Privacy Policy

1. What we collect

• Account info: your email address (used for magic-link sign-in) and an optional display name.
• Challenge activity: the challenges you create or join, your stake amounts, and your daily check-ins.
• Screenshots and what we read from them:the fitness screenshots you upload as proof, plus the values our system extracts (such as distance, steps, duration, and the date shown) and a “perceptual hash” — a compact fingerprint used to detect duplicate or reused images.
• Payment info: handled by our payment processor, Stripe. We receive confirmation of payments, refunds, and identifiers — we never see or store your full card number.
• Technical and usage data: basic device/browser information, and product-analytics and error-diagnostic events used to keep the app working and improve it. So we can understand how individual users move through the app, these analytics events are linked to your account and include your email address as an identifier. We keep what we send to a minimum — never your screenshots — and our error monitor is configured not to attach personal data.

2. How we use your information

We use your information to:

• run challenges and show your progress and your team's;
• verify check-ins against the challenge goal and detect fraud (duplicate images, altered or AI-generated images, impossible dates);
• hold stakes in escrow and disburse refunds, charitable amounts, and winners' shares when a challenge resolves;
• send transactional email (sign-in links, reminders, results);
• keep the service secure, debug problems, and improve it.

3. Screenshots and AI verification

When you upload a screenshot, it is stored in a private storage bucket and sent to our AI provider (Anthropic) to read the workout details and check them against your goal. We use the result to decide whether a check-in counts. We keep the perceptual hash so we can spot a reused image even after the original is deleted (see retention below). Please upload only screenshots of your own genuine activity.

4. What other people can see

A challenge is a shared, social experience. Other members of a challenge you join can see your display name and whether you completed each day (a check or an X) — but notyour uploaded screenshots, your email, or your stake's payment details. Your own detailed numbers are visible only to you.

Because of how challenges work, money you forfeit by not completing may be distributed to the other members who do complete (as well as to the chosen charity and to us). The amounts moved are financial outcomes of the challenge; we don't share your personal account details with other members in the process. See the Terms of Service for exactly how money is split.

5. Who we share data with

We don't sell your personal information. We share it only with service providers that help us operate, each handling data on our behalf:

• Supabase — database, authentication, and screenshot storage.
• Stripe — payment processing, escrow, refunds, and payouts.
• Anthropic — AI analysis of uploaded screenshots.
• Resend — sending transactional email.
• Pledge (Pledgeling Foundation) — routing charitable donations to the chosen nonprofit. We send only the donation amount and the nonprofit — no member personal information.
• Product analytics & error monitoring — to understand usage and diagnose problems. Our analytics provider receives your email and a user identifier so events can be tied to your account; our error monitor is configured not to attach personal data.

We may also disclose information if required by law, or to protect the rights, safety, and security of our users and the service.

6. Data retention

We keep account and challenge records for as long as your account is active and as needed for legal, accounting, and fraud-prevention purposes. We delete uploaded screenshots about 90 days after a challenge resolves, keeping only the perceptual hash needed for fraud detection. You can ask us to delete your account; some records tied to completed payments may be retained where the law requires.

7. Your choices and rights

You can view and update your display name in the app, and you can ask us to access, correct, or delete your personal information by emailing hello@followthrough.life. Depending on where you live, you may have additional rights over your data; contact us and we'll honor applicable requests.

8. Security

Screenshots are stored in a private bucket, payments run through Stripe, and access to data is restricted. No system is perfectly secure, but we take reasonable measures to protect your information and will notify you of a breach where required.

9. Children

Followthrough is for adults (18+). We don't knowingly collect information from children. If you believe a child has used the service, contact us and we'll remove the account.

10. Changes and contact

We may update this policy; we'll change the date above and, for material changes, notify you. Questions or requests? Email hello@followthrough.life.