Privacy Policy

Who we are

AI Personal Improvement Coach (“the Coach”, “we”, “us”) is an online service that helps you plan your days, build habits and work towards goals with the help of AI. For anything privacy-related, contact support@codedstream.com.

What we collect

Information you give us

• Account: your email address, first name and a password (stored only as a salted, one-way hash). If you sign in with Google we receive your email, name, profile picture and a Google account identifier.
• Onboarding & profile: age (optional), gender (optional), timezone, work or study status, typical wake and sleep times, available free time, activity level, goals, habits, challenges, coaching preferences and anything you choose to tell your coach.
• Your activity: tasks, daily plans, habit check-offs, evening check-ins (including mood and energy ratings you enter), weekly reviews, and messages you exchange with the coach.
• Payments: if you subscribe to Pro, payment is handled by Stripe. We receive your subscription status, plan, billing period and invoice amounts — never your full card number.

Information collected automatically

• Session data: a secure, http-only session cookie to keep you signed in, the browser user-agent of each session (so you can recognise your devices) and a keyed hash of your IP address used for abuse and rate-limit protection. We don’t store your raw IP address with your account.
• Product events: first-party events such as “signed up”, “completed onboarding” or “completed a task”, without names, emails or free text. We use no third-party advertising or tracking scripts.
• Error logs: technical details when something breaks, to fix it.

We do not access your contacts, location, camera, microphone, calendar or health apps.

How the AI uses your data

To create your plans, analyse check-ins, write weekly reviews and reply in chat, we send the relevant context (for example your goals, schedule, recent tasks and check-ins, and the conversation) to a third-party large-language-model (LLM) provider through its business API. The provider processes it to generate a response and returns it to us. We use providers whose API terms do not permit training their models on our customers’ API data, and we send only what a request needs.

On Pro, the coach can keep short “memories” (for example “prefers workouts in the morning”) so it gets more personal over time. You can ask the coach to forget things, and memories are deleted with your account.

AI output can be wrong. The coach is not a doctor, therapist, dietitian or financial adviser — see our Terms.

Why we use it (legal bases)

• To provide the service you asked for (contract): your account, plans, coaching, reminders and billing.
• Legitimate interests: keeping the service secure, preventing abuse, fixing bugs and understanding, in aggregate, which features help people.
• Consent: optional emails such as daily plan and check-in reminders — you can switch these off in Settings at any time.
• Legal obligations: for example keeping invoice records for tax purposes.

Who we share it with

We never sell your personal data and never share it for advertising. We share it only with service providers that help us run the Coach, under contracts that require them to protect it:

• AI provider — generates coaching responses (see above).
• Stripe — payment processing for Pro subscriptions.
• Email delivery — sends verification, password-reset and reminder emails.
• Google — only if you choose “Continue with Google”.
• Hosting infrastructure — servers and databases that store the service’s data.

We may disclose information if required by law, or to protect the rights and safety of our users or the public.

How long we keep it

We keep your data while your account is active. When you delete your account we immediately sign you out everywhere, remove your sign-in methods and free up your email address; the remaining account data is permanently erased within 30 days. Invoice records may be kept longer where the law requires it. Backups roll over and are overwritten on a regular cycle.

Your rights and choices

• Access & portability: download all your data as JSON from Settings → Account → Export my data.
• Correction: edit your profile, goals and preferences in the app at any time.
• Deletion: delete your account from Settings → Account. If you have an active Pro subscription, cancel it first so you aren’t charged again.
• Objection & restriction: email us and we’ll help. Depending on where you live (for example the EU/UK under GDPR, or California under CCPA/CPRA) you may have additional rights, including complaining to your data-protection authority.

Security

Passwords are hashed with Argon2id, sessions are stored as hashes, all traffic is encrypted with HTTPS, and access to production systems is restricted. No system is perfectly secure; if we ever learn of a breach affecting your data we will notify you as required by law.

Children

The Coach is not intended for children under 13 (or the minimum age of digital consent in your country). We don’t knowingly collect data from them; contact us and we will delete it.

International transfers

Our service providers may process data in countries other than yours. Where required, we rely on appropriate safeguards such as standard contractual clauses.

Changes

If we change this policy in a meaningful way we will tell you in the app or by email before the change takes effect.

Contact

Questions or requests: support@codedstream.com.