Privacy Policy

1. Who We Are

Propel is operated by PROPEL APP LTD ("Propel," "we," "us," or "our"), a company registered in England and Wales under company number 17492317, with its registered office at 20 Wenlock Road, London, N1 7GU, United Kingdom.

Propel is an AI life-coaching app (propelcoach.app). For questions about this policy, contact us at privacy@propelcoach.app.

2. Data We Collect

2a. Data you give us directly

• Account: email address, full name, avatar (if you sign in with Google or Apple).
• Date of birth: collected once, at onboarding, as a self-declared age check — we don't verify it against an ID. Used only to confirm you meet the minimum age in section 3 of the Terms of Service; not shown to the coach or used for anything else.
• Onboarding: your focus areas, main goal, preferred coach name and personality, preferred briefing time, and timezone.
• Quiz answers: your focus areas, your goal and why it matters, what gets in your way, and how you want to be coached.
• Goals: titles, descriptions, categories, target dates, and progress you enter.
• Habits: titles, frequencies, categories, and completion records.
• Tasks: titles, due dates, priorities, and completion status.
• Coach conversations: every message you type to the AI coach, and every response the coach sends back. These are stored permanently so the coach can maintain context across sessions.
• Payment identifiers: if you subscribe through the web, Stripe processes your payment and holds your card details — we never see or store your full card number. We keep only your Stripe customer ID, subscription status, and billing provider.

2b. Data generated automatically

• Coach memory: the app periodically compresses your conversation history into a short summary (stored in our database). This summary is used to personalise future coaching responses.
• Wellbeing signals: when you mention sleep, mood, energy, or focus levels in conversation with the coach, we extract and store those as structured data points (e.g. "slept 6 hours" → a dated sleep entry). This lets the coach recall specifics accurately and, over time, notice patterns — it is not a substitute for deliberate health tracking, and nothing is inferred beyond what you actually said.
• Behavioural patterns: the app looks for patterns in your habit and task activity (for example, a habit you consistently miss on a particular day) and may reference an established pattern in a coaching response once there is enough evidence for it. Only the pattern and the coach's confidence in it are used — not a moment-by-moment log of your activity.
• Progress data: streaks and habit progress — calculated from your activity.
• Push tokens: a device identifier stored when you enable push notifications. Used only to send you notifications from Propel. Notifications about your coach use generic text (for example, "Your coach sent you a message"), and your actual messages are only shown inside the app.
• Referral/attribution data: if you sign up via a referral link or promo code, we store which code was used so we can apply your discount and, where applicable, credit the referring creator.
• IP address: held briefly in server memory by our rate-limiting system to prevent API abuse, then discarded. Never written to disk or linked to your account.

2c. Cookies and similar tracking technologies

Our website uses:

• Strictly necessary cookies — required for login sessions and checkout to function. These are set automatically and don't require consent under PECR.
• Analytics and attribution cookies/pixels — used to measure which marketing campaigns, ads, or influencer links brought you to the site (e.g. UTM parameters, ad platform pixels such as TikTok or Meta). These are only set with your consent, given via the cookie banner on first visit. You can withdraw consent at any time through the cookie settings link in the site footer.

We do not use cookies for cross-site advertising profiling, and we do not sell data collected through cookies.

3. How We Use Your Data

• To operate the app and provide the AI coaching service.
• To personalise your coach's responses using your goals, habits, tasks, wellbeing signals, behavioural patterns, and conversation history.
• To create or update a task, habit, or goal on your behalf when you ask the coach to in conversation — the same as adding one yourself.
• To send you scheduled messages: morning briefings, evening reviews, streak alerts, and weekly reports, based on the preferences you set.
• To calculate your streaks and other progress metrics.
• To process subscription payments and manage your plan status.
• To attribute your signup to a referral code or influencer link, where one was used.
• To prevent abuse of the API (rate limiting).

We do not sell your data. We do not use your data for advertising. We do not share your personal data with third parties except as described in section 4.

4. Third-Party Services

Running Propel requires the following services. Each receives only the data necessary for its function.

