Privacy Policy
Last updated October 5, 2026
This policy of Gabrielle Moore® explains what we collect, why, who helps us, how long we keep it and how you stay in control. We never sell your personal data. Also see our Consumer Health Data Privacy Policy and Cookie Notice.
1. Who we are
- Insspira Publishing Inc., 1489 Marine Dr., Suite 118, West Vancouver, BC V7T 1B8, Canada: owns the sites, content and Anna, processes most payments, and is responsible for most of your data.
- Insspira Payments Inc., 2219 Rimland Drive, Suite 301, Bellingham, WA 98226, USA: responsible for the payment and order data of the charges it processes.
This policy covers www.gabriellemoore.com, coach.gabriellemoore.com (portal and Anna), askgabriellemoore.com, our help center, emails and texts.
Privacy Officer: Insspira Publishing Inc., address above, helpme@gabriellemoore.com (subject "Privacy"), 1-855-935-1200. UK and EU residents can contact us at helpme@gabriellemoore.com.
2. What we collect
- Account: name, email, time zone, preferences.
- Purchases: what you bought, when, price, which company charged you, refunds, membership status, and the consents you gave at checkout.
- Payment: you enter your card in the processor's secure form. We keep only a token, card type, last 4 digits and expiry and, for PayPal, your PayPal email. PayPal holds your other PayPal details.
- Anna: your conversations and her memory of you (section 4).
- Support messages and your marketing choices (email, mobile number if given, and what you agreed to).
- Automatically: IP address, device, pages visited, errors, email opens and clicks, and an approximate country and state worked out from your IP on our own server. No precise location.
- From others: payment results from processors, the age-check result from Yoti, and which partner (Everflow) or ad (RedTrack) sent you.
Sensitive information
Talking to Anna, or buying a class, can reveal your sex life, sexual health, sexual orientation, relationships and mental health, including moments of crisis. This is sensitive data under the law ("special category" data in the UK and EU, "sensitive" or "consumer health" data in several US states). We use it only with your explicit consent, asked on a separate screen in the chat before your first conversation with Anna ("Yes, I agree" / "Not now"), and only to provide the service and keep it safe. You can withdraw consent anytime by use "Withdraw my permission" on "What Anna knows about me", or email helpme@gabriellemoore.com; Anna then cannot coach you, but your classes and books stay available.
3. Why we use it (and legal bases in the UK and EU)
| Purpose | Legal basis |
|---|---|
| Account, delivering classes, books and memberships, support | Contract; legitimate interests |
| Payments, renewals, refunds, fraud prevention | Contract; legal obligation (tax); legitimate interests |
| Anna's coaching and memory; quality review of a small sample | Explicit consent (Art. 9(2)(a)); contract |
| Safety review, crisis replies and team alerts | Explicit consent; vital interests (Art. 9(2)(c)); legitimate interests |
| Age verification | Legal obligation; legitimate interests elsewhere |
| Marketing, analytics, session recordings, ad measurement | Consent |
| Security, logs, records, legal claims | Legitimate interests; legal obligation |
Our legitimate interests are running and securing the service, preventing fraud and defending legal claims.
4. Anna and her memory
Anna is a fictional adult AI character running on our own servers. Her memory has two layers:
- What you can see: facts and "life memories" you tell her, listed on "What Anna knows about me". You can delete any of them.
- What works in the background: an index of your past messages she searches to recall things, and an internal coaching file (your goals, what helped, what to follow up on) rewritten about every 10 messages. You do not see these, but you can ask for a copy.
This is profiling used only to coach you: never to decide your price, never for other members, never sold. We do not use your conversations, memories or other data to train AI models (third-party or our own), and we do not send conversations to outside AI companies.
Deleting it
"Forget everything" (on "What Anna knows about me") deletes your whole conversation with Anna, her visible memories, the message index, the coaching file, follow-up notes, onboarding progress and any pending image requests. It cannot be undone. It keeps your name, account, purchases and billing records, and, only if a safety lock or crisis reply ever happened, the safety records (category, date and the message that triggered them), kept up to 12 months, so deleting memory cannot lift a lock or the crisis protections. To delete your account, use "Delete my account" in My membership, or email helpme@gabriellemoore.com: we remove all of that plus the account within 30 days, keeping only the billing records the law requires and the same safety records. Deleted data leaves our backups within 14 days, and we tell our providers to delete their copies. One exception: material we reported to the authorities or must preserve by law is kept as long as the law requires.
Who can read conversations
A small number of trained team members, bound by confidentiality, can read a conversation when our safety system flags it, when you ask us to look, or in occasional quality and safety checks. They never use it for marketing. How crisis replies and the 24-hour safety lock work is on our safety page.
Automated decisions
One decision is made automatically: locking a topic for 24 hours when someone asks about minors or sex without consent. You can ask for a person to review it, give your point of view and contest it (email helpme@gabriellemoore.com, subject "Review"). We make no other solely automated decisions with legal or similarly significant effects.
