Privacy Policy

Introduction

The Trauma of Money™ Institute (“TOM Institute,” “we,” “us,” or “our”) operates The Money Mirror, a web-based educational platform designed to help individuals understand their psychological relationship with money. We are committed to protecting the privacy and confidentiality of your personal information.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use The Money Mirror application (the “Service”). This policy complies with the Personal Information Protection Act (PIPA) of British Columbia, the Personal Information Protection and Electronic Documents Act (PIPEDA) of Canada, and applicable Canadian federal and provincial privacy legislation.

Information We Collect

We collect the following categories of personal information when you use the Service:

Account Information

• Full name
• Email address
• Account credentials (encrypted)
• Access code (if provided by your organization)
• Selected tier (individual or partnership)

Assessment Data

• Responses to psychological assessments about your relationship with money
• Calculated assessment results and archetype classifications
• Scoring data and subscale breakdowns

Usage and Progress Data

• Course progress and lesson completion records
• Game session results
• Audio listening history and progress

User-Generated Content

• Journal reflections and personal notes
• Responses to reflection prompts within courses, games, and audio experiences

Information We Do Not Collect

We do not collect any financial data, including bank account numbers, credit card information, transaction histories, account balances, investment information, or any other financial records. The Money Mirror is an educational and self-awareness platform, not a financial services application.

Sensitive Personal Information

Your assessment responses and results constitute sensitive personal information under Canadian privacy law, as they relate to your psychological and emotional patterns around money. We treat this data with the highest degree of care and confidentiality.

By completing an assessment or writing a journal reflection, you provide your informed consent to our collection, use, and storage of this sensitive personal information for the purposes described in this policy. You may withdraw your consent at any time by contacting us or deleting your account.

How We Use Your Information

We use the information we collect for the following purposes:

• To provide and maintain the Service, including delivering assessment results and personalized content recommendations
• To track your progress through courses, games, and audio content
• To store and display your journal reflections
• To match you with your partner for relational assessments (partnership tier only, with mutual consent)
• To generate aggregated, de-identified analytics for program improvement
• To communicate with you about your account and the Service
• To comply with legal obligations

We do not sell, rent, or trade your personal information to third parties. We do not use your assessment data or journal reflections for advertising purposes.

Data Storage and Security

Your data is stored securely using Supabase, a cloud database infrastructure service. Data is encrypted in transit using TLS and at rest using AES-256 encryption. Our application is hosted on Vercel. Both services maintain industry-standard security practices and certifications.

We implement row-level security policies to ensure that each user can only access their own personal data. Administrative access is restricted to authorized TOM Institute personnel on a need-to-know basis.

While we use commercially reasonable measures to protect your information, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security of your data.

Third-Party Services

We use the following third-party services to operate the Service:

• Supabase: Database hosting, user authentication, and file storage
• Vercel: Application hosting and deployment

These services may process your data in accordance with their own privacy policies. We select service providers that maintain appropriate data protection standards.

Cookies and Session Data

We use only essential cookies required for authentication and session management. We do not use tracking cookies, advertising cookies, or any form of behavioral tracking technology. No third-party cookies are set by the Service.

Your Rights Under Canadian Law

Under PIPEDA and PIPA (British Columbia), you have the following rights regarding your personal information:

• Access: You may request access to the personal information we hold about you
• Correction: You may request that we correct any inaccurate or incomplete personal information
• Deletion: You may request that we delete your personal information, subject to legal retention requirements
• Withdrawal of consent: You may withdraw your consent to our processing of your information at any time
• Complaint: You have the right to file a complaint with the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner of British Columbia

To exercise any of these rights, please contact us at info@thetraumaofmoney.com. We will respond to your request within 30 days, as required by law.

Data Retention

We retain your personal information for as long as your account remains active or as needed to provide the Service. You may request deletion of your account and all associated data at any time by contacting us at info@thetraumaofmoney.com. Upon receiving a deletion request, we will remove your personal information within 30 days, except where retention is required by law.

Children

The Money Mirror is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a person under 18, we will take steps to delete that information promptly.

Partnership Tier and Shared Data

If you use the Service in partnership tier, certain assessment results may be shared between you and your designated partner for the purpose of generating relational insights. Both partners must independently complete their assessments and consent to sharing results. Individual journal reflections are never shared between partners.

Important Disclaimers

This Is Not Therapy

The Money Mirror is an educational and self-awareness platform. It is not a substitute for professional therapy, counseling, or mental health treatment. The assessments, courses, and content provided through the Service are educational in nature and do not constitute a therapeutic relationship. If you are experiencing psychological distress, please consult a qualified mental health professional.

This Is Not Financial Advice

The Service does not provide financial advice, investment recommendations, or financial planning services. Content related to money and financial behavior is presented from a psychological and educational perspective only. For financial advice, please consult a qualified financial professional.

Trademark Notice

The Trauma of Money™ is a registered trademark of The TOM Institute. Financial Fawning™ is a trademark of The TOM Institute. All rights reserved.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on the Service and updating the effective date. Your continued use of the Service after any changes constitutes your acceptance of the revised policy.

Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how your information is handled, please contact us: