← THE LIST

PRIVACY

Privacy Policy

THE LIST

Exodus Original LLC

Version 1.3 · Effective 8 September 2026

This version clarifies health information in user-entered content, deletion, and the optional cancellation question. Previous versions are available on request.

Exodus Original LLC operates THE LIST, a private journaling and reflection service available at thewayofthelist.com (the "Service").

This Privacy Policy explains the types of information we handle, how we use that information, the service providers involved in operating THE LIST, and the choices available to you.

THE LIST is designed as a personal journal. It does not currently provide public profiles, public posting, or user-to-user messaging.

1. Who We Are

Exodus Original LLC

thelisthelp@protonmail.com

Questions about this Privacy Policy or our privacy practices may be sent to the email address above.

2. Information We Handle

The information THE LIST handles depends on how you use the Service and which features you choose to use.

Account Information

When you create an account, we may process information such as:

Authentication is provided through a third-party authentication provider. We do not ask you to provide your date of birth.

Content You Enter

THE LIST allows you to create personal records and reflections.

Depending on which features you use, this may include:

Subscription and Payment Information

If you subscribe, payment processing is handled through Stripe.

Payment card information is submitted directly to Stripe. We do not receive or store your complete card number.

THE LIST stores your subscription status (for example trialing, active, past due or canceled), the dates of your trial and current billing period, whether you have asked to cancel, and Stripe's identifiers for your customer and subscription records. Stripe also makes limited billing and transaction information available to us in its dashboard, such as payment status, invoice history, card brand, expiration date and the card's last four digits.

If you answer the optional question shown when you cancel, your selected reason is stored without an account identifier, email address or free text. The feedback record includes when it was submitted. We do not attempt to associate these responses with individual accounts.

Payment information you submit directly to Stripe is handled under Stripe's own systems and privacy practices.

Settings and Preferences

THE LIST may store settings and preferences associated with how you use the Service, including display settings, privacy preferences, feature preferences, and similar configuration information.

Some settings may be stored locally on your device while others may be associated with your account.

Technical Information

When you access THE LIST, our hosting and infrastructure providers may automatically process ordinary technical information associated with providing a website or online service.

This may include information such as:

3. How We Use Information

We use information as reasonably necessary to operate THE LIST, including to:

We do not use your private journal content for advertising.

Access to private journal content by our personnel

THE LIST does not monitor journal content, for safety or for any other purpose, and we do not routinely review it. A limited number of authorized personnel may access content only when reasonably necessary to:

Any such access is restricted to authorized personnel and limited to what is reasonably necessary for that purpose.

4. Where Information Is Stored

THE LIST may use both local device storage and cloud-based services.

On Your Device

Some information may be stored in your browser or on the device you use to access THE LIST.

Information stored only on a particular device may not be available from another device and may be lost if browser or device data is cleared.

In Your Account

When account-based storage or synchronization is being used, information may also be transmitted to and stored through our cloud infrastructure providers.

This allows supported information to remain associated with your account and, where applicable, to be available across devices.

Our primary account and database infrastructure is currently hosted in the United States.

Photographs

THE LIST may allow you to attach photographs to certain profiles, entries, or features.

Photographs are treated as user-provided content.

Photographs may be kept in browser storage and in our private account storage. They are not public profiles or public image posts. Review your export before relying on it, especially for attachments. Account deletion includes the photographs stored for that account.

We do not use photographs for advertising.

5. Service Providers

We use third-party providers to help operate THE LIST.

These providers may process information in connection with the services they provide.

Supabase

We use Supabase for infrastructure that may include authentication, database storage, account functionality, and related services.

Depending on how you use THE LIST, information processed through Supabase may include account information and content associated with your account.

Vercel

We use Vercel to host and deliver THE LIST.

Vercel may process technical information associated with requests made to the Service, including information such as IP address, browser information, and requested pages.

Support email

If you email our Proton Mail support address, the email and any attachments are processed through that email service so we can respond. Include only the information needed for your request. Support correspondence may be kept as needed to resolve the request and meet legal obligations.

Stripe

We use Stripe to process payments and manage subscription-related transactions.

Information you provide during payment may be processed directly by Stripe. Stripe may also provide THE LIST with information necessary to determine or manage your subscription status.

6. Optional Features Involving Sensitive Information

Some optional areas of THE LIST allow you to enter information that may be particularly personal or sensitive.

You choose whether to use these features and what information to enter.

Philosophies

The Philosophies area may allow you to select or explore religious, spiritual, philosophical, or other traditions and to write personal reflections relating to them.

Information you enter in this area may reveal religious or philosophical beliefs.

Check-Ins

Check-ins may allow you to record information about how you feel physically or emotionally.

Depending on what you enter, this information may be sensitive.

Quizzes

THE LIST may offer quizzes that produce results based on the answers you provide.

Some questions or results may concern personal circumstances, relationships, emotions, safety, or other sensitive subjects.