5. Who we share data with
We do not sell personal data. We share it only with service providers who work for us under contract (and ad partners on public pages if you accept marketing cookies, section 10).
| Provider | Purpose | Where |
|---|---|---|
| DigitalOcean | Servers (all stored data, including chats; the AI model that writes Anna's replies runs on our own DigitalOcean server, no outside AI company) | Canada (Toronto) and USA (New York) |
| Amazon Web Services S3 | Encrypted backups | USA |
| Easy Pay Direct, PayPal | Payments | USA (PayPal also elsewhere) |
| Ontraport | Customer records, emails and texts, including the text of emails Anna sends you; your age-check result (verified yes or no, method); safety alerts to our team (your name, email, the alert category and a link, never your messages) | USA |
| Yoti | Age verification (image deleted after check) | UK and elsewhere |
| Zendesk | Support; our team inbox, which receives safety alerts (name, email, category and a link, no message text) | USA |
| Bunny.net | Video delivery | EU and worldwide network |
| PostHog, Google Analytics 4 | Analytics on the sales site, with consent | USA |
| Everflow, RedTrack | Affiliate and ad attribution (click ID, order ID, amount; no product names) | USA |
Video privacy. Meta and Google ad tags run only on public marketing pages and only with your consent. We never tell any ad platform which class, video, ebook or audiobook you bought or watched, and we do not disclose which videos you bought or watched to anyone except the service providers who process orders, payments, support and video delivery for us, unless the law requires it or you give separate written consent.
We may also share data between our two companies; when the law requires it (for example reporting child sexual abuse material); if someone's life is in immediate danger; with our advisers to enforce our terms or defend claims; or with a buyer of our business under this policy, after telling you.
6. International transfers
We are in Canada; our servers are in Canada (Toronto) and the USA (New York); some providers work elsewhere. For transfers from the UK or EU we rely on adequacy (Canada), Standard Contractual Clauses with the UK Addendum, or the EU-US Data Privacy Framework and UK extension. You can ask for a copy.
7. Marketing, cookies and security
- Marketing emails and texts only with your opt-in (unticked box; texts need a separate one). Unsubscribe anytime; reply STOP to texts. Account messages (receipts, renewal reminders, security) continue.
- Analytics and marketing cookies only with consent, only on public pages; we honour Global Privacy Control. See our Cookie Notice.
- We protect data with encryption in transit and in backups, and limit staff access. Card numbers never touch our servers. If a breach affects you, we tell you and the authorities as the law requires.
8. Adults only and age verification
Our services are for adults (18+, or the age of majority if higher). We do not knowingly collect data from minors; if we learn an account belongs to someone under 18, we close it and delete the data, except what the law requires us to keep or report.
Where the law requires it, members verify with Yoti before opening course content: a face age estimate (you must look 25 or older) or an ID document. Yoti deletes the image right after the check. We receive and keep only: passed yes or no, the method and the date, never your photo, ID, name or date of birth. We use it only to open content. The result (verified yes or no, method) is also stored in your customer record at Ontraport. In some places (for example Ohio) we ask again every 2 years. See Yoti's privacy notice.
9. How long we keep data
| Data | Kept |
|---|---|
| Images Anna sends you | With your conversation, and deleted with it; intimate images are deleted 30 days after they are sent |
| Anna conversations and memory | Until you delete them or your account; automatically deleted after 24 months without a login |
| Account details; age-check result | While the account is open; deleted within 30 days of closing |
| Invoices, payments, refunds | 7 years (tax law) |
| Payment token | Until you remove the card or close the account |
| Checkout and sensitive-data consent records | Account life plus 3 years |
| Support messages | 3 years after the last message |
| Marketing contacts | Until you unsubscribe (then a "do not contact" list) |
| Session recordings; server logs | 90 days |
| Analytics | Up to 14 months |
| Safety records (category, date and the message that triggered them) | Up to 12 months |
| Backups | Overwritten within 14 days |
| Affiliate partner tax details (collected by Everflow) | 7 years after the last payment |
10. Your rights
Wherever you live, you can ask to see and get a copy of your data (including conversations and the coaching file), receive it in a portable format or have it sent to another company, correct it, delete it, withdraw consent, object to or restrict some uses, including targeted ads and profiling, and ask for a person to review an automated decision (section 4). We never treat you worse for using your rights.
How: use "What Anna knows about me", your account page or any unsubscribe link, or email helpme@gabriellemoore.com (subject "Privacy request") or call 1-855-935-1200. We verify it is you, usually by email. You may use an authorized agent with proof of permission. We reply within 72 hours and complete requests within the times below. If we decline, you can appeal (subject "Privacy appeal"). Complaints to us follow the same steps.
| Where you live | We complete requests within | If you are not satisfied |
|---|---|---|
| United States | 45 days (+45 if needed); appeals 45 days | Your state Attorney General |
| UK and EU | 1 month (+2 for complex requests) | UK ICO or your EU data protection authority |
| Canada | 30 days | OPC, OIPC BC or, in Quebec, the CAI |
| Australia | 30 days | OAIC |
We give the same rights to all US residents. California: in the last 12 months we collected the categories in section 2 (identifiers, commercial information, internet activity, approximate location, sensitive information about sex life and health, and inferences in Anna's coaching file) for the purposes in section 3, and disclosed them to the providers in section 5 for business purposes. We do not sell personal information. When you accept marketing cookies, ad partners (Meta, Google) receive device and page-visit data, which California law may call "sharing"; you can opt out with Cookie settings or Global Privacy Control. We do not knowingly sell or share data of anyone under 16. Washington, Nevada and Connecticut residents: see our Consumer Health Data Privacy Policy.
11. Changes and contact
If we make an important change, especially to sensitive data or Anna's memory, we tell you before it takes effect and ask for consent again where the law requires. Contact our Privacy Officer at the address in section 1, helpme@gabriellemoore.com or 1-855-935-1200.
