Privacy Policy

Stored on your account (so the app works across sessions and devices, and so we can send your reminders):

• Your email, to log you in and tie your progress to your account, and — where you gave it to us for that (a quiz result, your onboarding plan, a funnel, a partner invite request) — to send you product email and letters. Every marketing email has a one-tap unsubscribe. We never sell your address.
• Your goal and its details, your streak and daily check-offs, and your Voice Anchor script.
• Your Record— your daily Moves and their outcomes, and the short answers and notes you save while using the app's tools (for example a reflection you keep, a sentence you finish in the Rule Audit, or the answers that sharpen your goal). These are stored in your own words so your record can follow you across devices.
• Your proof. When you are signed in and you prove a daily hard thing, the photo (or a single still frame from a video) and the short text of that day's hard thing are stored privately on our servers, with the time you recorded it. This is what lets your record survive across devices and be verified. Your proof photos are never public. A coach or organization sees a photo only if you choose to send them a proof card that includes it. If you are not signed in, your proof stays on your device only. You can delete all of it anytime by deleting your account (see below).
• Emergency petitions. If you ask us to protect a missed Campaign day after an absolute emergency, we store the date, the category you choose, and the short explanation you submit. A 3Fold owner reviews it and records an approval or denial. Do not send medical records, documents, or other sensitive proof. Petition records are private and are deleted when you delete your account.
• Anonymous usage data (which screens get used, where people drop off) to run and improve the app — not tied to your private entries.

Kept only on your device — not sent to our servers:

• Your journal and your letters.
• The list of invisible rules you name, and the self-doubt you share at the start.
• Your voice recordings (the audio itself), and any journal or vision photos that are not part of a signed-in daily proof.

These stay in the app on your device and are not uploaded. Clear your browser data and they are gone. Everything else you write in the app can be saved to your account when you are signed in (that is how it follows you across devices). AI features you use send the text they need to our AI provider — see below — and if you said yes to personalization, the app may also run an occasional background AI pass over your saved record to suggest insights; say no and it does not run. Onboarding and quiz answers are sent to us when you ask us to email you a plan or a result, described next.

Sent to us when you ask us to email you something:

• If you give us your email on our onboarding, a quiz, or a landing page so we can send you your plan or result, we store that email together with the answers you typed on the way there(for example the goal you named, the thing you keep dodging, and your first name, if you gave it) — so that the plan we email you is actually yours and not a template. You can ask us to delete this at any time by replying to any email from us, and we delete it automatically if you create an account and then delete it.

• To provide the app and sync the account data above across your devices. (Your journal, letters, and the other on-device items listed above do not sync; they stay on the device you wrote them on.)
• To understand, in aggregate, where people get stuck so we can improve 3Fold. Our usage analytics carry no free text you type.
• To communicate with you about your account.

We do not sell your personal information.

Where GDPR/UK-GDPR applies to you, we rely on one of these bases for each thing we do with your data:

• Contract (Art. 6(1)(b)) — running your account: syncing your Campaign and Record across devices, processing your subscription, and sending you the emails your account needs to function.
• Consent (Art. 6(1)(a)) — marketing email, the optional AI-personalization pass over your saved record, sharing your status with a cohort organization, and a partner's referral cookie. You can withdraw any of these at any time (an unsubscribe link, an in-app toggle, or the account screen), and withdrawing never affects the lawfulness of anything already done under it.
• Legitimate interests (Art. 6(1)(f)) — keeping the app secure and free of abuse, aggregate product analytics that never carries your free text, and administering the referral/partner program. We balance this against your rights: we never use this basis for your sensitive free-text entries (journal, hard-thing text, reflections) beyond what a feature you are actively using needs.
• Legal obligation (Art. 6(1)(c)) — keeping accounting records (partner commissions and payouts, 7 years) and responding to lawful requests from authorities.

• Account data (Campaign, Record, moments, proofs, Voice Anchor script) — until you delete your account.
• Proof photos and video-poster frames — until you delete your account.
• Emergency petitions — until you delete your account (the no-account fallback also expires automatically after about 400 days regardless).
• Emails we have sent you (content and delivery record) — until you delete your account.
• A quiz or onboarding lead that never became an account — until you ask us to delete it (reply to any email), or automatically if you later create and delete an account with that email.
• Cohort membership, status, and organization access-log rows — until you leave the cohort, delete your account, or the program's records are pruned on a routine retention schedule (currently 24 months for the access log).
• Aggregate or anonymized analytics events — kept indefinitely in de-identified form (your account link is removed when you delete your account).
• Partner / affiliate commission and payout records — 7 years, as required accounting records, even after you close your affiliate account or delete your 3Fold account.
• Push notification subscription — until you turn notifications off or delete your account.

