We operate from the USA and your information may be processed there. By using the Service, you consent to this transfer and processing.

11. Changes to this policy

We may update this policy from time to time. When we do, we'll ask you to review and accept the updated policy the next time you use the Service, and you won't be able to continue using it until you accept.

12. Contact us

Questions about this policy or your data: trackingmytrends@gmail.com.