Privacy Policy

1. Who we are

proveit ("we", "us", "our") operates the proveit mobile application and website (the "Service"). This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and the choices you have. If you have questions, contact us through the contact form on our website.

2. Scope

This policy applies to the proveit app (iOS and Android), our marketing website (including waitlist and contact forms), and related emails and notifications. It does not cover third-party websites or services that we do not control, even if linked from the Service.

3. Data we collect

Account data: email address, name or display name, authentication identifiers from our auth provider (e.g. Apple, Google, or email sign-in), and your chosen language and accountability tone.

Commitment data: commitment type (e.g. wake-up or location), schedules, deadlines, frequency, and status (completed, failed, pending).

Proof evidence: photos and videos you submit for verification (including live selfies and physical-challenge recordings); device sensor signals used for verification (e.g. pose/rep detection on-device where applicable); GPS coordinates and related location data at the time of a location proof; timestamps of verification attempts.

Device and notifications: push notification tokens, device type/OS version as needed for delivery, and approximate timezone.

Usage and diagnostics: app events (e.g. signup, create commitment, verify, retain), crash logs, and performance metrics via our analytics tools.

Marketing site: waitlist email, optional UTM/campaign parameters, and contact-form contents (name, email, message).

We do not require you to grant continuous background location for core wake-up proofs. Location is collected when you use location commitments or when a proof explicitly requires it.

4. How we use data

We use personal data to: create and manage your account; schedule reminders and alarms; run verification flows and store proof evidence needed to evaluate pass/fail; calculate streaks, reliability scores, and companion vitality; send push notifications and transactional emails in your chosen tone; process subscriptions and entitlements; prevent abuse and improve reliability of the Service; measure product funnel performance; operate the pre-launch waitlist and respond to support requests; and comply with law.

We do not sell your personal data. We do not use proof photos or videos to train public generative AI models. Proof media is used to verify your commitments and for security/abuse review when necessary.

5. Legal bases (EEA/UK)

Where GDPR/UK GDPR applies, we process data on these bases: contract (to provide the Service you request); legitimate interests (product improvement, security, fraud prevention, waitlist operations - balanced against your rights); consent (where required, e.g. certain marketing cookies/pixels, optional notifications, or precise location where law requires consent); and legal obligation (when we must retain or disclose data).

6. Sharing and processors

We share data with service providers who process it on our instructions: authentication (e.g. Clerk); database hosting (e.g. Neon); file storage for proof media (e.g. AWS S3); email delivery (e.g. AWS SES); push delivery (Apple APNs / Google FCM via Expo or equivalent); payments/entitlements (RevenueCat and Apple/Google); analytics (e.g. PostHog); hosting (e.g. Vercel for the website).

On the marketing site, Meta Pixel and TikTok Pixel (and related Conversions APIs) may process event data such as PageView and Lead when configured, for ads measurement and retargeting. You can control ad cookies via your browser/OS settings and platform ad preferences.

We may disclose data if required by law, court order, or to protect rights, safety, and integrity of the Service or users. In a merger, acquisition, or asset sale, data may transfer under continuing confidentiality obligations.

7. International transfers

We and our processors may process data in the United States, European Economic Area, United Kingdom, and other countries. Where required, we use appropriate safeguards such as Standard Contractual Clauses or equivalent transfer mechanisms.

8. Retention

Account and commitment records are kept while your account is active and for a reasonable period afterward for disputes, streak history, and legal compliance. Proof media is retained as long as needed to support verification integrity, abuse prevention, and your history - and deleted or anonymized when no longer required, or upon a validated deletion request where applicable. Waitlist emails are kept until launch messaging completes or you unsubscribe/request deletion. Contact messages are kept as needed to resolve your request.

9. Security

We use industry-standard measures including encrypted transit (HTTPS), access controls, and private storage for proof evidence (e.g. presigned upload URLs). No method of transmission or storage is 100% secure. You are responsible for keeping account credentials confidential.

10. Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, or port your personal data; object to certain processing; and withdraw consent where processing is consent-based. To exercise rights, use the contact form on our website. You may also lodge a complaint with your local data protection authority.

You can typically manage notification permissions and location/camera permissions in your device settings. Disabling permissions may limit features that require proof.

11. Children

proveit is not directed at children under 16 (or the higher age required in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided data, contact us and we will take appropriate steps to delete it.

12. Changes

We may update this Privacy Policy from time to time. We will post the updated version with a new "Last updated" date and, where required, provide additional notice. Continued use of the Service after changes take effect constitutes acceptance of the updated policy where permitted by law.