What we keep, and why.
You share hard things here. This is exactly what happens to them.
- 01
What we collect
Your name and email when you sign up; your progress, streak and check-ins; journal notes you save; chat messages you send to Luma or the coach; story submissions; B2B quote requests; and the emails we sent you (delivery status only). Payment card details go straight to Stripe — we never see or store them.
- 02
Why
To run your account, unlock what you bought, show your progress, send the emails you asked for, answer companies who request a quote, and keep the site safe (rate limits, login lockouts).
- 03
Journal privacy
Your journal is private. Only you can read it. Admins cannot see journal text — not in the dashboard, not in reports. The Sunday review email quotes your notes back to you, and only to you.
- 04
AI chats
Luma and the coach are powered by AI models (Anthropic Claude, with Google Gemini as automatic backup, via our provider; speech is transcribed with OpenAI Whisper). Your messages are sent to those providers to generate a reply and are stored with your session so the conversation can continue. The optional 'Reflect on my week' button sends your last seven days of journal notes to Gemini once, to write a private reflection that only you can read. Don't share medical record numbers, passwords or other people's private details.
- 05
Cookies
We use one secure, HTTP-only session cookie to keep you logged in, and browser storage for small preferences (like 'read aloud' on Luma). No advertising trackers.
- 06
Who else sees data
Stripe (payments), our email provider (sending mail), our AI providers (chat and transcription), our hosting provider, and Google if you sign in with Google. Each only gets what it needs to do its job. We don't sell your data.
- 07
Public things
The Graduate Wall is anonymous unless you choose initials or first name. Stories you send are published only after you tick consent and we approve them, signed the way you chose.
- 08
Your choices
Stop any email with its stop link. Delete a journal note any time. Ask us to remove a story, change your name, or delete your whole account — email richculmer@gmail.com and we'll do it within 30 days.
- 09
Keeping it
We keep your account data while your account exists. Email delivery logs are kept 90 days. Payment records are kept as long as tax law requires, even if your account is deleted (they're detached from your name).
- 10
Who's responsible
A.BC.D.F.LLC (New York, USA) is the data controller. Contact: richculmer@gmail.com. If you're in the EU/UK, you also have the right to complain to your local data authority.