Privacy Policy

Last Updated: August 16, 2026

Introduction

Commit Contracts (“Commit,” “we,” “us,” or “our”) built Commit as an accountability app: you set a goal, put real money behind it, and an AI coach reviews the evidence you submit to decide whether you kept your word. This Privacy Policy explains what information we collect through the Commit mobile application and any related services (together, the “Service”), why we collect it, who we share it with, and what control you have over it.

By creating an account or otherwise using the Service, you agree to the collection and use of information as described here. If you don’t agree with this Policy, please don’t use Commit.

We may update this Policy from time to time. We’ll update the “Last Updated” date above, and for material changes we’ll make a reasonable effort to notify you in-app before they take effect. Continuing to use Commit after a change means you accept the update.

1. Information We Collect

1.1 Account Information

Name, email address, and any profile information you choose to add (photo, display name), collected when you create an account.

1.2 Goal & Evidence Data

This is the core of what Commit does, so we want to be specific about it. Depending on how you configure a goal, we may process:

• Photos and videos you submit as proof of completing a goal
• Barcode/QR scans used to verify a specific product or location
• GPS location data, collected only while a location-based goal is active, to confirm you were within a geofenced area
• Live screen recordings, together with anti-cheat signals used to confirm a recording is live rather than pre-recorded
• Text descriptions you write as evidence
• Apple Health data, if you choose Apple Health as a goal’s proof — see below

Apple Health (HealthKit). If — and only if — you set up a goal that uses Apple Health as its proof, and you grant permission when iOS asks, Commit reads the following from Apple Health for the period being graded: step count, walking and running distance, exercise minutes, active energy burned, flights climbed, workouts, sleep, and mindful minutes. That is the complete list.

• Read only. Commit never writes anything to Apple Health.
• Only for the period being graded — we read the window the goal covers, not your history.
• Sensor-sourced only. We exclude samples that were typed in by hand, because a number you can type is not proof. This is an anti-cheat measure, not a judgment about your data.
• What is kept: a short summary of the reading (for example “8,412 steps, 34 exercise minutes”) is stored with that submission as part of your goal history, the same as any other written evidence, and is sent to our AI provider to be graded against your goal’s criteria. We do not keep a copy of your Apple Health database or build a health profile from it.
• Never used for advertising, marketing, or data mining, never sold, and never shared with friends or other users — they see only the goal’s status.
• You can revoke Health access at any time in the iOS Settings › Privacy & Security › Health screen. Health-based goals then have nothing to verify against.

Retention: evidence is deleted within 90 days, or immediately if you turn on privacy mode. We don’t keep a permanent library of your photos, videos, screen recordings, or location history. By default, submitted media is deleted from our storage within 90 days of being submitted. Every goal also has an optional privacy mode. With it on, the media is deleted as soon as a verdict (approved, rejected, or clarify) has been reached, rather than waiting out the 90 days. Either way, we retain only the grading outcome (e.g., “approved,” “missed,” date, goal ID) as part of your goal history, never the underlying media.

1.3 AI Coach & Chat Data

Commit’s AI coach is powered by a third-party AI provider. When you chat with the coach, we process:

• Your messages and any photos, videos, barcodes, or location data you attach to a conversation
• Facts the coach remembers about you across sessions (e.g., your stated goals, preferences, past struggles) so it doesn’t ask you to repeat yourself
• Your evidence-submission history and cross-goal context, which the coach may reference when grading or chatting
• Appeals conversations, if you dispute a verdict

This data is sent to that provider to generate the coach’s responses. It is not used to train their models under our agreement with them (see Section 3).

If you tell the coach you may be about to hurt yourself, Commit shows you crisis-line information and the coach stops coaching. What we detect and what we do about it is written out in full in our AI Safety & Self-Harm Protocol.

1.4 Financial Data

We use Stripe, Inc. to process payments. We store a Stripe customer token and limited metadata (e.g., card brand, last four digits, charge history); we do not store your full card number. Stripe’s own privacy policy governs how they handle your payment details directly.

If you use “Send Penalty to a Friend”: a penalty you owe can be routed as a real payment to another Commit user you designate, instead of being charged to Commit. To receive these payments, the recipient must set up their own Stripe-hosted payout account (a “Stripe Connect” account), which involves Stripe collecting their identity and bank/payout details directly. Commit does not store the recipient’s bank account information itself, but we do process and retain a record that a transfer occurred (amount, date, sender, recipient) as part of both users’ goal and payment history. If you’re named as a penalty recipient by another user, you’ll need to complete this Stripe onboarding step before you can receive funds, and Stripe’s own privacy policy governs the identity/payout information you provide directly to them.

1.5 Device & Usage Data

Device type, operating system version, app version, crash logs, and general usage analytics (e.g., which features you open) to keep the app running and help us fix bugs.

1.6 Social & Friend Data

If you add friends within Commit, your friends can see the goals you’ve chosen to share and their status (on track / missed). We do not share your evidence media with friends; only status. If you enable “Send Penalty to a Friend” on a goal, the designated friend will additionally see that a penalty was directed to them and the associated amount, and, per Section 1.4 above, will need to complete a Stripe payout setup to receive it.

