01Our principles
- Collect the minimum. We ask for what a commitment actually needs to work.
- Use data for accountability, not ads. Proof, Location, Health, Motion/Fitness, and Screen Time data are never used for advertising or cross-app tracking.
- Ask before sensitive access. You choose when to connect Health, Location, camera, photos, microphone, contacts, notifications, or Screen Time features.
- Keep control in your hands. You can access, correct, export, delete, or disconnect information where supported by law and app functionality.
02What we collect
You give us
- Account basics. Name, email address, display name, profile photo, age or date of birth where needed, country or region, login information, and account settings.
- Commitment details. Commitment text, schedule, deadline, recurrence, proof type, verifier, grace settings, stake type, stake amount, destination category, status, streaks, history, and outcomes.
- Proof you submit. Photos, videos, live time-lapses, files, screenshots, captions, notes, check-ins, metadata connected to the proof, and other evidence you choose to submit.
- Signature and contract records. Drawn or typed signatures, acceptance events, commitment summaries, timestamps, IP address, device information, user ID, Terms version, Commitment Agreement version, and a copy or hash of what was shown at signing.
- Squad and buddy activity. Invitations, buddy relationships, approvals, rejections, comments, reactions, messages, nudges, reports, blocks, and related accountability activity.
- Support and dispute content. Emails, support messages, appeal explanations, dispute evidence, chargeback information, and feedback you send us.
You connect, only with permission
- Location. Used for location-based proof, check-ins, fraud prevention, and approximate region settings. Precise location is used only when you choose a feature that requires it.
- Camera, photos and microphone. Used to capture or upload proof such as live photos, videos, time-lapses, screenshots, or voice/video evidence.
- Apple Health / Motion & Fitness. Used for activity commitments such as steps, distance, workouts, calories, mindful minutes, sleep, or other metrics you explicitly authorize.
- Screen Time / Family Controls. Used for app-block, app-limit, usage-based, or screen-time accountability commitments that you enable.
- Contacts, calendar, reminders, and integrations. Used only when you choose features such as buddy invites, reminders, or third-party verification services.
Collected automatically
- Device and app data. Device model, operating system, app version, language, time zone, crash logs, diagnostics, performance data, network information, and identifiers needed to operate the app.
- Usage and security data. Feature interactions, notification delivery events, settings changes, IP address, login events, fraud signals, abuse reports, suspicious activity logs, and payment risk signals.
- Push notification tokens. Used to send reminders, check-in prompts, verification updates, stake notices, dispute updates, and account notifications.
03App permissions
Commit requests permission only when a feature needs it. You can change permissions in your device settings or in Commit where available.
| Permission | Why Commit may request it |
|---|---|
| Camera | Capture live proof, photos, videos, and time-lapses. |
| Photos | Upload proof you choose from your library where uploads are allowed. |
| Microphone | Record audio in video proof where needed. |
| Location | Verify location-based commitments and check-ins. |
| Notifications | Send reminders, check-in alerts, buddy updates, stake notices, and dispute updates. |
| Apple Health / Motion & Fitness | Verify health, fitness, step, distance, workout, or mindful-minute commitments. |
| Screen Time / Family Controls | Enable app blocking, app limits, usage accountability, and screen-time stakes. |
| Contacts | Help you invite buddies or verifiers, only if you choose contact import. |
Revoking a permission may stop automatic verification for commitments using that permission. You may need to switch proof methods, pause future occurrences, or cancel future commitments.
04How we use it
We use information to create and manage accounts, create and verify commitments, send reminders, process stake authorizations, handle refunds and chargebacks, run squads and buddy verification, evaluate appeals, secure the Service, maintain audit logs, comply with legal obligations, and improve app reliability.
Your data powers accountability features, payments, safety, support, and app reliability. It is not used for ad targeting.
05Proof & sensitive data
Proof media can be personal. Location, Health, Motion/Fitness, Screen Time, proof photos, proof videos, signatures, payment records, and dispute evidence may be sensitive.
Commit uses sensitive data only for the feature you chose, such as verifying a commitment, showing proof to your verifier, enforcing a stake, handling a dispute, preventing fraud, or complying with law.
We do not use Apple Health, Motion/Fitness, Screen Time, Family Controls, Location, camera, photo, video, proof, or payment data for advertising, marketing profiles, data brokerage, or cross-app tracking.
