Privacy Policy (DRAFT, not in force)
Effective [date]. Last updated [date]. [COMPANY NAME] ("we") makes Performance OS.
We built this app to help you decide what matters, plan a week you can really do, and look back honestly. Your goals, plans and reflections are yours. This page explains exactly what we hold, why, who helps us hold it, and what you can do about it.
The short version
- We collect what you give us: your account, goals, plans, habits, reviews, and conversations with the coach.
- We never watch your screen, log what you type, read your browsing history, track how you use other apps, or report anything to an employer.
- You can export everything, delete everything, switch the AI off for parts of your life, and see and erase what the coach remembers.
- We don't sell your data and we don't use it to advertise.
What we collect and why
| What | Why |
|---|---|
| Account: email, name, time zone, the hours you say you have each week, accessibility settings | To run your account and tailor planning |
| What you write and decide: life areas, goals and why they matter, milestones, weekly outcomes, actions and their results, habits and check-ins, weekly reviews, notes | To give you the planning, review and score features |
| Your score and how it was made, including earlier versions after you correct something | So you can see and challenge it |
| Coach conversations, feedback you give, and facts the coach remembers in your words | To answer you and personalise. You can see, hide and delete each remembered fact |
| Calendar (only if you connect Google Calendar or Outlook): the calendars you choose, and for events from about two weeks back to about eight weeks ahead, when each starts and ends, its time zone, whether it is all-day, its status, whether it marks you busy or free, and whether it is private. Event titles only if you choose, and never for private events. Never attendees, descriptions or locations | To plan around real commitments. Read-only: we never create, change or delete anything in your calendar |
| Todoist (only if you connect it): the names of your projects, and the name, due date and priority of open tasks in projects you choose. Never descriptions, comments or labels. We never change anything in Todoist | To suggest tasks you can pull into your week |
| Notification settings and a push token | To send the reminders you ask for. Messages are generic: they never contain your goals or tasks |
| Subscription records: plan, status, dates, price and currency, the version of the terms you accepted. We never see your card number | To give you what you've paid for |
| Usage counts: that you reached a milestone, like finishing a review, with no content | To see what helps. You can turn this off |
| Technical records: error reports and logs that carry ids and event names, not your content | To keep the app working |
Google user data
If you connect Google Calendar, we ask for one permission: read-only access to your calendars and events (https://www.googleapis.com/auth/calendar.readonly). We use what we read only to show you how much of your week is already committed and to plan around it. That is the only feature that uses it.
- We do not sell Google user data, use it for advertising, or use it to train AI or machine-learning models.
- Calendar events are not sent to an AI model. Planning uses only a total of busy time.
- People at our company do not read your calendar data, except with your consent, to investigate abuse or a security problem, or to comply with the law.
- Access tokens are encrypted when stored, and never appear in logs or in responses to the app.
- You can disconnect at any time. Disconnecting revokes our access at Google and deletes the events we synced. Deleting your account does the same.
- You can also remove our access from your Google Account's third-party access settings.
Personal Performance OS's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Who else handles your data
We use these companies to run the app. They process data only to provide their service to us.
| Company | What for | What they receive |
|---|---|---|
| Supabase | Database and sign-in | Everything above and your sign-in details |
| Vercel | Runs our servers | Requests in transit; logs hold ids, not content |
| [AI provider, currently Google Gemini] | AI features | What you give goal discovery and milestone drafting, and, for coach answers, relevant parts of your plan, goals, score and remembered facts, excluding any life area you've turned off |
| Google (Calendar) and Microsoft (Outlook) | Calendar sync | Your consent; we read events |
| Todoist | Task suggestions | Your consent; we read the tasks you choose |
| Resend | Email reminders | Your email address and a generic message |
| Expo | Push reminders | A push token and a generic message |
| Upstash | Limits abuse | Counters tied to your account id |
| Sentry | Error reports | Error type, route and ids, with request content stripped |
| Stripe | Web subscriptions | Your email and payment details, held by Stripe |
| Apple, Google and RevenueCat | App store subscriptions | Purchase records tied to your account id |
How long we keep it
We keep your data until you delete your account. Specifics: export links last 7 days and work once; a calendar disconnection deletes the events we synced; scheduler records are removed after 45 days and remembered request responses after 7 days. After you delete your account we keep [a record that the deletion happened, billing records for [period], and a security log of actions that holds no content, for [period]].
Your choices and rights
- Export everything in a ZIP (Profile → Privacy Center).
- Delete your account. It runs after a 7-day pause so you can change your mind, then removes your data for good. A web subscription is cancelled for you; if you subscribe through an app store, please cancel there too.
- Turn off AI for a life area, forget anything the coach remembers, hide your score, turn off usage counts, and choose reminders and quiet hours.
- Correct anything we hold by editing it in the app.
- [Depending on where you live, you may also have the right to ask us what we hold, to object to or restrict some processing, to receive your data, and to complain to your data protection authority. Write to us and we'll help.]
The AI
Our AI features suggest and explain. They don't act on your behalf: anything that would change your plan is shown to you first and only happens when you confirm. They can be wrong, and they are not medical, legal, financial or mental-health advice. If you tell the coach you may harm yourself, it will stop and point you to people who can help.
Security
Connection tokens for your calendar are encrypted. Access to your data is limited by account, and we record administrative actions (without content). No system is perfectly secure; if something goes wrong that affects you, we'll tell you plainly and promptly [and as the law requires].
Children
The app is for adults. [Age and any additional requirements to be decided with counsel.]
International transfers
[Where data is stored and how transfers are protected: to be completed once the hosting regions and agreements are confirmed.]
Changes
If we change this policy in a way that matters, we'll tell you in the app before it takes effect.
Contact
[Privacy contact email] · [Company name and postal address]