01Our principles
- Collect the minimum. We ask for what a commitment actually needs to work.
- Use data for accountability, not ads. Proof, Location, Health, Motion/Fitness, and Screen Time data are never used for advertising or cross-app tracking.
- Ask before sensitive access. You choose when to connect Health, Location, camera, photos, microphone, contacts, notifications, or Screen Time features.
- Keep control in your hands. You can access, correct, export, delete, or disconnect information where supported by law and app functionality.
02What we collect
You give us
- Account basics. Name, email address, display name, profile photo, age or date of birth where needed, country or region, login information, and account settings.
- Commitment details. Commitment text, schedule, deadline, recurrence, proof type, verifier, grace settings, stake type, stake amount, destination category, status, streaks, history, and outcomes.
- Proof you submit. Photos, videos, live time-lapses, files, screenshots, captions, notes, check-ins, metadata connected to the proof, and other evidence you choose to submit.
- Signatures and commitment agreements. Your signature or acceptance record, the commitment terms you agreed to, applicable rule versions, and signing timestamps. For money stakes, this includes the amount, currency, payment authorization, and the occurrence and outcome connected to a transaction.
- Squad and buddy activity. Invitations, buddy relationships, approvals, rejections, comments, reactions, messages, nudges, reports, blocks, and related accountability activity.
- Support and dispute content. Emails, support messages, appeal explanations, dispute evidence, chargeback information, and feedback you send us.
You connect, only with permission
- Location. Used for location-based proof, check-ins, fraud prevention, and approximate region settings. Precise location is used only when you choose a feature that requires it.
- Camera, photos and microphone. Used to capture or upload proof such as live photos, videos, time-lapses, screenshots, or voice/video evidence.
- Apple Health / Motion & Fitness. Used for activity commitments such as steps, distance, workouts, calories, mindful minutes, sleep, or other metrics you explicitly authorize.
- Screen Time / Family Controls. Used for app-block, app-limit, usage-based, or screen-time accountability commitments that you enable.
- Contacts, calendar, reminders, and integrations. Used only when you choose features such as buddy invites, reminders, or third-party verification services.
Collected automatically
- Device and app data. Device model, operating system, app version, language, time zone, crash logs, diagnostics, performance data, network information, and identifiers needed to operate the app.
- Usage and security data. Feature interactions, notification delivery events, settings changes, IP address, login events, fraud signals, abuse reports, suspicious activity logs, and payment risk signals.
- Push notification tokens. Used to send reminders, check-in prompts, verification updates, stake notices, dispute updates, and account notifications.
- Website analytics. When you visit thecommitapp.com we collect page views, referring links, approximate location by region, device and browser type, and which pages and links you interact with. We use Google Analytics and Cloudflare Web Analytics for this. Google Analytics sets a first-party cookie so repeat visits can be told apart; Cloudflare Web Analytics sets no cookie. We have enabled Google Signals, so if you are signed in to a Google account with Ads Personalization on, Google may also link your visits across your devices and report aggregated demographics and interests to us. If you arrive through an invite link we record the referring invite code, so we can tell which invitations bring people in. This is website data only, and is kept separate from the app: it never includes your commitments, proof, Health, Motion/Fitness, Screen Time, location, or payment data.
03App permissions
Commit requests permission only when a feature needs it. You can change permissions in your device settings or in Commit where available.
| Permission | Why Commit may request it |
|---|---|
| Camera | Capture live proof, photos, videos, and time-lapses. |
| Photos | Upload proof you choose from your library where uploads are allowed. |
| Microphone | Record audio in video proof where needed. |
| Location | Verify location-based commitments and check-ins. |
| Notifications | Send reminders, check-in alerts, buddy updates, stake notices, and dispute updates. |
| Apple Health / Motion & Fitness | Verify health, fitness, step, distance, workout, or mindful-minute commitments. |
| Screen Time / Family Controls | Enable app blocking, app limits, usage accountability, and screen-time stakes. |
| Contacts | Help you invite buddies or verifiers, only if you choose contact import. |
Revoking a permission may stop automatic verification for commitments using that permission. You may need to switch proof methods, pause future occurrences, or cancel future commitments.
