Privacy Policy

Culmyra Ltd, a company registered in England and Wales (company number 17515292), registered office: 128 City Road, London, EC1V 2NX, United Kingdom is the controller of your personal data under UK data protection law. For anything about your data, email support@culmyra.com.

Account. Your email address, name (from you or your sign-in provider), timezone, and profile details you add (handle, bio). Passwordless sign-in means we never store a password.

Goals and check-ins. Goal titles, your reason for the goal, plans, notes, deadlines, pledge amounts, and check-in history: the content of the commitments you make.

Proof photos. Photos you submit as evidence. They are stored in private storage that only your account can access, compressed on your device before upload.

Connected device data. Only what you explicitly connect: location events for zones you define (arrival at the gym, not a movement trail), health metrics (workouts, mindful minutes, steps), screen time totals, or data your own webhooks send. Each integration shows what it reads before you enable it.

Other people. If you nominate an escalation contact or invite a partner, we hold the name, email or phone number you give us, only to send the messages you set up.

Payments. Handled by Stripe. We store Stripe's references (customer and payment method identifiers) and a full audit log of pledge events; your card number never touches our servers.

Technical. Push notification tokens for devices you enable, session cookies for sign-in, and a 30-day referral cookie if you arrive through an invite link. Stripe sets its own fraud-prevention cookies on payment pages. We count page visits with Vercel Web Analytics, which uses no cookies and does not identify you. Error reports may include technical details of the request that failed. No advertising trackers, no analytics cookies.

To provide the service you signed up for (contract): generating and adjusting your plan, scheduling reminders, verifying evidence against your goal, settling pledges at deadlines, Pro billing, and the notifications and emails you have on.

To keep Culmyra working and safe (our legitimate interests): preventing fraud and cheating, security, fixing errors, and using aggregate, de-identified numbers (completion rates, feature usage) to improve the product. Messages to escalation contacts and partners also rely on this basis.

To meet legal duties (legal obligation): keeping payment and tax records.

With your consent: optional features you switch on, such as device integrations, push notifications, public sharing, and product-update emails. You can withdraw consent at any time by switching the feature off.

Sensitive information. Some goals and connected data reveal information the law treats as special, such as your health or sex life. We only process it because you choose to enter it or connect it, and we rely on your explicit consent to do so. We use it only to run your goals, never for advertising. You can remove it at any time by deleting the goal, disconnecting the integration, or deleting your account.

We do not sell your data. There is no advertising.

Goal text is processed by our AI provider (Anthropic) to build plans, and proof photos are processed to check they match your goal. This happens under business API terms that do not allow your data to be used to train their models.

The AI cannot mark a check-in as missed or cause a charge on its own. It can only flag a proof, and a person reviews anything flagged before it affects your goal. Charges follow the rules in our Terms of Service. You can ask us to explain or reconsider any decision about your goal.

Proof photos: kept while the goal is active, then deleted 90 days after the goal settles. The check-in record (done, missed, verification result) is kept so your history stays intact after the photo is gone.

Raw device readings: deleted after 90 days. Delivered reminder logs: deleted after 30 days.

Goals, check-in history, payment audit records: kept while your account exists; payment records are kept after deletion for as long as tax and accounting law requires (usually six years).

Account deletion: available in your profile, effective immediately, and permanent. It removes your profile, goals, check-ins, photos, device data, and tokens. Running goals end: active pledges are charged first (the amount is shown before you confirm), per the Terms of Service.

Nothing, by default. If you share a goal by link or make it public, viewers see the goal title, progress, and milestones only: never your pledge, notes, or photos. Public profiles are opt-in and show only public goals. Escalation contacts you nominate receive the messages you configure. Cheers you leave on someone's goal show your display name.

Supabase (database, authentication, file storage), Stripe (payments), Vercel (hosting and cookieless visit analytics), Anthropic (AI planning and verification), Resend (email), Twilio (Pro voice calls and SMS), Sentry (error monitoring), and Google or Apple if you sign in or receive push notifications through them. Each receives only what its job requires and acts on our instructions.

International transfers. Several of these providers are based in, or process data in, the United States or elsewhere outside the UK. Where they do, the transfer is protected by UK adequacy regulations (including the UK-US data bridge) or by the UK's approved international data transfer agreement or addendum. You can ask us for details.

Under UK and EU data protection law you can request access to, correction of, or deletion of your data, object to or restrict processing, withdraw consent, and ask for a copy of your data in a portable format. Deletion is self-serve in your profile; for anything else, email support@culmyra.com and we will respond within one month. You can also complain to the Information Commissioner's Office (ico.org.uk), though we would appreciate the chance to put things right first.

Email choices: reminder and digest emails have one-click unsubscribe. Receipts and goal outcomes are always sent because they document money decisions.

All traffic is encrypted in transit and data is encrypted at rest. Access to proof photos is scoped to your account by row-level policies; share links use unguessable tokens. Cards are held by Stripe, a certified PCI Level 1 provider. No system is perfect: if a breach puts you at risk, we will tell you without undue delay and report it to the ICO where the law requires.

Culmyra is not for under-18s and we do not knowingly collect their data. If we learn that an account belongs to someone under 18, we delete it. We will announce material changes to this policy in the product or by email before they take effect.