Privacy policy

This policy explains how Nextgen AI Solutions (Pty) Ltd (registration number 2025/167932/07, South Africa) collects and uses your personal information when you use the Utopia website and app. We are the "controller" (or "responsible party") of that information. Contact: hello@myutopia.app.

Looking for our earlier U.Topia app? It has its own policy: U.Topia app privacy policy.

The short version

• Your answers are used only to write your manifesto and guide your coach.
• We never sell your information and never use your answers, journal or coach conversations for advertising.
• Personal answers (such as fears, health goals and the people in your life) are collected only after you agree on a separate consent screen, and you can withdraw that consent at any time.
• You can download or delete all your data from settings.
• We don't use your information to train AI models.

What we collect

What you give us

• Account details: your first name, email address, and sign-in method (Apple, Google or email). If you sign in with Apple or Google, they confirm who you are and share your name and email with us; they handle that sign-in under their own privacy policies.
• An email address during the questionnaire, if you give one to keep your progress safe. We use it to send you up to three reminders to finish (stop them any time with one tap), and account emails (such as "your manifesto is ready") until you save an account.
• Questionnaire answers: the life areas you choose, how they feel today, your ideal ordinary day, your values and proud moments, your style choices, and optional details such as age range, pronouns, city and occupation.
• Personal answers, only with your consent: fears and limiting beliefs, health-related goals, and the first names and ages of people you love, which may include your children. This can be sensitive (special category) information.
• Voice notes you choose to record, and their text transcripts.
• Journal entries, ritual activity and coach messages.
• Your own voice (only if you choose it). To read your manifesto in your own voice, you record a short passage and a consent sentence. We send both to Google to make an AI voice, and delete them as soon as it's made. We keep the finished manifesto recording, which sounds like you, until you turn own voice off or delete your account.
• Your songs (Utopia Composer). The choices you make, any words you type for a song, the lyrics written from them, and the finished song.
• One-time purchases of songs: what you bought and how much of it you've used.
• Your ritual calendar. The intentions you set at the new moon, how you felt they went, and which rituals you completed. What you write to let go at the full moon is never saved or sent to us: it stays on your phone and is cleared when you continue.
• Your monthly report. Counts of your month in Utopia (days you showed up, rings, stars, practice) and, for Premium members, a short note from your coach.
• Messages you send us by email.

What we collect automatically

• Technical data such as device and browser type, IP address, and error logs, to keep the service secure and working.
• How you use the app (for example which screens you complete), with your consent where required.
• If you arrive from one of our ads or posts: the campaign details and ad click identifiers in the link, and the name of the website you came from (for example instagram.com, never the page), to measure which ads and posts work.
• Share cards are made on our server when you ask for one, from your own data, and aren't stored. Only what you see on the card is shared, and only where you choose to share it.

What we receive from Paddle

When you subscribe, Paddle tells us your subscription status, plan, country and the email used. We never see your full card details.

If you pay on one device and then sign in to an account you already have, we move that membership, and the answers and manifesto it was made from, into your account, and delete the temporary one.

How we use it, and our legal basis

Utopia uses AI to generate content for you. It doesn't make decisions about you that have legal or similarly significant effects.

If you arrive through a creator's link

Some creators recommend Utopia through a personal link and may earn a commission. If you start the quiz through one of these links, we note which creator's link it was against your account, so we can credit them and pay them correctly. We keep this link with your account, and we don't store it on your device with a cookie or similar technology. Creators see only totals, such as how many people joined through their links in a month. They never see your name, your email address, your answers or anything you write in Utopia. We use this information for our legitimate interest in running and paying for this program.

If you delete your account, we keep the record of commission paid on your payments as a financial record, without your account ID or anything that identifies you.

If you apply to, or join, The Utopia Circle

When you apply, we collect your name, email address, country, links to your public work, your audience size, what you create about, whether you offer certain services, and why you'd like to join. We use this to review your application and to reply. If we decline your application, we delete it after 12 months. If you join, we also keep your payment method and payment email, your agreement, your terms, and your commission and payment records, which we keep for as long as tax and accounting rules require.

Who processes your information

We use these service providers. Each may only use your information to provide their service to us, under a data processing agreement. Paddle acts as an independent controller for payment data.