04How we use it
We use information to create and manage accounts, create and verify commitments, send reminders, process stake authorizations, handle refunds and chargebacks, run squads and buddy verification, evaluate appeals, secure the Service, maintain audit logs, comply with legal obligations, and improve app reliability.
Server-side moderation
Uploaded content is processed on our servers to help enforce our Community Rules and protect people from harmful or abusive content. This can include profile content, commitment text, proof, messages, comments, and media, together with the context needed to assess a report or suspected violation. We use automated checks and, when needed, review by authorized personnel.
Content moderation runs on Commit-controlled servers. We do not send your content to third-party AI services for moderation. Our hosting and storage providers may handle this data on our behalf as described in section 07. Optional Commit AI verification is a separate feature, described in section 06.
Reports and moderation decisions may be kept where needed to investigate abuse, enforce these rules, or review a disputed decision. Access is limited to authorized personnel, and the safety-case retention limits in section 10 apply.
Your data powers accountability features, payments, safety, support, and app reliability. Data from inside the app is not used for ad targeting. Our website is measured separately with Google Analytics, described in section 09.
05Proof & sensitive data
Proof media can be personal. Location, Health, Motion/Fitness, Screen Time, proof photos, proof videos, signatures, payment records, and dispute evidence may be sensitive.
Commit uses sensitive data only for the feature you chose, such as verifying a commitment, showing proof to your verifier, enforcing a stake, handling a dispute, preventing fraud, or complying with law.
We do not use Apple Health, Motion/Fitness, Screen Time, Family Controls, Location, camera, photo, video, proof, or payment data for advertising, marketing profiles, data brokerage, or cross-app tracking.
06Commit AI
Commit AI is an optional verifier. When you choose it, it checks the proof you submit against the commitment you set, explains its decision, and reviews your appeal if you make one. If a Screen Time unlock request goes to Commit AI, it decides that request.
Commit AI uses AI models from OpenAI and Google (Gemini). We send them only what is needed for the check, and only after you agree in the app.
When Commit AI checks proof, we send the provider: the proof itself (photos, videos, screenshots, files, or a time-lapse, including before-and-after shots); the commitment's name, description, proof requirements, and due window; any comment you add to the proof; and details about the proof file: when it was captured and uploaded, whether it came from the camera or your photo library, your time zone, the file type, size, dimensions, and length, whether it appears edited, and its location when the proof carries one. If you appeal, we also send your appeal message and the earlier Commit AI result. If you appeal a missed Apple Health goal, we send your explanation and the missed goal with the reading it was compared to.
If a Screen Time unlock request goes to Commit AI, we send OpenAI your written reason, the minutes you asked for, the commitment's name, the apps and limits in the rule, your recent usage and extra time, and a summary of your recent requests, including your last few reasons.
We don't send your name, email address, username, or payment details.
AI review is used for accountability and product functionality, not advertising. We use the result only to decide the verification, appeal, or unlock request, and to keep a record of that decision.
OpenAI and Google process this data under their own terms and privacy policies. You may appeal eligible verification decisions through the process shown in the app.
We ask for your permission before Commit AI checks your proof for the first time. Commit AI is optional: if you say no, a friend you choose can verify instead. You can withdraw permission at any time in Settings → Privacy → Third-party AI → Revoke. If Commit AI still verifies any of your active commitments, you'll be asked to switch those to another verifier first. After you revoke, Commit asks again before Commit AI checks any more of your proof. Revoking doesn't recall data already sent.
Commit AI's decision and the details we sent are kept with your commitment's records for the periods in section 10. The providers keep data under their own terms.
