Notice at Collection

What we collect

• Identifiers — name, email, account ID, device identifiers, IP address.
• Customer records — billing name + address, payment-method metadata. Full card numbers stay with Stripe.
• Commercial information — subscription tier, purchase history, refund history.
• Internet activity — pages visited, features used, basic error logs.
• Approximate geolocation — city-level only, inferred from IP. We do not collect GPS.
• Inferences — your zone classification (GO / Caution / Stop) and stage-of-change estimates, both derived from what you tell us.
• Sensitive personal information — your self-reported mental and physical health information (sleep, energy, focus, mood, chronic conditions, recovery actions). Treated as SPI under California law and given extra protections (see below).

Why we collect it

• To operate the Service (authenticate you, save your work).
• To personalise the Service to you.
• To communicate with you about the Service (transactional email).
• To process payments through Stripe.
• To detect and prevent abuse and fraud.
• To comply with law and enforce our Terms.

Who we share it with

Only the service providers we need to operate the Service, and only the data each one needs. They are bound by contract to use the data only as we direct.

• Supabase — database, authentication, file storage.
• Vercel — web hosting.
• Stripe — payment processing.
• Resend — transactional email.
• Anthropic — powers ALLY (our AI helper) on paid AI tiers, only for directors who have separately turned on ALLY (AI features) at Settings → ALLY. Not used to train Anthropic's models.

We do not sell your personal information. We do not share it for cross-context behavioural advertising. We honour Global Privacy Control signals automatically.

Sensitive personal information — extra protections

Your zone profiles, check-ins, chronic-condition tags, and toolkit entries are Sensitive Personal Information under California law. We:

• Use SPI only to provide and personalise the Service to you.
• Never disclose SPI to advertising networks or data brokers.
• Never use SPI to train AI models that benefit other directors.
• Only send SPI to Anthropic (the sub-processor that powers ALLY) when you have turned on ALLY (AI features) AND are using an ALLY surface. You can turn it off at Settings → ALLY any time.
• Offer a Right to Limit Use of SPI in Settings.

How long we keep it

• While your account is active: for as long as you use the Service.
• After cancellation: 90-day retention of personalisation data so you can resume; then soft-delete.
• If you request deletion: 30-day grace period, then hard-delete on our schedule.
• Payment records: retained as long as legally required (typically 7 years).
• Backups: age out on standard rotation within ~35 days.

Your rights

You have the right to know what we collect, request a copy, correct it, delete it, limit our use of Sensitive PI, and not be discriminated against for using these rights. We respond to requests within 45 days.

Manage these rights yourself in Settings → Privacy & My Data or contact us at the email in our Privacy Policy.