06Commit AI
Commit may use AI or automated systems to help verify proof, summarize context, flag suspicious submissions, or assist support and dispute review.
AI review may process the commitment text, submitted proof, timestamps, selected metadata, permitted location, device signals, and past commitment context needed to assess that specific commitment. AI review is used for accountability and product functionality, not advertising.
If a third-party AI provider processes proof, we require it to process data for Commit's purposes and apply confidentiality, security, and data-use restrictions. You may appeal eligible verification decisions through the process shown in the app.
08Payments
Payment processing is handled by Stripe or another processor disclosed before payment. When you enter card details, they are sent directly to the payment processor. Commit does not receive or store your full card number, CVC, or full expiration data.
We may store payment processor customer IDs, payment method IDs, card brand, last four digits, expiration month/year, billing country, transaction status, receipts, refunds, disputes, chargebacks, fraud signals, and stake/payment history.
If you purchase an iOS subscription or other digital feature through Apple, Apple processes the purchase and shares transaction information needed to unlock and support the feature.
09Tracking, ads & marketing
Commit does not run third-party ads in the app. Commit does not sell your personal information. Commit does not use proof, Health, Motion/Fitness, Screen Time, Family Controls, precise Location, camera, photos, microphone, or payment data for advertising or cross-app tracking.
We may send product updates, security notices, transactional emails, reminders, and optional marketing messages where allowed. You can opt out of marketing emails, but we may still send security notices, receipts, stake notices, dispute updates, and policy updates.
10How long we keep it
We keep information only as long as needed for the purposes described in this Policy, unless a longer period is required or permitted by law.
| Data type | Typical retention |
|---|---|
| Account data | For the life of the account, then deleted or de-identified within 30 days after account deletion unless retention is required. |
| Proof media | While your account is active or until you delete the proof item, unless needed for disputes, fraud, safety, legal, or audit reasons. |
| Commitment history | While your account is active. Signed commitment and stake records may be retained longer for legal, tax, accounting, dispute, and audit reasons. |
| Signature and contract audit logs | Up to 7 years or longer if required for legal, tax, accounting, dispute, or fraud reasons. |
| Payment and receipt records | Up to 7 years or as required by tax, accounting, payment, processor, chargeback, and legal obligations. |
| Support, dispute, abuse, and safety records | Usually up to 3 years, or longer if needed for legal, safety, fraud, or dispute reasons. |
11Your rights & controls
- Access, export, correct, or delete information where available.
- Delete individual proof items where available.
- Disconnect Health, Location, Screen Time, contacts, or third-party integrations.
- Leave squads, remove buddies, block or report users, and turn off non-essential notifications.
- Opt out of marketing emails and delete your account.
You can initiate account deletion in the app through Settings → Account → Delete Account or the equivalent deletion path shown in the app. Deleting your account removes or de-identifies associated personal data, except information we are legally required or permitted to keep, such as signed agreements, audit logs, payment records, tax records, dispute records, fraud-prevention records, and legal holds.
Depending on where you live, you may have rights to access, correct, delete, export, object to, restrict, or appeal certain uses of your personal information. Contact [email protected]. We may verify your identity before responding.
12Security, age & transfers
We use technical and organizational safeguards designed to protect information, including encryption in transit, encryption at rest where supported, access controls, logging, limited employee access, payment tokenization, and routine security review.
Commit is not directed to children under 13, and users must be at least 17 to create an account. Users must be at least 18 to create commitments with monetary stakes.
Commit is operated from the United States and may use service providers in the United States, Canada, the European Economic Area, the United Kingdom, and other countries. Where required, we use appropriate safeguards for international transfers.
Regional privacy rights
California and other U.S. state residents may have rights to know, access, correct, delete, port, and opt out of certain disclosures. EEA, UK, and Switzerland residents may have GDPR-style rights of access, correction, deletion, restriction, objection, portability, and complaint to a supervisory authority. Canada and other regions may provide access, correction, consent withdrawal, or challenge rights, subject to legal limits.
13Changes & contact
We may update this Privacy Policy from time to time. Material changes will be posted in the app or on the website, and the Last Updated date will change.
Privacy questions and requests: [email protected]
General support: [email protected]
Cognitive Health Research LLC