Privacy Policy

The short version

We collect the account details you type, the conversations you have with the coach, and the payment records our payment provider creates. We do not sell any of it, we do not use it to train a model, and you can ask us to delete your account and everything in it.

One thing is worth stating plainly rather than burying: the text you send is processed by a third-party AI model provider in order to produce the answer. That is unavoidable for a product like this, and it is described in full under "Who else sees your data".

What we collect

Account details: the name and email address you register with, and a password stored only as a cryptographic hash, which means we cannot read it.

Your conversations: the messages you send and the answers you receive, stored against your account so that you can return to them.

Usage records: how many answers you have used and the credit movements that follow from them. We record the number of tokens a model request consumed because that is what a credit is spent on. We do not record the answer text in the usage record.

Payment records: which plan was purchased, when, and the identifier our payment provider gives the transaction. Card numbers never reach our servers — they are entered on the payment provider's own page.

Technical and measurement data: your IP address as it appears in our server logs and at our network edge, your browser language, and — if you arrived from a campaign link — which campaign it was. We also store a random identifier in your browser so that visits can be counted without identifying you (see the Cookies page).

Why we are allowed to hold it

We process your account and conversation data to perform the contract you entered into with us: you asked for coaching, and the coaching is the service.

We process payment records and usage records to meet our accounting and tax obligations and to keep the service solvent.

We process measurement data on the basis of our legitimate interest in knowing which pages and which campaigns bring people who find the product useful. You can refuse it by blocking storage in your browser, and the product continues to work.

Where consent is the basis for something — a support conversation you start, for example — you may withdraw it by telling us to stop.

Who else sees your data

The AI model provider. The text of your messages, and the recent conversation needed to answer them, are sent to a third-party model provider for processing. That provider receives the content of your conversation. We do not send your name, email address or payment details with it.

The payment provider. Stripe processes your payment and holds the card details. We receive only what is needed to know that a payment succeeded: an identifier, an amount and a plan.

Our hosting and network providers. The service runs on servers we operate, behind a network edge provider that terminates TLS and provides protection against abuse. Those providers process request data, including IP addresses, on our behalf.

The email provider that delivers account and support messages.

We do not sell personal data, we do not share it with advertisers, and we do not disclose it to anyone else unless the law compels us to — in which case we will tell you unless we are legally forbidden from doing so.

How long we keep it

Conversations and account data are kept while your account exists. If you delete your account, they are deleted with it.

Usage records are kept for as long as they are needed for accounting and to prevent abuse of the free allowance, and are then deleted or aggregated.

Server logs are kept for a short period for security and debugging, then expire.

Payment records are kept for as long as tax law requires.

Your rights

Depending on where you live you have some or all of the following: to know what we hold about you, to receive a copy of it, to have it corrected, to have it deleted, to object to a particular use, and to receive it in a portable form.

The fastest route to all of them is one email to the address on the About page. We answer, and we do not require you to justify the request.

If you are in the European Economic Area, the United Kingdom, Switzerland, Brazil, California or another jurisdiction with a comparable regime, you also have the right to complain to your local supervisory authority. We would rather you told us first.

Children

This service is for adults in employment or looking for work. It is not intended for anyone under 16, and we do not knowingly hold data about them. If you believe a child has an account, tell us and we will remove it.

Security

Passwords are hashed. Traffic is encrypted in transit. Payment card data never touches our servers. Access to production data is limited to the people who operate the service, and is used for support and for keeping it running.

No service can promise absolute security. If a breach ever affects your data, we will tell you what happened and what we are doing about it without waiting to be asked.

Changes

If this policy changes in a way that materially affects you, we will say so on this page and, for anything significant, by email. The date at the top is the date of the last change.