Legal

Privacy Policy

Effective Date: March 13, 2026  ·  Last Updated: March 28, 2026

The Myers-Briggs Company (“we,” “us,” or “our”) operates mbti.com(the “Platform”), which delivers the Myers-Briggs Type Indicator® (MBTI®) assessment. We are committed to protecting your personal information and being transparent about how we use it.

1. Information We Collect

Information You Provide

• Account information — your name, email address, and password when you register.
• Assessment responses — your answers to MBTI assessment questions.
• Demographic information — optional details such as age and education level that help contextualize your results.
• Payment information — billing details entered at checkout. We do not store your payment card data; all transactions are processed securely by Stripe (see Section 5).
• Gift and redemption details — recipient names and email addresses when you purchase a gift report.
• Marketing preferences — your explicit consent choice, recorded when you opt in or out of marketing emails at sign-up or via Account Settings.

Information Collected Automatically

• Usage data — pages visited, features used, and time spent on the Platform.
• Device and browser information — IP address, browser type, operating system, and referring URLs.
• Cookies — session and preference cookies used to maintain your login state and improve your experience (see Section 8).

2. How We Use Your Information

We collect only what we need to deliver a high-quality, research-backed assessment experience. Specifically, we use your information to:

• Create and manage your account and authenticate your identity.
• Administer the MBTI assessment and generate your personalized results.
• Process payments and fulfil gift purchases.
• Send transactional emails — account confirmation, password reset, and results notifications. These are sent regardless of marketing preferences.
• Send marketing emails — product updates and offers — only where you have given explicit consent (see Section 3).
• Improve the Platform through aggregated, anonymized analytics and research.
• Comply with applicable legal obligations.

We do not sell your personal information to third parties. We do not use your assessment responses for targeted advertising.

3. Marketing Communications

We only send marketing emails where you have given us explicit, freely given consent. The opt-in checkbox on sign-up is unchecked by default. You can change your preference at any time from Account Settings → Communications.

Transactional emails are not marketing. Emails about your account, results, purchases, and deletion are sent as necessary to deliver the service and cannot be opted out of while your account is active.

4. How We Share Your Information

• Service providers — Supabase (database and authentication), Stripe (payment processing), Amazon Web Services (email delivery), and Vercel (hosting). Each is contractually required to protect your data.
• Research — anonymized, aggregated data may be used by Myers-Briggs researchers to study personality types and assessment validity. Your name and contact details are never shared in this context.
• Legal requirements — we may disclose information if required by law, court order, or governmental authority.
• Business transfers — in the event of a merger or acquisition, your information may be transferred subject to the same privacy commitments.

5. Data Security

• Encryption of data in transit using TLS/HTTPS on all connections.
• Passwords stored as one-way bcrypt hashes — we cannot retrieve your plaintext password.
• Row-level security on our database, ensuring users can only access their own data.
• Regular security monitoring and vulnerability scanning.

6. Payment Processing

All payment transactions are processed by Stripe, Inc., a PCI DSS Level 1 certified payment provider. We never receive, process, or store your full card number or CVV. See Stripe's Privacy Policy.

7. Research & Assessment Data

Your assessment responses may be included in anonymized, aggregated psychometric research. At no point will researchers receive your name, email, or any directly identifying information. Participation in specific studies is always voluntary and requires explicit consent.

8. Data Retention & Deletion

We retain your account and assessment data for 12 months from your last login. We will email you a 30-day warning before deletion. You can request deletion at any time from Account Settings or by emailing privacy@mbti.com.

Purchase and billing records are retained for 7 years as required by law; your personal identifiers are removed from these records upon account deletion.

9. Cookies

• Essential cookies — required for authentication and session management. The Platform cannot function without these.
• Preference cookies — store your language and theme settings.
• Analytics cookies — anonymized usage data to help us improve the Platform.

10. Your Privacy Rights

Depending on your location, you may have rights to access, correct, delete, or port your data, and to object to or withdraw consent for certain processing. To exercise any of these rights, contact privacy@mbti.com. We will respond within 30 days.

11. Children's Privacy

The Platform is intended for users aged 16 and older. We do not knowingly collect personal information from individuals under 16. Contact privacy@mbti.com if you believe a minor has registered.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you by email or prominent Platform notice before material changes take effect.

13. Contact Us

Questions about this Privacy Policy or our data practices: