Legal

Privacy Policy

Effective date: June 1, 2026

Draft for review. This Privacy Policy explains how Nicholas Hughes ("we", "us", or "our") collects, uses, and shares information when you use the Commit iOS application and related services (the "Service").

1. Information We Collect

Account information. Your email address, used for passwordless email-link sign-in, and basic profile details.
Commitment and check-in data. The goals you set (daily step target and stake), and for each day your step count derived from Apple HealthKit together with a completed/missed flag indicating whether you met your goal.
Payment information. A payment-method token from Stripe. We do not collect or store your full card number — card data is handled directly by Stripe.
Product-analytics and usage data. How you interact with the app (for example, screens viewed and actions taken), collected to improve the Service.
Device identifiers. Basic technical identifiers needed to operate the app and analytics. We do not use advertising identifiers.

2. How We Use Information

To operate, maintain, and secure the Service.
To verify whether you met your daily step goal each day.
To calculate and process forfeits and charges for missed days via Stripe.
To authenticate you and communicate with you about your account.
To understand and improve how the Service is used through product analytics.

3. Apple HealthKit Data

We read your step count from Apple HealthKit only to provide the core functionality of the app — namely, to determine whether you met your daily step goal. HealthKit-derived data is never sold and is never used for advertising or marketing. We store the daily step count and a completed/missed flag in our backend to operate the accountability mechanic and to evidence charges. We do not use HealthKit data for any purpose unrelated to providing the Service.

4. Third-Party Processors

We share information with the following service providers solely so they can perform services on our behalf:

Google Firebase. Authentication (passwordless email link) and backend data storage (Firestore), including your commitment, check-in, and step-count records.
Stripe. Payment processing and storage of payment-method data.
Mixpanel. Product analytics on app usage.

These providers process data under their own terms and privacy commitments. We do not sell your personal information to anyone.

5. No Tracking or Advertising

We do not track you across other companies' apps or websites, we do not use advertising identifiers, and we do not sell your data. The Service contains no third-party advertising.

6. Data Retention and Deletion

We retain your information for as long as your account is active and as needed to provide the Service. You can delete your account at any time from within the app's Settings, which removes your profile and associated data. We may retain limited records as required to complete or evidence charges already incurred and to meet legal, accounting, and fraud-prevention obligations.

7. Children's Privacy

The Service is intended for users 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us at [email protected] and we will delete it.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date above and, where appropriate, provide additional notice.

9. Contact

Questions about this Privacy Policy or your data? Contact us at [email protected].