Trust & security
Last updated October 5, 2026
Where your record lives
Your account, entries and chats are stored in Canada (Supabase, Canada Central region). Gusset takes words only: there is no way to attach a file or a photo.
How it's protected
- Encrypted in transit (HTTPS everywhere) and at rest.
- Each account can read and change only its own rows; the database enforces this, not just the app.
- Sign-in by a code sent to your email, or with Google or Microsoft: Gusset has no password to steal.
- Limits on how often anything can be asked, and a strict content security policy.
- No advertising, no trackers, no session recording, no chat widgets.
AI
Gus is AI. What you type is sent to Anthropic, in the United States, to draft your entry. Under Anthropic's commercial terms it is not used to train their models. Drafts can be wrong: review them before you submit anything.
Who processes your information for us
| Provider | What for | Where |
|---|---|---|
| Supabase | Database and sign-in | Canada (Central) |
| Anthropic | AI drafting of entries and write-ups | United States |
| Cloudflare | Hosting the site, protection from abuse, page-view counts without cookies, the person check on the contact form | Worldwide network, including the United States |
| Stripe | Payments | United States and Canada |
| Resend | Sending email | United States |
| Google or Microsoft | Signing you in, only if you choose to. They never see your record | Where that company runs its sign-in |
We never sell your information, never use it for advertising, and never use your record to train AI. Each of these providers may use it only to provide its service to us.
If something goes wrong
If a breach creates a real risk of significant harm, we tell the people affected and the Privacy Commissioner of Canada as soon as feasible. If you live in the United States, we also notify you, and your state's authorities where required, within the time your state's law sets. We keep a record of every breach for at least 24 months. No system is perfectly secure, and we don't promise that ours is.
To report a security problem, write to support@gussetlog.com. We read every report and won't take action against anyone who reports a problem in good faith.
Your data, your call
Download everything we hold, or delete your account and everything in it, from Settings, at any time.