Privacy Policy

What we collect

• Account data:your email address and authentication details. You can sign in with a password, or with “Continue with Apple” or “Continue with Google” (web only) - in that case Apple or Google shares the name and email address you approve.
• Content you create:goals, actions, journal entries, identity and vision notes, reviews, daily check-ins (mood, energy, sleep hours you enter), focus sessions, and accountability commitments (deadlines, evidence you submit, and who you've chosen to notify if you miss one). Text you write in these areas is sent to our AI coach (Anthropic) when you use the coach, so it can give you relevant advice - see “AI coach” below.
• Photos & images: vision-board images and commitment proof photos you upload. These are stored in cloud storage and, if you ask the AI coach to caption or verify one, the image is sent to Anthropic for that single request.
• Voice recordings (only if you use dictation or voice notes):on-device dictation is processed by Apple/your device. Voice notes you record for the coach are uploaded to OpenAI (Whisper) to convert them to text; we don't keep the audio after transcription.
• Circle & community data:if you join or create an accountability circle, other members can see your display name, streak, and the commitments you've chosen to make visible to that circle. Chat messages you post in a circle are visible to that circle's members. You can block another member or report a message from inside the circle.
• Accountability contacts:if you add a contact to be notified when you miss a commitment, we store their name and email or phone number so we can send that one notice - see “Other people's data” below.
• Health & biometric data (special category, only if you connect WHOOP): if you choose to connect WHOOP, we retrieve recovery score, sleep stages and hours, heart-rate variability, resting heart rate, blood oxygen (SpO2), skin temperature, respiratory rate, strain, workouts, and the height/weight on your WHOOP profile, so the app and your coach can factor them into your plan. This is optional, and disconnecting stops further collection at any time.
• Payment data (only if you subscribe or use money stakes): our payment processor (Stripe) handles your card details directly - we never see or store full card numbers. We keep the subscription/stake status and billing history needed to run your account.
• Messaging-channel data (only if you use them): if you message the coach on WhatsApp or Telegram, we process the message content and your phone number / chat ID to reply.
• Usage & device data: basic app interactions and technical identifiers (like device type and app version) needed to make features work, keep the service reliable, and diagnose errors you report to us.

AI coach

The AI coach is powered by Anthropic (Claude). When you use it, we send Anthropic the message you type or say, plus relevant context you've chosen to keep in the app - goals, identity and vision notes, journal entries, recent check-ins, and (if connected) your WHOOP data - so it can give you a grounded answer. Voice notes are first transcribed to text by OpenAI. Anthropic and OpenAI process this data to generate a response; they do not use it to train their models, and we do not send data to them for any purpose other than answering you. You can turn the coach's access to your journal, identity notes, and health data on or off at any time in Settings → Coach, and you're asked to agree to this before the coach is used for the first time.

Why we process it (legal basis)

• Performance of a contract- to provide the features you've signed up for (Art. 6(1)(b) GDPR).
• Explicit consent - for WHOOP health data and any marketing communications (Art. 9(2)(a) and Art. 6(1)(a)). You can withdraw this at any time without affecting the rest of the service.
• Legitimate interests - for basic security, fraud prevention, and improving reliability (Art. 6(1)(f)), balanced against your rights.
• Legal obligation- for payment and tax records we're required to keep (Art. 6(1)(c)).

We do not use your content to train third-party AI models, and we do not use health data for advertising.

Other people's data

Accountability contacts and commitments involve a second person by design - that's the point of the feature. If you add someone as an accountability contact, we send them exactly one message explaining what they signed up for and how to opt out, before any further notice is sent. They can opt out at any time via a link in that message, with no account required. Please only add people who've agreed to be your accountability contact.

Who we share data with (processors)

We use the following processors under data processing agreements. A full, current list with purpose and location is kept at /subprocessors. In short: Supabase (database, auth, storage - EU region), Anthropic (AI coaching replies, including photos you ask it to caption or verify), OpenAI (voice-note transcription), Google and Apple (sign-in, only if you use those buttons; Google Calendar, only if you connect it), Vercel (hosting), Stripe (payments and money stakes, only once used), Resend (accountability emails, only if that feature is used), Twilio and Telegram (WhatsApp/Telegram coach access, only if you use those channels), and WHOOP (health data, only if you connect it).

International transfers

Some processors (e.g. Anthropic, OpenAI, Google, Apple, WHOOP) may process data outside the EU/EEA. Where that happens we rely on the EU Standard Contractual Clauses or an equivalent adequacy mechanism to protect your data.

Your rights (EU/UK GDPR)

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Erase your data - you can do this yourself, instantly, from Settings → Delete account.
• Export your data in a portable format (Settings → Sync & backup, or your full Brain Vault as Markdown).
• Object to or restrict certain processing.
• Withdraw consent (e.g. disconnect WHOOP) at any time.
• Lodge a complaint with your local data protection authority.

To exercise any of these, email privacy@pledge.app. We'll respond within one month, as required by GDPR.

Data retention & security

We keep your data while your account is active. Deleting your account is immediate and permanent, and removes your content from our production systems (backups are purged on their normal rotation). Data is encrypted in transit (HTTPS) and at rest where our processors support it.

Cookies

We use only strictly necessary cookies (session and authentication). See our Cookie Policy for details - no consent banner is shown because we don't set any non-essential cookie.

Children

Pledger is not directed to children under 16.

Changes to this policy

If we make a material change, we'll update the date above and, where required, notify you in-app or by email.

Contact

Questions or requests: privacy@pledge.app.