Privacy Policy

1. Who is responsible

SUKHAVATI LTD is the controller of the personal information described here. We are registered in England and Wales under company number 15497121. Our registered office is 99 Cowley Mill Road, Uxbridge, England, UB8 2QB. Contact chooseyourharduk@gmail.com about privacy or your information.

Choose Your Hard is for adults aged 18 or over. Contact us if you believe someone under 18 has created an account.

2. Information we process

• Account and profile: email or Apple sign-in identifier, internal user ID, handle, optional display name and bio, timezone, adult declaration, settings, accepted legal version and security/session information.
• Challenges and check-ins: titles, descriptions, categories, dates, plans, outcomes, completion history, optional notes and optional photos or older video proof.
• Crew and public activity: memberships, invitations, sharing choices, comments, encouragement, blocks, reports and moderation decisions.
• Optional country map: the country code you select. We do not collect GPS or precise location for this feature.
• Purchases: RevenueCat and Apple identifiers, entitlement, product, transaction state and expiry information. We do not receive your full payment-card details.
• Notifications: push token, app-generated installation identifier and notification settings when you opt in.
• Optional AI: the request you submit, generated response, model, consent time and limited request, outcome and cost metadata used for reliability and spending controls.
• Support and operations: messages you send, deletion receipts, and access, security and error logs generated by our providers.
• Website: ordinary server logs such as IP address, browser, requested page and time. The marketing site does not contain advertising or analytics SDKs.

Private means hidden from other members. It does not mean end-to-end encrypted or inaccessible to us and the service providers that operate the app. Avoid placing medical records or unnecessary sensitive or third-party information in the service.

3. Why we use information

• To provide sign-in, challenges, check-ins, history, crew features and purchase access under our contract with you.
• To provide optional notifications, country-map participation and AI features when you choose them. You can withdraw those choices.
• To prevent abuse, moderate shared content, secure accounts and investigate faults based on our legitimate interests in operating a safe, reliable service, balanced against your rights.
• To answer support and privacy requests and comply with legal, accounting and regulatory obligations.

We do not use acceptance of the Terms as blanket consent to process health information. Do not submit sensitive information unless it is necessary for your own chosen use of the feature.

4. What other members can see

Check-ins, notes and proof start private. If you choose crew sharing, permitted members can see the content and profile identity shown in the app. Public challenge activity shows only the fields described before you join; notes and proof remain private. Invitation links reveal limited challenge preview information to anyone who has the link.

The country map publishes aggregated totals only after at least five eligible members in a country opt in. It does not publish names, handles or precise locations. Making content private stops future authorised access through the service but cannot recall screenshots or copies another person already made.

5. Service providers and disclosures

• Supabase: authentication, databases, storage and server functions.
• Apple: app distribution, Apple sign-in, in-app purchases and push delivery.
• RevenueCat: subscription entitlement and purchase restoration.
• Expo: opt-in remote notification delivery.
• OpenAI: safety moderation of selected shared text and images and optional AI planning or coaching requests.
• Resend: transactional email such as deletion confirmations and operational alerts.
• Netlify: public website and legal-page hosting.
• Google: support email through Gmail and font delivery on the marketing pages; those services receive the information needed to deliver them.
• Fontshare: font delivery on the marketing pages; its servers may receive ordinary request information such as IP address and browser details.

We may also disclose information when required by law, to protect users or the service, or as part of a corporate transaction with appropriate safeguards. We do not sell personal information or use it for third-party behavioural advertising.

6. International processing

Some providers process information outside the United Kingdom. We permit a restricted transfer only where UK data-protection law allows it, such as to a country covered by UK adequacy regulations or under an approved contractual safeguard and transfer-risk assessment. The provider and destination determine which safeguard applies. Contact us for the current destination and a copy or description of the relevant safeguard.

7. How long we keep information

• Account, profile, challenge and check-in information is kept while your account exists, then deleted or anonymised through the deletion process unless a limited exception below applies.
• Your optional country selection remains until you remove it or delete your account. Published totals are aggregated and do not identify you.
• Optional AI interaction content is scheduled for deletion after 30 days. Completed request and accounting metadata is scheduled for deletion after 90 days. Anonymous monthly spending totals may be kept longer.
• Push event and delivery history is kept for up to 180 days. Device tokens are removed or disabled when no longer needed.
• Reports and moderation records are kept only while needed to investigate the concern, enforce safety decisions, handle appeals or establish legal claims. Deleting related content or an account may remove them sooner.
• Support messages, provider logs, deletion receipts, financial records and backups are kept for the provider’s configured period or as long as reasonably needed for the request, security, accounting, disputes or legal duties. Backups expire through normal rotation and are not restored for ordinary use after deletion.

When you delete your account, private media and account-linked data are removed. If other members still rely on a challenge you created, we close it to new joins, remove your ownership and replace creator-written title and description with neutral text before retaining the minimum structure needed for their records. Deletion does not cancel an Apple subscription.

8. Your choices and rights

You can control sharing, notifications, country-map participation and optional AI use in the app. You may ask for access, correction, erasure, restriction or a portable copy of your information, object to processing based on legitimate interests, or withdraw consent where we rely on it. A right can depend on the information and legal basis. We may request proportionate information to verify you.

Email chooseyourharduk@gmail.com to exercise a right. You can also complain to the UK Information Commissioner’s Office at ico.org.uk or to the supervisory authority where you live.

9. Security and automated processing

We use access controls, encrypted network connections, private-by-default settings and limited-access storage designed to protect information. No online service can guarantee absolute security. Tell us promptly if you believe your account or information is at risk.

Automated tools may screen shared content for safety. They can be wrong. You can request human review of a moderation decision by contacting support. We do not make solely automated decisions that produce legal or similarly significant effects about you.

10. Deletion, contact and changes

Delete your account in the app from Me, Help & Legal. If you cannot access the app, follow the account deletion instructions or email us. We will update this policy when practices materially change, show the new effective date and give appropriate notice.