Privacy Policy

We collect the following personal information when you use Bitches Who AI:

Account information: Your name and email address, provided via Manus OAuth sign-in. We do not store passwords — authentication is handled by Manus's secure OAuth service.

Stack data: The AI tools you add to your dashboard, including tool names, categories, estimated costs, and usage frequency. This is the core data that powers your personalised dashboard.

Usage logs: Session records you voluntarily log (duration, output type, notes). These are used to generate your monthly AI Playback report.

Quiz responses: Your answers to the AI maturity assessment, used to calculate your maturity level and personalise Pip's recommendations.

Technical data: Standard server logs including IP address, browser type, and pages visited. These are used for security monitoring and are not linked to your personal profile.

We use your personal information to:

• Provide and improve the Bitches Who AI service
• Generate your personalised AI stack, maturity score, and monthly insights
• Send you relevant Pip nudges and tool recommendations where you have opted in or they are part of your membership experience
• Process payments via Stripe (we do not store card details — these are handled entirely by Stripe)
• Respond to support enquiries
• Comply with legal obligations

We do not sell your personal information to third parties. We do not use your data for advertising purposes.

Your data is stored on secure servers hosted by Manus (cloud infrastructure). We use industry-standard security measures including:

• HTTPS encryption for all data in transit
• HttpOnly session cookies with a 1-year expiry
• JWT-signed session tokens
• Regular security reviews

Your stack data is stored in a TiDB (MySQL-compatible) database with access restricted to authenticated requests only. We retain your data for as long as your account is active. If you delete your account, all personal data is permanently removed within 30 days.

We share your information only with:

Manus: Our hosting and OAuth provider. Manus processes authentication and hosts our infrastructure. Their privacy policy is available at manus.im.

Stripe: Our payment processor. Stripe handles all payment card data. We only store your Stripe Customer ID. Stripe's privacy policy is available at stripe.com/privacy.

No other third parties. We do not share your data with advertisers, data brokers, or analytics companies.

Under the Australian Privacy Act and (where applicable) GDPR, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your account and all associated data
• Export your stack data in a portable format
• Opt out of marketing communications at any time

To exercise any of these rights, contact us at sarah@wonderandwander.com. We will respond within 30 days.

We use a single session cookie to keep you signed in. This cookie is:

• HttpOnly (cannot be accessed by JavaScript)
• Secure (only transmitted over HTTPS)
• Set to expire after 1 year of inactivity

We do not use advertising cookies, tracking pixels, or third-party analytics cookies. We do not use Google Analytics.

Bitches Who AI is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately and we will delete it.

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by displaying a notice in the app. The "Last updated" date at the top of this page reflects the most recent revision.

For any privacy-related questions, requests, or complaints, contact:

Sarah Pirie-Nally Email: sarah@wonderandwander.com Website: sarahpirienally.com

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Questions about your data? I'm Pip — ask me anything in the chat, or email Sarah directly at sarah@wonderandwander.com.