Consumer health data

Information about your physical or mental health may be consumer health data under applicable state law. This can include check-ins, related readings, quiz answers and results, and health information you choose to enter in your journal, notes, reflections or other fields. Coverage depends on the information, not which page you use.

Check-ins and quizzes have separate permission controls. Withdrawing permission requests deletion of the information covered by that feature. Health information you independently wrote elsewhere is not removed by that feature switch; you can delete those entries, close your account, or contact us for help. We use information you choose to write to provide the journal you request, not for advertising or health-related decisions about you.

Our Consumer Health Data Privacy Policy describes that information in detail, including the categories we collect, who receives it, and the rights you have over it.

7. Artificial Intelligence

THE LIST does not offer an artificial intelligence feature, and nothing you record in it is sent to an AI provider.

An optional feature called Pattern AI was available under Version 1.1 of this policy. It was off unless you turned it on, and when it was on it sent a prepared selection of what you had recorded to Anthropic, PBC. That feature was removed from THE LIST on 6 September 2026. Nothing is sent to Anthropic or to any other AI provider now, and we no longer keep the usage record that feature required.

Information that was sent to Anthropic while the feature was in use is deleted by Anthropic under its own published policies, which we do not control. Version 1.1 of this policy, kept on file, describes what those policies said at the time.

If we add an AI feature in the future, we will update this Privacy Policy to describe it before it becomes available, and it will be off unless you turn it on.

8. Data Retention and Deletion

We generally keep account information and content for as long as reasonably necessary to provide THE LIST or until you delete it or your account, subject to applicable legal and operational requirements.

If Your Subscription Ends

If a paid subscription ends, you can no longer add to or change your journal in the app until you subscribe again. You continue to be able to sign in, read, export and delete the information associated with your account, and to close your account, whether or not you have a paid subscription. We do not delete your content because a subscription has lapsed, and we do not require payment in order to access or delete information you previously entered.

Deleting Content

THE LIST may allow you to delete individual information you have entered.

When you delete content, we process the deletion through the systems used to make that content available to your account. Deleted information may remain temporarily in routine backups or other systems used for security, recovery, legal, or operational purposes until those copies expire or are overwritten.

Deleting Your Account

THE LIST provides a way to request deletion of your account.

Account deletion is intended to remove your account and associated content from active systems, subject to information we may retain when reasonably necessary or legally required.

Certain information may remain for a limited period in routine backups. Historical personal data is not returned to normal use after recovery unless applicable deletions can be reliably respected. Consumer health data is subject to the deletion and backup limits in our Consumer Health Data Privacy Policy.

We may also retain limited transaction, tax, accounting, fraud-prevention, security, or legal records where necessary.

9. Security

We use reasonable administrative and technical measures intended to protect information handled through THE LIST.

Our infrastructure providers also maintain security measures applicable to the services they provide.

However, no website, application, database, storage system, or method of electronic transmission can be guaranteed to be completely secure.

We therefore cannot guarantee absolute security.

10. Your Privacy Choices and Rights

Depending on the features available in your account, THE LIST provides controls that allow you to manage certain information associated with your account.

These may include the ability to:

Depending on where you live and applicable law, you may also have rights relating to personal information we hold about you, such as rights to request access, correction, deletion, or a portable copy.

To make a privacy request, contact:

thelisthelp@protonmail.com

Email us from the address associated with your account. We use that address to verify the request, and we may ask for additional information reasonably necessary to verify it. You do not need to create an account to make a request.

We will act on your request without undue delay and within 45 days of receiving it, unless a permitted extension applies. If we cannot comply, we will explain our decision and your appeal options. If your request is complex we may extend that once by a further 45 days, and if we do we will tell you within the first 45 days and explain why. Requests are free of charge up to twice a year.

If we refuse a request, you may appeal by replying and asking us to reconsider. We will tell you in writing within 45 days of receiving your appeal what we have decided and why. If we deny your appeal, we will give you the contact details for the attorney general of your state so that you may submit a complaint.

We will not treat you differently for exercising any of these rights.

For consumer health data specifically, see our Consumer Health Data Privacy Policy.

11. Legal Disclosures and Business Transfers

Any access to private journal content by our personnel for these purposes is subject to the limits described in section 3. THE LIST does not monitor content for safety and undertakes no duty to intervene.

We may disclose information when reasonably necessary to:

If Exodus Original LLC is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar business transaction, information associated with THE LIST may be transferred as part of that transaction, subject to applicable law.

12. Children

THE LIST is intended for people age 18 and older and is not directed to children.

If we learn that an account belongs to someone under 18, we may close the account and delete information associated with it as appropriate.

13. Changes to This Privacy Policy

We may update this Privacy Policy as THE LIST changes or as our legal, technical, or operational practices develop.

When we make material changes, we will update the effective date and provide additional notice when required by applicable law.

14. Contact

Exodus Original LLC

thelisthelp@protonmail.com

thewayofthelist.com