5. The AI Coach and Your Conversations

The coach is powered by Anthropic's Claude API. When you send a message, the app constructs a prompt that includes:

• Your recent conversation history (last several messages)
• A compressed memory summary of older conversations, plus any recent notes not yet folded into it
• Your active goals, habits, and pending or recently-completed tasks
• Your streak and habit progress
• Any established behavioural patterns or wellbeing signals (see section 2b)
• Today's date and your timezone

This prompt is sent to Anthropic's servers to generate a response. The response is stored in our database as a coach message. Separately, right after you finish onboarding, your quiz answers are sent once to build the coach's starting memory of you, and every message and memory note is also sent to OpenAI to power semantic search over your history (finding something relevant you said weeks ago, in different words) — see section 4 for both.

Important: Everything you type to the coach is stored in our database and used in future prompts. Think of it like a journal that your coach can read. Do not share passwords, credit card numbers, or information you would not want stored on a server.

6. Special Category Data

Some of what you choose to share with Propel — mood entries, sleep data, and anything you discuss with the coach relating to your mental or physical wellbeing — can count as "special category data" under UK GDPR, a category with extra legal protection.

• We only process this data on the basis of your explicit consent, given each time you choose to enter it into the app or mention it to the coach.
• You are never required to share this data to use the core Service, and you can decline to log wellbeing information at any time.
• It carries the same deletion rights as the rest of your data (see section 8), and is never used for advertising or shared with third parties for marketing purposes.

7. Data Retention

• Account data: retained for as long as your account exists.
• Coach messages: retained indefinitely while your account is active. They are the basis for your coach's memory.
• Habits, tasks, goals, and wellbeing signals: retained until you delete them or your account.
• Payment records: retained for 6 years after your last transaction, as required under UK tax and accounting law.
• Rate limiting data (IP addresses): auto-expires within 1 hour.
• Push tokens: retained until you uninstall the app or revoke notification permission.
• After account deletion: all your personal data is deleted from our primary database immediately, except payment records (see above), which we are legally required to retain. Backups may retain other data for up to 90 days before expiry.

8. Your Rights

Under UK GDPR (and equivalent rights if you're located elsewhere), you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data (most data can be edited in-app).
• Delete your account and all associated data.
• Object to or restrict certain processing.
• Receive a copy of your data in a portable format.
• Lodge a complaint with the UK Information Commissioner's Office (ico.org.uk), or your local data protection authority if you're outside the UK.

To exercise any of these rights, use the account deletion option in your profile settings, or email us at privacy@propelcoach.app. We will respond within 30 days.

9. Security

• All data is encrypted in transit using TLS 1.2+.
• Data at rest is encrypted by Supabase (AES-256).
• Access to your data requires authentication. Our database uses Row Level Security policies so that API queries can only return your own data.
• Service role keys (which bypass RLS) are used only in server-side API routes, never exposed to the client.
• No passwords are stored by us — authentication is handled by Supabase Auth.
• No system is perfectly secure. If you discover a security vulnerability, please email privacy@propelcoach.app responsibly before public disclosure.

10. Children

Propel is not directed at children under 13. We do not knowingly collect personal data from anyone under 13. If you believe a child has provided us with personal data, contact us and we will delete it.

11. International Data Transfers

Your data may be processed in countries outside your own, including the United States, where some of the service providers listed in section 4 operate. Where we transfer data internationally, we rely on appropriate safeguards (such as the UK's International Data Transfer Addendum or standard contractual clauses) to keep it protected consistently with this policy and applicable law.

12. Global Users

Propel is available to users worldwide. This policy is drafted to meet UK GDPR and PECR standards, our baseline. If you are located in the European Economic Area, United States, or elsewhere, you retain any additional or different rights your local law provides (for example, rights under the EU GDPR or applicable US state privacy laws), and nothing in this policy limits those rights.

13. Changes to This Policy

We may update this policy as the app evolves. When we make material changes, we will update the "Last updated" date at the top and, where appropriate, notify you by email or in-app message. Continued use of Propel after changes constitutes acceptance of the updated policy.

14. Contact

Privacy questions or requests: privacy@propelcoach.app