08Payments
Payment processing is handled by Stripe or another processor disclosed before payment. When you enter card details, they are sent directly to the payment processor. Commit does not receive or store your full card number, CVC, or full expiration data.
We may store payment processor customer IDs, payment method IDs, card brand, last four digits, expiration month/year, billing country, transaction status, receipts, refunds, disputes, chargebacks, fraud signals, and stake/payment history.
If you purchase an iOS subscription or other digital feature through Apple, Apple processes the purchase and shares transaction information needed to unlock and support the feature.
For money stakes, we keep the payment record together with the relevant signed commitment terms, authorization, occurrence deadline and outcome, and any refund or dispute decision. This helps us explain a charge, reconcile payments, process refunds, and respond to payment disputes. These records may include your name, email address, original account identifier, and payment-processor references. Section 10 explains their retention after account deletion.
Deleting your account stops new money-stake authorizations. A valid payment hold placed before deletion may still become a charge under the commitment terms you already accepted, including the applicable review and dispute process. Deletion does not bring the charge forward or remove your refund or dispute rights. You can contact [email protected] about an existing payment after your account is deleted.
09Tracking, ads & marketing
Commit does not run third-party ads in the app. Commit does not sell your personal information. Commit does not use proof, Health, Motion/Fitness, Screen Time, Family Controls, precise Location, camera, photos, microphone, or payment data for advertising or cross-app tracking.
Our website is measured with Google Analytics, and we have Google Signals enabled. Being direct about what that means: website analytics data is joined to Google’s cross-device identity graph. For visitors signed in to a Google account with Ads Personalization turned on, Google can recognise the same person across their devices, report aggregated demographics and interests back to us, and use this website activity for advertising purposes such as remarketing and cross-device ad targeting, under Google’s own terms. We do this to understand which pages and referrals actually bring people to the beta.
This applies to the website only. Nothing from inside the Commit app is sent to Google Analytics: your commitments, proof, Health, Motion/Fitness, Screen Time, Family Controls, precise Location, camera, photos, microphone and payment data are never included, and are never used for advertising.
You can switch this off for yourself in either of two places. Google’s Ads Settings control Ads Personalization on your Google account, which is what Google Signals depends on. Google’s browser opt-out add-on stops Google Analytics on every site, including ours. Visitors in the EEA, the UK and Switzerland are defaulted to no analytics or advertising storage before any choice is made.
We may send product updates, security notices, transactional emails, reminders, and optional marketing messages where allowed. You can opt out of marketing emails, but we may still send security notices, receipts, stake notices, dispute updates, and policy updates.
10How long we keep information
We keep personal information only for as long as it is needed for the purposes described in this policy and applicable legal requirements. The periods below are maximums for the stated purposes, not a reason to keep information we no longer need.
| Information | Retention |
|---|---|
| Account profile, non-financial commitments and personal activity, health and location results, and Screen Time records held by Commit | While needed to provide your account's features. After account deletion, we delete these records within 30 days, except the limited financial or case-specific records described below. |
| Authored messages and comments, profile images, proof files, and chat attachments | While needed for the feature or until removed through an available control. After account deletion, we delete this content within 30 days, except material specifically required for a documented legal obligation or case. Conversation placeholders may remain without the original content or your profile information. |
| Payment and receipt records, necessary payer identity, and the related signed commitment and occurrence evidence | Only records needed for accounting, tax obligations, refunds, payment disputes, or legal claims; retained for no longer than seven years after the relevant transaction, unless a specific legal requirement or unresolved legal proceeding requires longer. This does not include every commitment or occurrence merely because the account once used money stakes. |
| Support, dispute, abuse, and safety case records | Only the information needed for the specific case, generally for no longer than three years after the case closes. Financial evidence follows the financial-record period above. After account deletion, unrelated support or message history is removed; information is retained only where necessary and lawful for the case or a specific legal obligation. |
| Website analytics | Google Analytics event and user-level data is retained for 14 months. Reports that no longer identify anyone are not subject to that period. |
When a specific legal obligation or proceeding requires longer retention, we restrict retention to the records needed for it. We delete those records when the requirement ends and no other applicable retention period remains. We do not keep an entire account indefinitely under a general fraud-prevention or audit exception.
