Privacy Policy

Last updated: [PUBLISH DATE]

Fulfilled ("we," "us," "Fulfilled," operated by [YOUR LEGAL NAME]) takes your privacy seriously. This policy explains what we collect, what we do with it, who we share it with, and the rights you have.

By using Fulfilled you agree to this policy. If you don't agree, don't use the app.

1. What we collect

Account information. Your email address, the name you set during onboarding, and the manifestation name you choose for the public leaderboard. We collect these so we can authenticate you and address you correctly inside the app.

Content you create inside the app. Your goal as you wrote it, all wins you log, mission reflections, bridge declarations, coach chat messages, affirmation feedback ("I feel this" / "Resistance" taps), belief level over time, and the time of day you set for wake / midday / bedtime notifications.

Usage information. Anonymized event data: which features you open, which protocol steps you complete, when. Used in aggregate to improve the app.

Device information. Operating system version, app version, time zone. Used for delivering notifications at your local time and for crash debugging.

What we do NOT collect. We do not collect your location, your contacts, your advertising identifier, your photos beyond ones you explicitly choose to save, or any data not listed above.

2. How we use your information

We use your information to:

• Generate your personalized daily protocol content (the AI coach needs your goal text, recent wins, and your day in the curriculum to write content specific to you)
• Respond as your coach inside the chat
• Match you into a Manifestation Circle of 5-10 users with goals in the same category
• Rank you on the weekly leaderboard
• Send you the notifications you've configured
• Improve the app (anonymized analytics only)

We do not use your content to train AI models. Our AI provider (Anthropic) has a zero-retention policy on API calls — your data is not used to train Claude or any other model.

We do not sell your data. To anyone. Ever.

3. Who we share with (sub-processors)

Service	Purpose	What they see
Anthropic (anthropic.com)	AI coach + content generation	The text of your goal, recent wins, current message
Supabase (supabase.com)	Database, authentication, file storage	Everything in your account
OpenAI (openai.com)	Voice-to-text on the optional voice goal recording	Audio recording (only when you choose voice)
Sentry (sentry.io)	Crash + error reporting	Anonymized stack traces, no content
PostHog (posthog.com)	Anonymized product analytics	Event names, never content
Apple / RevenueCat	Subscription billing	Whether you're a paid subscriber, no personal content

Each is bound by their own privacy policy (linked at their website) and a signed data-processing agreement with us.

4. Your rights

You can, at any time:

• Delete your account. Go to Avatar → Goal Vault → Delete account. Permanently removes everything we hold about you, immediately.
• Request a copy of your data. Email [[email protected]] and we'll send a JSON export within 30 days.
• Correct your data. Edit your name, manifestation name, and daily times in Settings.
• Opt out of notifications. Inside iOS Settings → Notifications → Fulfilled.

If you are a resident of the EU, UK, or California, you have additional rights under GDPR / UK GDPR / CCPA, including the right to object, restrict processing, and lodge a complaint with your local data protection authority. Email us to exercise these.

5. Children

Fulfilled is for users 13 and older. We do not knowingly collect data from anyone under 13. If we learn we have, we delete it.

6. Data retention

We keep your content for as long as your account exists. Delete the account and the entire record is permanently removed from our database within 30 days (most cascade immediately; some logs purge on a rolling 30-day window).

7. Security

Your data lives in Supabase's encrypted PostgreSQL on AWS. Passwords are hashed with bcrypt. All client-server traffic uses TLS. Row-level security is enforced on every table — your data is unreadable by other users, regardless of the request shape.

8. International transfers

If you're outside the United States, your data is transferred to and processed in the United States and other countries where our sub-processors operate. We rely on Standard Contractual Clauses for EU/UK transfers.

9. Changes

We may update this policy. We'll notify you inside the app for material changes, and we'll update the "Last updated" date at the top.

10. Contact

Questions? [[email protected]]