We use settings that stop providers using your data to train their models, and zero-retention options where they're offered to us. OpenAI doesn't use our requests to train its models, and keeps them for up to 30 days to detect abuse. For your monthly report's note, OpenAI receives the month's counts and the first line of up to ten of that month's wins and signs. Intentions you write in your own words are checked by OpenAI's safety screen before they're saved. Once we've saved a recording, we delete its text and audio from ElevenLabs' history; ElevenLabs' own debugging and safety logs and backups can keep them for up to 30 days, and we've opted out of ElevenLabs using our requests to train its models. Google doesn't use our requests to train its models. Songs made with Google's Lyria carry SynthID, an inaudible watermark that marks them as AI-made.

International transfers

Our main database is in the EU. Some providers are in other countries, including the USA. Where your information leaves your country, we rely on safeguards recognised by law, such as adequacy decisions and standard contractual clauses.

How long we keep it

• Your account and content: until you delete your account. Deletion is completed within 30 days, including stored files.
• Questionnaires and previews with no saved account or purchase: deleted 30 days after the last answer. If you paid without saving an account, we keep everything while your membership lasts and delete it 90 days after it ends; we email you first.
• Voice-note audio: deleted 30 days after it is transcribed, or 30 days after you record it if it never is. The text stays with your answers.
• Coach text conversations: deleted after 90 days. If you turned on coach memory, a short summary is kept instead.
• Own-voice recordings (the passage and sentence you read): deleted as soon as Google has made the voice, usually within a minute. The AI voice itself expires at Google after 7 days. Your manifesto in your own voice: until you turn own voice off or delete your account.
• Songs: until you delete them or your account. Deleting a song removes its recording too.
• Intentions and calendar rituals: until you delete them or your account.
• Monthly reports: until you delete your account. A sleep manifesto: until you make a new one (which replaces it) or delete your account.
• Payment records: kept by Paddle and us for as long as tax and accounting law requires.

Your rights

Your voice can count as biometric information in some places. We only use it to read your own manifesto, never to identify you, and never share or sell it.

Depending on where you live (for example under POPIA in South Africa and the GDPR in the UK and EU), you can ask to access, correct, export or delete your information, object to or restrict some uses, and withdraw consent at any time. You can export or delete everything from settings in the app, or email us. If you withdraw consent for personal answers, we delete those answers straight away and offer to rewrite your manifesto without them. If you withdraw consent for the people you love, we also delete any songs that named them.

You can also complain to a regulator: the Information Regulator (South Africa), the Information Commissioner's Office (UK), or your local data protection authority in the EU. We'd appreciate the chance to help first.

Security

Your information is encrypted in transit and at rest, access is restricted so each account can only reach its own data, and we never write your answers, journal or coach conversations to our logs.

Age

Utopia is for adults aged 18 and over. We don't knowingly collect information from children, other than first names and ages you choose to share about people you love, with your consent.

Cookies and similar technology

The app uses storage that's essential to keep you signed in, and a small cookie (utopia_ads) that remembers your ad-measurement choice. When you open the checkout, Paddle's secure payment form runs on our page and may use its own cookies to process your payment and prevent fraud.

Product analytics. PostHog (EU) records which screens and buttons are used, linked to your random account ID. It sets no cookies, stores nothing on your device and never receives your answers, manifesto, journal or coach conversations.

Measuring our ads. On our ad pages, the first quiz screen, the membership page, checkout and account creation, we may use Meta's pixel to learn which of our ads brought you to us. In the UK, the EU and everywhere outside the US, it stays off unless you choose Allow. In the US, it's on unless you turn it off, and we treat a Global Privacy Control signal from your browser as no. Under some US state laws this may count as "sharing" for advertising; turning it off opts you out. Change your choice any time with Privacy choices at the bottom of our pages.

When it's on, and only then, our server may also tell Meta when you leave your email, start a free trial or make your first payment (Meta's Conversions API), so the same event isn't counted twice. For that we share a scrambled (hashed) copy of your email address and account ID, Meta's browser and click IDs, your IP address and browser type, and for a payment its amount. We keep the IP address and browser type for at most 45 days. Meta never receives your answers, manifesto, journal or coach conversations, and the pixel never runs on the quiz questions or inside the app.

Changes

We'll update this policy as Utopia changes and tell you about important changes before they take effect. The date at the top shows the latest version.