Privacy Policy

Who can use this

butterfl.ai is for people 18 years of age or older. We ask your age after you pick your niche; an under-18 answer ends the session politely and no intake is stored.

butterfl.ai is available in Canada and the United States, excluding Quebec, for now. A country outside Canada/US, or a Quebec answer, ends the session politely and no intake is stored.

What we collect

When you tap your first niche bubble, Step 1 runs the Turnstile bot check and starts an anonymous session — no account required. The niche labels you tap are sent to our AI processor to suggest the next round; we keep a usage record of each AI call (its type, cost and time, not what you tapped) to enforce limits. As you answer, we may store your name, age range, gender, country, Instagram handle, whether you have an idea already, your chip selections, the ideas generated for you and their internal ranking scores, and a hashed (not raw) form of your IP address used only to detect abuse. Internal ranking scores are separate from any displayed profile-score pair.

Marital status, sexual orientation and ethnicity are optional chips, each asking its own separate, unticked consent before we store it — never bundled into agreeing to this policy. Declining any of them never blocks the rest of the intake, and you can use the same channel as our deletion process (below) to withdraw that consent. Sensitive answers never affect your profile score or your Butterfly score.

If you save an idea, you sign in with Google; we store the account identifier Google gives us, not your Google password.

The landing page carries no analytics or advertising trackers. Cookieless analytics may run from Step 1 onward, if enabled — that is separate from the strictly-necessary cookies described below.

Cookies

We set three cookies, all strictly necessary and none used for analytics or advertising: a Supabase sign-in session cookie (sb-*, keeps you signed in, cleared on sign-out), a one-time account-merge marker (butterfl_merge, lasts 10 minutes, used only during Google sign-in), and an anti-abuse bot-check marker (butterfl_bot, lasts about 30 minutes, set after you pass the Cloudflare Turnstile check run on Step 1). Cloudflare Turnstile, the bot check, processes technical signals from your browser, such as your IP address, TLS fingerprint, User-Agent and the site it runs on, and may set its own cookies as part of the check; Cloudflare’s Turnstile privacy notice explains how it handles them. Step 1 also keeps in-progress answers in your browser’s sessionStorage (not a cookie) so a network hiccup doesn’t lose your place; it clears when you close the tab.

How we use it

After you pick an idea, we may show your profile score once — a score for your account today — next to the Butterfly score, the same profile’s estimated score with Butterfly’s guidance. It is not specific to the idea you picked. These scores are AI-generated estimates, not guarantees. Our AI processor receives your intake answers to generate and evaluate ideas; the score itself is computed by our own code from a fixed rubric.

Who we share it with

Supabase (our database, on Supabase’s free tier, hosted in Canada Central), Google (Gemini API, our AI processor for the narrowing rounds, your idea and your plan), Vercel (hosting, on Vercel’s free Hobby tier), Cloudflare Turnstile (the bot check) and Google (sign-in, only if you save an idea). We use Gemini’s free tier. On the free tier, Google may use what you submit and the responses it generates to improve its products and services, and human reviewers may read that content. Google’s terms apply its paid-service data terms to people in the EEA, Switzerland and the UK. Please don’t enter anything sensitive. We move to paid Vercel and Supabase tiers once we have customers. TypeSafe is not in use. If we ever turn on sub-niche suggestions through TypeSafe, we will update this policy before it receives any of your information. We do not sell your personal information, and nothing on butterfl.ai is for sale yet. If you join the waitlist, you do so on a Google Form we run; Google processes what you enter there under its own terms, and we use it only to tell you when paid plans open and to honour the founding offer.

How long we keep it

Anonymous intakes that are never saved to an account are deleted after 7 days. Accounts idle for 24 months are purged. Account deletion is immediate and cascades through your data in the live database. Supabase’s free tier has no managed backups, and we do not keep backup copies of our own yet. If that changes, we will update this policy first.

Your rights — access and deletion

You can request access to, or deletion of, your personal information at any time by emailing us. We respond within 30 days.

To delete your account or data now, email us with the subject “Delete my data.” This is the deletion mechanism referenced by our platform registrations.

Contact

Business name: butterfl.ai

home@butterfl-ai.com