# KarmaPilot Privacy Policy

**Last updated: July 29, 2026**

KarmaPilot is a Chrome extension that helps Reddit users grow their karma through personalized coaching. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

---

# The Short Version

- We collect your Google account information (for sign-in), your public Reddit username, and your mission progress.
- We use this information only to personalize your coaching experience.
- We never sell your personal data.
- We do not display advertisements.
- We only access Reddit information that is already publicly available.
- KarmaPilot never posts, comments, votes, or performs actions on Reddit on your behalf. Every Reddit action is initiated manually by you.

---

# Information We Collect

## From Google Sign-In

When you sign in using Google, we collect:

- Email address
- Display name
- Profile picture

This information is used solely to authenticate your account.

---

## Information You Provide

During onboarding, you may provide:

- Reddit username
- Selected interests
- Coaching goals
- Daily time availability
- Coaching intensity preference

---

## Public Reddit Information

Using your Reddit username, KarmaPilot may access publicly available information, including:

- Total karma
- Post karma
- Comment karma
- Account creation date
- Public avatar
- Recent public posts (up to 10)
- Recent public comments (up to 25)

We only access information that is publicly visible on Reddit.

We never access:

- Private messages
- Saved posts
- Hidden content
- Reddit settings
- Reddit authentication tokens
- Reddit passwords

---

## Extension Usage Data

To improve your experience, we store:

- Mission progress
- Completed and skipped missions
- Karma history
- Coaching preferences

If analytics are enabled, we may also collect anonymous usage events such as feature usage and button clicks.

---

# How We Use Your Information

Your information is used to:

- Personalize coaching missions
- Generate AI-assisted coaching suggestions
- Track your progress
- Improve KarmaPilot's features
- Maintain your account

---

# Third-Party Services

KarmaPilot currently uses the following services:

### OpenAI

Used to generate coaching suggestions and draft responses.

When you request AI coaching, relevant thread content and context are sent securely to OpenAI.

OpenAI does not use API data to train its models according to its API data usage policy.

---

### Google

Used only for authentication through Google Sign-In.

---

### MongoDB Atlas

Securely stores user accounts and coaching progress.

---

### Render

Hosts the KarmaPilot backend services.

---

> **Note:** If you are **not currently using PostHog**, remove it from this section until it is actually integrated.

---

# What KarmaPilot Never Does

KarmaPilot will never:

- Post on Reddit
- Comment on Reddit
- Upvote or downvote content
- Join or leave subreddits
- Access private Reddit data
- Store Reddit passwords
- Store Reddit authentication tokens

Every Reddit interaction is performed manually by the user.

---

# Data Retention

We retain your information:

- While your account remains active
- Until you request deletion

Accounts inactive for approximately 12 months may be deleted along with associated coaching data.

Anonymous aggregated analytics may be retained longer.

---

# Security

We protect your information using industry-standard security practices including:

- HTTPS encryption
- Encrypted cloud database storage
- Secure authentication tokens
- Backend-only storage of API keys and secrets

Sensitive credentials are never exposed inside the Chrome extension.

---

# Your Rights

You may request to:

- Delete your account
- Export your stored data
- Update incorrect information

Requests can be made using the contact email below.

---

# Changes to This Policy

We may update this Privacy Policy periodically.

Any updates will be reflected by changing the "Last updated" date at the top of this page.

---

# Contact

If you have questions about this Privacy Policy or your data, contact:

**Shrey Tiwari**

**Email:** [email protected]