1.7 Support Chat Data

If you contact us through the in-app “talk to the founder” support chat, or if the AI coach files a bug report or wrongful-charge escalation on your behalf, that conversation and any attached context (e.g., the disputed charge, the relevant evidence) is stored so our founder can review and respond to it.

1.8 Push Notification Tokens

If you enable push notifications, we store a device token (via APNs/FCM) to deliver alerts about grading results, coach messages, and missed deadlines. You can disable this in your device settings at any time.

2. How We Use Your Information

We use the information above to:

• Create and manage your account
• Grade the evidence you submit against your goal’s criteria, using both automated (AI) and, for appeals or disputes, human review
• Charge, waive, or refund penalties via Stripe according to your goal’s rules, including “vault” streak mechanics and “send penalty to a friend” flows
• Power the AI coach’s conversations, memory, and proactive suggestions
• Detect and prevent fraud or evidence manipulation (e.g., anti-cheat checks on screen recordings, and device-integrity checks)
• Send you notifications about grading outcomes, coach messages, and deadlines
• Provide customer support, including bug-report and charge-dispute handling
• Maintain and improve the Service, including diagnosing crashes and usage patterns
• Comply with legal obligations and protect the rights and safety of our users and ourselves

We do not use your evidence media, location data, or chat content for advertising, and we do not sell your personal data.

3. Who We Share Information With

We share information only as needed to run the Service:

• Stripe, Inc.: payment processing, penalty charges, and payouts, including transfers to another user via “Send Penalty to a Friend”
• Firebase / Google Cloud: backend hosting, database, authentication, and push notification delivery
• Our AI provider: processes your coach conversations and evidence (when relevant to grading) to generate AI responses and verdicts, under a commercial agreement that prohibits using this data to train their models.
• Apple (APNs): delivery of push notifications to your device
• Friends you add in-app: see the goal status you choose to share, never underlying evidence; if you enable “Send Penalty to a Friend,” the designated friend also receives the penalty payment itself and can see that a payment was sent to them
• Law enforcement or legal process: if required by law, or to protect the rights, property, or safety of Commit, our users, or the public
• A successor entity: if Commit is acquired or transfers ownership, your information may transfer as part of that deal, subject to this Policy (or a policy you’re notified of)

We do not sell your personal data to third parties, and we do not share evidence media or chat content with advertisers.

4. Data Retention

• Evidence (photos, video, screen recordings, barcode scans, GPS data): deleted within 90 days of submission, or as soon as it’s graded if the goal has privacy mode on. We keep only the outcome, not the media.
• Apple Health readings: we keep only the short summary stored with the submission (see Section 1.2), for as long as that goal history is retained. We do not retain a copy of your Apple Health records.
• Account and goal history: retained while your account is active.
• Chat/coach conversations: retained to preserve the coach’s memory of you, unless you delete your account.
• Support chat threads: retained for as long as needed to resolve and document the issue.
• Financial records: retained as required by law and for dispute resolution (typically several years).

If you delete your account, we delete your personal data and remaining evidence from live systems within 30 days, and from backups within 90 days, except where we’re legally required to retain something longer (e.g., financial records).

5. Security

We use industry-standard safeguards to protect your data, including encryption in transit (TLS) and at rest, access controls limiting who at Commit can see raw evidence or chat data, and regular review of our security practices. No system is perfectly secure, but we take this seriously given the sensitivity of evidence media and payment information.

6. Your Choices & Rights

• Access, correction, deletion: contact us to review, correct, or delete your account data.
• Push notifications: disable anytime in device settings.
• Location permissions: only requested for goals that require GPS verification, and only while that goal is active; you can revoke location access in device settings, though this will prevent location-based goals from being verified.
• Camera/photo library/microphone permissions: requested only when you choose an evidence type that needs them.
• Apple Health: requested only if you create a goal that uses Health as its proof, and revocable at any time in iOS Settings › Privacy & Security › Health. Commit only ever reads; it never writes to Health.

Regional Rights

If you’re in the EEA, UK, California, or another jurisdiction with data-protection laws, you may have additional rights: access, correction, deletion, portability, restriction of processing, or objection. Contact us at the address below to exercise these.

California Residents

You may request disclosure of what categories of personal data we’ve collected and shared, and request deletion, subject to legal exceptions.

7. Children’s Privacy

Commit is not directed at children, and given that it involves real monetary charges, it is not intended for use by anyone under 18. We do not knowingly collect data from children under 13. If you believe a child has provided us data, contact us and we’ll delete it.

8. International Data Transfers

We’re based in the United States and process data here and wherever our service providers (Stripe, Google/Firebase, our AI provider, Apple) operate. Where required for transfers from the EEA/UK, we rely on Standard Contractual Clauses or equivalent safeguards.

9. Third-Party Links

The Service may link to third-party sites or services (e.g., Stripe’s hosted payment pages) not covered by this Policy. Review their privacy practices separately.

10. Contact Us

Questions about this Privacy Policy:

Commit Contracts
support@commitcontracts.com