Privacy Policy

• Account and profile data (name, email address, your weekly goal settings and preferences) — to create and secure your account. Legal basis: performance of our contract with you.
• Google sign-in data — if you sign in with Google, Google shares your email address, name, basic profile details and a user identifier with us so we can authenticate you. We never receive your Google password.
• Fitness and step evidence (weekly step totals you enter, and screenshots you upload from your own health or wearable app such as Apple Health, Fitbit, Garmin, Samsung Health or Oura) — to verify weekly submissions and determine reward eligibility. We do not connect to your wearable account; you choose what to upload. Depending on where you live, step and health-app data may count as health-related data; legal basis: contract performance and, where required, your explicit consent given by submitting it.
• Goals, history and progress (weekly goals, streaks, badges, submission history, reward records) — to run the accountability programme. Legal basis: contract performance.
• Payment and subscription metadata from Stripe (subscription status, plan, price, period dates, customer and subscription identifiers, country, and the last few digits or card brand where Stripe provides it) — to give you access to paid features. We never receive or store your full card number or CVC. Legal basis: contract performance.
• Referral data (who referred whom, referral status, and the verified submissions that unlock a referral voucher) — to operate the referral benefit and check eligibility. Legal basis: contract performance and legitimate interests in preventing abuse.
• Support messages — to answer your questions. Legal basis: legitimate interests in supporting our members.
• Device and technical data (pages viewed, approximate device, browser and operating system, IP address, timestamps, error and security logs) — for security, fraud prevention, and improving the product. Legal basis: legitimate interests.
• Marketing preferences — to send product updates where you have opted in. Legal basis: consent, which you can withdraw at any time.

• Service providers / subprocessors — hosting, database, authentication, analytics and support tooling, acting on our instructions.
• Stripe, our payment processor, for taking payment, storing card details securely, managing the subscription and the billing portal, and fraud prevention. Stripe also processes some payment data as its own controller under its privacy policy. Accountably remains the seller and stays responsible for the membership.
• Reward voucher fulfilment providers — where vouchers are issued. Note that in the current prototype voucher fulfilment is simulated and no voucher vendor is connected.
• Professional advisers (legal, accounting) and authorities where required by law.

We do not sell your personal data.

Our providers may process data outside your country, including outside the UK/EEA. Where that happens we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses.

We keep account, activity and membership data while your account is active and for up to 24 months afterwards, except where a longer period is required for tax, accounting or legal purposes (typically 7 years for transaction records). Submitted screenshots are kept only as long as needed to verify the relevant week. After that, data is deleted or anonymised.

Depending on where you live, you may have the right to access, correct, delete, restrict or object to processing of your personal data, to receive it in a portable format, and to withdraw consent. UK/EEA residents may also lodge a complaint with their supervisory authority. We respond to requests within one month. Contact us through the app to exercise any of these rights.

We use appropriate technical and organisational measures, including encryption in transit, access controls, and row-level database security, to protect your data. No system is perfectly secure, but we take this seriously and review our controls regularly.

We use essential cookies and local browser storage to keep you signed in and to remember your session. Our payment provider sets cookies necessary for checkout. We do not use advertising cookies. You can clear or block cookies in your browser settings, though essential cookies are needed for sign-in to work.

Accountably is intended for adults. [PLACEHOLDER — MINIMUM AGE] The account owner must confirm the minimum age for the Service. We do not knowingly collect personal data from anyone below that age; if we learn we have, we will delete the account and its data. A parent or guardian can contact us to request deletion.

We will update this notice as the product develops and will note the date of the latest change above. For any privacy question, or to exercise your rights, contact Accountably at [PLACEHOLDER — PRIVACY CONTACT EMAIL] or through the app.