• Supabase — database & login.
• Vercel — hosting.
• Anthropic (Claude) — when you use AI features, the text that feature needs (for example your goal, your answers, or saved record entries the feature draws on) is sent to Anthropic's AI to generate the result. Under our agreement with Anthropic, this data is not used to train AI models.
• Stripe — payments, if you subscribe to Premium. Your card details go directly to Stripe; we never see or store them.
• Resend / Amazon SES — to email you login codes.
• PostHog — aggregate product analytics (which screens are used, where people drop off). Text you type into inputs is masked in session recordings. Owner sessions are excluded.
• Telegram — internal operations alerts only. When you request organization access or a pilot, your email and form answers are relayed to our private ops channel so we can reply within a day.

If you arrive through a partner's link, we set a first-party cookie for up to 90 days so we can credit that partner if you subscribe. We record the click with a one-way hashed fingerprint of your IP address and browser type (we never store the raw values) and, if you sign up, we link your account to that partner so we can pay them a commission on your payments. This never exposes your name, email, or activity to the partner: partners see only aggregate numbers (clicks, signups, conversions, earnings).

Some partners promote through private campaign linksthat do not show you the partner's name or handle. When you click one, we record the same pseudonymous click information as any partner link (the one-way hashed signal above) along with an internal reference to the partner and campaign so the referral can be credited. We do not build a profile of you from this, we do not store your raw IP address, and this information is deleted when the partner closes their account.

You can join 3Fold through an organization: a gym, a workplace, a coach, or a program. When you do and you choose to share, that organization can see a fixed set of your progress: the name you pick for their roster, your day number, whether you did today's move, how many days you've kept this week, and whether you're on track. They can see a proof only if you tap to send that one card. They never see what you write, your notes, your photos, your Record, your email, or how you pay.

You can choose to share more, in levels, from your account. Level 1 adds your Momentum score and how fast you started. Level 2 adds the name of what you chase and your milestones. Level 3 sends your daily proof card for you. Each level is your choice, the default shares none of this, and lowering the level stops it right away. Your organization can also send you a one-tap nudge to move today; you can mute nudges any time, and the organization is told they are muted rather than left guessing.

The organization is its own company. It decides how it uses what it sees, and it should have its own privacy terms with you. We share only the fixed list above, and only after you agree.

If the organization pays for your Premium, we keep a record that it did and for how long, so that stays separate from any referral rewards. The organization pays us for the service, never for your information.

The organization can also see totals for the group, like how many people joined, are active, or finished. It never sees singled-out individuals this way, and small groups are hidden.

We keep a record of when the organization looks at member status, so access stays accountable. We keep cohort status and these records only as long as the program needs them, and we delete them on a set schedule. You can stop sharing at any time in your account. That hides you from the organization right away and clears the status it held. Deleting your account removes you from every cohort and erases these records.

You can edit or delete your entries in the app. Two self-serve controls live on your account screen and take effect immediately, with no waiting period:

• Download my data — a full export of your own account data as one file (your Campaign, Record, proofs, and everything else tied to your account), any time you want it.
• Delete my account — permanently erases your personal data from our systems, including your proof photos and text and the private files that hold them, and cancels any subscription. What survives deletion: accounting records the law requires us to keep (see “How long we keep it” above), and usage counts that are no longer tied to you.

Wherever you live, you may ask us to access, correct, opt out of marketing, or delete the personal data we hold about you by emailing the address below — we will act on it within 30 days (or sooner). We do not sell or share your personal information (see California Privacy Rights below for what that means precisely), and there is no fee for making a request and no penalty for exercising any of these rights — we will never give you a different level of service because you asked.

If you are a California resident, this section applies to you specifically, using the categories the law defines.

Categories of personal information we collect, and where each comes from:

• Identifiers — email, account id (from you, directly).
• Commercial information — subscription and purchase history, gift codes (from you, via Stripe).
• Internet or network activity — which screens get used, referral clicks (pseudonymous, hashed; automatically, from your use of the app).
• Audio or visual information — proof photos, a still frame from a proof video (from you, directly).
• Professional or employment-adjacent information — a partner applicant's optional discovery answers and resume (from you, only if you apply to the partner program).
• Sensitive personal information (as CPRA defines it) — free text you write that may touch health, finances, or religious belief (we treat all free text as sensitive-adjacent, whether or not it meets the legal definition; from you, directly).

Business purposes we use it for: providing and improving the app, account security and fraud prevention, customer support, processing payments, sending the emails you asked for or that your account needs, and administering the referral/partner program.

We do not sell your personal information, and we do not “share” it for cross-context behavioral advertising(CPRA's defined meaning of “share”). We run no ad-tech, no ad pixels, and no cross-site ad-targeting integration. Because we do not sell or share, there is no “Do Not Sell or Share My Personal Information” link — that mechanism exists to let you opt out of a sale or share that would otherwise happen, and none does.

Your California rights:to know what we collect and why, to delete it, to correct it, and to opt out of sale or share (moot today, since none occurs) — with no discrimination for asking. Email the address below to exercise any of these; see “Your choices and your rights” above for the self-serve controls that cover most of this instantly.