Retained financial and case records may still identify you. We do not describe them as anonymous merely because your public profile has been removed. Payment processors may separately retain records under their own legal obligations and privacy policies.
Other users keep their own commitments and decisions. Their history may show that a deleted user approved or rejected proof or decided an appeal, without your name, avatar, or original comment. Group-level results may remain where they do not identify you. These limited records do not provide access to your deleted profile, proof, or commitment details.
11Your rights and account deletion
You can initiate account deletion in Commit → Settings → Account → Delete Account. You do not need to email support or explain why you are leaving. We may ask you to confirm your identity to protect your account.
Deleting your account removes your sign-in account, profile, friendships, invitations, one-to-one commitment-sharing groups, and membership in other groups. Groups with other members can continue. We remove your authored messages, comments, media, and personal commitment content as described in section 10. Other people's content and commitment outcomes are not deleted because you previously reviewed or participated in them. Old interactions may display “Deleted user” and a removed-content placeholder; they do not link to an active profile.
Limited financial and case records may remain for the purposes and periods in section 10. These records are restricted, and retaining them does not restore your account or prevent you from creating a new account with the same email address. A new account does not inherit the deleted account's history or payment authorization.
No new money-stake authorizations are created after deletion is accepted. Valid holds already placed may still be charged as explained in section 08. You can delete your account without waiting for those payments to settle.
When you delete an account connected to Sign in with Apple, we revoke that account's Apple sign-in authorization. Commit also clears its account-specific local data and sessions on the device used to complete deletion. Deletion from Commit does not erase information you hold separately in Apple Health or your photo library, or copies other people have independently saved outside Commit.
We complete deletion of information not subject to a retention exception within 30 days. If a legally permitted extension is necessary, we explain the reason and expected completion date, and provide confirmation when the request is complete. We do not require you to wait for a financial-record retention period to end before deleting your account.
For help, access to or correction of your information, or other privacy requests, contact [email protected]. Depending on where you live, you may also have rights to receive a portable copy, withdraw consent, object to or restrict processing, appeal a decision, or complain to the relevant privacy authority. We respond within the time required by applicable law and explain any lawful exception that prevents us from fulfilling part of a request.
You can change device permissions in iOS Settings, manage available sharing and notification controls in Commit, and unsubscribe from optional marketing messages. You can withdraw Commit AI permission in Settings → Privacy → Third-party AI. Withdrawing a feature permission stops future access through that permission; it does not by itself delete previously stored information or your Commit account.
12Security, age & transfers
We use technical and organizational safeguards designed to protect information, including encryption in transit, encryption at rest where supported, access controls, logging, limited employee access, payment tokenization, and routine security review.
Commit is not directed to children under 13, and users must be at least 17 to create an account. Users must be at least 18 to create commitments with monetary stakes.
Commit is operated from the United States and may use service providers in the United States, Canada, the European Economic Area, the United Kingdom, and other countries. Where required, we use appropriate safeguards for international transfers.
Regional privacy rights
California and other U.S. state residents may have rights to know, access, correct, delete, port, and opt out of certain disclosures. EEA, UK, and Switzerland residents may have GDPR-style rights of access, correction, deletion, restriction, objection, portability, and complaint to a supervisory authority. Canada and other regions may provide access, correction, consent withdrawal, or challenge rights, subject to legal limits.
13Changes & contact
We may update this Privacy Policy from time to time. Material changes will be posted in the app or on the website, and the Last Updated date will change.
Privacy questions and requests: [email protected]
General support: [email protected]
Cognitive Health Research LLC