The full picture of what we collect, what we don't, and what happens on Day 90. Last updated July 2026.
RealYou is a sixty-three-day identity program operated by Beecham Holdings LLC ("we," "us," or "RealYou"). This policy explains what personal information we collect from you, how we use it, who we share it with, how long we keep it, and the rights you have over it. Our registered contact information is at the bottom of this page.
This policy covers the RealYou website, the onboarding flow, the RealYou portal (where the daily practice, film, and reflections live), and any related emails or messages we send you. It does not cover third-party sites we link to, or services you use outside of RealYou.
Account information. Your name, email address, tier, and payment status.
Intake information. A short conversation you complete during onboarding, including how you describe yourself, what you want to change, and how you experience daily life. This includes free-text answers and, on some tiers, a short recorded response.
Photo and likeness. A photo you upload during onboarding. We use it to generate a personalized cinematic film built for you. This is treated as biometric information (see section 7).
Your written reflections. The daily written entries you create inside the portal. These are private to you by default.
Program telemetry. Which days you completed the practice, how many minutes you spent, which steps you opened. We use this to improve the program and to support you.
Payment information. Processed by our payment provider (Stripe). We receive a token, transaction ID, last four digits of your card, and billing country. We do not store your full card number.
Device and session data. Browser, operating system, device type, IP address, referral URL, and standard log data needed to run and secure the service.
We do not track you across other websites. We do not sell your personal information. We do not use third-party advertising networks. We do not train foundation AI models on your intake, photo, or reflections without your explicit, per-instance consent. We do not knowingly collect information from children under 13.
We use your information to (a) build and deliver your personalized film, (b) run the daily practice, (c) authenticate you and secure your account, (d) process payments and provide receipts, (e) send program-related emails you have subscribed to, (f) respond to your support requests, (g) improve the program through aggregated, de-identified analytics, and (h) comply with legal obligations.
Where GDPR applies, we rely on the following legal bases: Contract (to deliver the program you purchased); Consent (for biometric processing, marketing emails, and any AI training on your data); Legitimate interests (to secure the service and prevent fraud); and Legal obligation (to meet tax, accounting, and regulatory requirements). You can withdraw consent at any time by emailing hello@realyou.app.
Your uploaded photo is used to generate your personalized film. Where we operate under laws that classify facial images or derived data as biometric information (such as the Illinois Biometric Information Privacy Act, "BIPA"), the following applies: we collect this material with your written consent obtained during onboarding; we use it only to build and deliver your film; we do not sell it, lease it, or profit from it; we do not share it with third parties except the service providers listed in section 9, under contract, to render the film; and we destroy it on the schedule in section 11. You can revoke consent and request destruction at any time by emailing privacy@realyou.app.
Your intake, film, and reflections are stored on infrastructure that RealYou has contracted specifically for this program. Your material is logically isolated from other tenants. Roughly a quarter of your program fee funds this infrastructure. Data is encrypted in transit and at rest using industry-standard protocols.
We share data with the minimum number of vendors needed to run the program. Each is bound by contract to use your data only to provide their service to us. The categories are:
Payment processing (billing and refunds), cloud infrastructure (storage and compute for your material), video generation and rendering (to produce your film), transactional email (order confirmations, program emails, password resets), authentication (secure sign-in), error monitoring (to detect and fix bugs), and customer support tooling (to answer your questions). We do not share your material with advertisers, data brokers, or analytics vendors that build cross-site profiles. On request we will provide the specific vendor list in effect at the time you ask.
RealYou is based in the United States. If you access the service from outside the US, your information will be transferred to, stored in, and processed in the US and other countries where our vendors operate. Where required by law, we use Standard Contractual Clauses or equivalent safeguards to protect these transfers. Contact us for a copy of the relevant clauses.
Account information is kept while your account is active and up to seven years after closure for tax and financial-records purposes.
Your uploaded photo is used to generate your film. We keep a copy for up to twenty-four hours after upload so you can retry if you leave the tab while the film is generating. After that it is removed. Working copies tied to a specific render may also expire with other run artifacts (up to thirty days if that render never finishes).
Your intake and other film source materials are kept for the duration of the sixty-three-day program plus twenty-seven days (through Day 90). After that we remove our copy of those source materials.
Your finished film stays in your account until you delete it. We do not delete it for you. On Day 90 we ask you to choose: keep the film where it is, or download a copy and have us erase ours. If you make no choice, the film stays. When you do erase a film, we remove it from our storage, including backup copies, within thirty days.
Your written reflections remain in the portal and under your control. You can export or delete them at any time.
Payment records are kept for seven years to meet tax and accounting obligations.
Support conversations are kept for two years after the last exchange. You can request earlier deletion.
You can request a full account erase at any time. Deletion is honored within thirty days of request, except for records we are legally required to retain.
You. The automated systems that generate your film and personalize your practice. A small support team who may see material only when you explicitly grant access to resolve a problem. Nobody else. We do not share your material with other members, practitioners, or the public unless you explicitly choose to share it inside the community.
Regardless of where you live, you can (a) access the information we hold about you, (b) correct information that is wrong, (c) delete your account and material, (d) export your intake, film, and reflections, (e) object to certain processing, and (f) withdraw consent where processing is based on consent. To exercise these rights, email privacy@realyou.app. We respond within seven days and complete verified requests within thirty days.
Under the California Consumer Privacy Act and its amendments, California residents have the right to know what personal information we collect, to request deletion, to correct inaccurate information, to limit the use of sensitive personal information, and to opt out of "sales" or "sharing" of personal information (RealYou does not sell or share personal information for advertising purposes). We do not discriminate against you for exercising these rights. To submit a request, email privacy@realyou.app. Authorized agents may submit requests on your behalf with written authorization.
We use a small set of first-party cookies and local storage entries to (a) keep you signed in, (b) remember your preferences, and (c) measure aggregate site usage. We do not use third-party advertising cookies. You can clear these at any time from your browser. Disabling them may affect sign-in and other core functions.
RealYou is intended for adults. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with information, contact us and we will delete it.
We protect your information with encryption in transit (TLS 1.2 or higher) and at rest, access controls limiting employee access to what is needed for their role, multi-factor authentication for administrative access, regular security review, and vendor security requirements. No system is perfectly secure. If a breach occurs that affects your personal information, we will notify you and the relevant authorities within the timeframes required by applicable law.
If we change this policy in a way that materially affects your rights, we will email you at the address on your account thirty days before the change takes effect. The "Last updated" date at the top of this page reflects the most recent version. Prior versions are available on request.
Data requests, privacy complaints, or questions go to privacy@realyou.app. A human reads every message and we respond within seven days. For postal mail, contact Beecham Holdings LLC at the address on our website. EU / UK residents may also contact their local supervisory authority.
Sixty-three days. One film. A daily practice. The science underneath, the community around it. Leave your email and we'll be in touch.