Privacy Policy

Last updated 10 October 2026.

This policy explains what personal data Humanity Asks processes, why, who processes it with us, how long we keep it, and the rights you have.

Humanity Asks is operated by KORZ Studio B.V., a company registered in the Netherlands (KvK 95507833, VAT NL867158827B01). KORZ Studio B.V. is the controller of the personal data described here. Contact: hello@humanityasks.com.

Data we collect

When you answer

You can answer without signing in. We store:

A random participant identifier, issued by our service and kept in a secure session cookie.
Your answers: the question version, the wording you saw, your answer, your conviction where it is asked, when you answered, and a request identifier that stops a retried save from counting twice.
The country and region you answered from, such as the Netherlands and North Holland, stored with your current answer. Cloudflare estimates them from your connection when the answer is saved. We do not store your IP address, a city, a postcode or coordinates, and we do not ask your browser for its location. If you use a VPN, the VPN's location is recorded instead.
A private history of your earlier answers. When you answer again, we record the time since your previous answer and whether the answer changed.
How your reflection unfolded: the time spent on each step, your timed opening answer, which arguments you found convincing, how far you got, whether you arrived through a shared link, and whether you revealed the result, switched language or opened sharing before answering.

When you sign in

Your email address, held by our authentication provider, which also records sign-in events with the IP address.
Answers you gave without signing in, in the same browser, move into your account.
Email preferences set earlier stay with your account. We send only sign-in and account emails.

You can sign in with a one-time code sent to your email address, with your Google account or with your Microsoft account. If you choose Google, Google shares your name, email address and profile picture with our authentication provider, which keeps them with your account. We use the email address to identify your account. If you choose Microsoft, Microsoft shares your name and email address with our authentication provider, which keeps them with your account. We use the email address to identify your account.

Circles and organizations

A circle or an organization stores its members, their roles, the answers given there, the history of those answers and request records.

Owners and admins of an organization can see the email addresses of its members. They cannot see anyone's answers.
If you add your organization answers to Pulse, they become your public answers to those questions. The organization is not told who added theirs. We count how many answers are added each day for each question, without recording who added them or from which organization.
In a circle, your email address is shown to other members only if you agree when you join.
The minimum group size for organizational reporting is 10 when the result includes everyone. A question asked of one group uses the number that group sets, from 2 to 2000, starting at 10. An organization result is not shown when fewer than that many eligible answers would be included. This is not a guarantee of anonymity. Organization results are shown only to members of that organization.
A circle result is shown only to its members, from 5 answers, and never shows who chose which answer. A circle does not set a different number.

Payments

Stripe processes Circles and organization payments and keeps the billing details. For organizations, those details include the company name, the billing address and the VAT number. We never see or store your card details. We store the Stripe customer and subscription references, the plan, the status, the renewal date and the payment notifications Stripe sends us, without names or contact details. For organizations, we also store the size, the billing interval and the amount.

Contact form

If you use the contact form, your name, email address and message are sent by email to our team. They are not stored in the product's database.

Technical data

Your IP address is used to apply rate limits and is sent to Cloudflare Turnstile for the human-verification check. Cloudflare also uses it to estimate the country and region stored with your answer. Our application does not store IP addresses in its own tables, and its logs never contain answers, email addresses, tokens or cookies.

Why we use it

To provide the service you use: saving and counting your answers, keeping your history, and running your account, circles, organizations and subscription.
To keep results honest and the service secure: rate limits and human verification against automated and duplicate use.
To understand how people reflect: the measurements described above. They never change how answers are counted.
To compare answers by place: a country or region appears in a comparison only when at least 10 answers stand behind it. Smaller places are combined into their country or into Other. Nobody is shown where a particular person answered.
To take payments for Circles and organizations.
To reply when you contact us.
To keep the public result complete: when an account is deleted, its current public answers stay as anonymous votes.

We process this data because it is necessary to provide the service you ask for, and because we have a legitimate interest in honest results, a secure service, understanding how reflection works and seeing how answers differ by place.

Who processes it with us

Cloudflare hosts the site and applies rate limits and human verification.
Supabase provides authentication and the database, in the EU, in the Frankfurt region (eu-central-1).
Resend sends sign-in and account emails from noreply@humanityasks.com, and delivers contact-form messages to our team.
Google Workspace receives mail sent to hello@humanityasks.com.
Stripe processes Circles and organization payments.

If you choose to sign in with Google, Google confirms your identity under its own privacy policy.

If you choose to sign in with Microsoft, Microsoft confirms your identity under its own privacy statement.

Some of these providers are based in the United States and may process data there under their data protection terms.

What we do not do

We do not sell personal data or individual answers.
We do not use your answers to train AI models.
We do not run advertising or third-party analytics.
We do not use where you answered to advertise to you or to target anyone.
We do not link accounts by IP address, device fingerprint or an unconfirmed email address.

How long we keep it

Stored answers and request records are kept until you delete your account. There is no timed retention and no automatic purge. When you delete your account, your current public answers stay in the public results as anonymous votes. Each keeps only the question, the answer, your conviction, the language, the day you answered, the day it was kept and whether it came from a member account. It has no participant identifier, email or exact time, so it cannot be linked to you. Contact messages stay in our mailbox until we delete them. Stripe keeps the payment records. Backups and logs held by our providers are removed on their own schedules.

Your rights

Download: in Account settings, Download my data gives you a file with your answers (with the country and region stored with them), history, preferences, reflection measurements, circle and organization answers, and subscription status.
Delete: in Account settings, Delete my account removes your account immediately, with your history, measurements, preferences, memberships and circle and organization answers. Your current public answers stay in the public results as anonymous votes, as described above. A circle or organization in which you were the last member is deleted. If you were the last owner of an organization that has other members, ownership passes to its longest-standing admin, or else its longest-standing member.
Circles subscription: deleting your account also cancels any active Circles subscription immediately.
Other rights: you can ask us to access, correct or restrict your data, or object to how we use it, by writing to hello@humanityasks.com. You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or to the authority in the country where you live.

Cookies and local storage

The __Host-ha_session cookie keeps your participation session, so your answers stay with you. It is HttpOnly, Secure and SameSite=Lax, and page scripts cannot read it.
The ha_language cookie remembers the language you chose.
Your browser's local storage keeps display settings, such as the theme, the result view and which sections are open, and a profile name and photo if you add them. They stay on your device.

We use no advertising or analytics cookies.

Children

The public product has no age gate. The same data is processed for everyone who takes part.

Changes to this policy

When this policy changes, we publish the new version on this page with a new date.