Privacy Policy

1. What this policy covers

This Privacy Policy explains what data the Impact app, also called The Coach (the “app”), collects from you on iPhone and Android, why we collect it, who we share it with, how long we keep it, and the choices you have about it. The app is made by Mohamed Azhan (“we”, “us”). By using the app you agree to the practices described here.

2. Data we collect

We collect only what we need to make the app work for you:

· Account details: when you sign in with Google or Apple, we receive your name, your email address and an account identifier from that provider. With Apple you can choose to hide your email.
· Profile you give us: display name, age, profession, organisation, specialisation, and any other field you fill in during onboarding or later edits.
· Assessment answers and results: your answers to the personality, emotional intelligence, cognitive, leadership, communication, career and mission, motivation and Wheel of Life assessments, plus the AI write-up for each.
· Habits, goals and reflections: titles, daily steps, target dates, check-offs and journal entries you write.
· Coach conversations: every message you send to or receive from the AI coach, typed or spoken, with timestamps, plus short notes the coach keeps so it remembers what matters to you.
· Voice: when you talk to the coach or dictate, your phone’s built-in speech recognition (Apple on iPhone, Google on Android) turns your voice into text. We receive the text, not the audio.
· Meeting recordings: if you record a meeting, the audio is sent to our servers and our AI provider to be transcribed. We keep the transcript and notes, not the audio. The recording stays on your phone for up to 7 days after it is transcribed and is then deleted.
· Approximate location (optional): if you allow it, your phone works out your city and country, and only that name (for example “Dubai, United Arab Emirates”) is sent with your coach messages so replies fit where you are. We never receive your exact coordinates.
· Practice Tracker and coaching programs: the program code you join with, the name you use in the program, the skills you choose to practise, and your practice entries, including ones you dictate.
· Reports about coach replies: if you report a reply, we keep the reason, any note you add, the reply and the message before it.
· App usage: when and for how long you use the app, the app version, your device maker and model, and your operating system version.
· Notifications: on iPhone, a push notification token so we can send coach reminders. On Android, reminders are scheduled on your phone.
· Technical data: request timestamps and error logs needed to run and secure the service.

We do NOT collect your contacts, photos, files, precise location, or anything beyond what is described above. We do NOT track you across other apps or websites, and the app has no ads.

3. Why we use your data

Your data is used only to:

· Run the app for you: show your profile and dashboard, your habits and goals, your reflections and your conversation history.
· Personalise the coach: your profile, recent assessments, active habits and goals, recent reflections, meeting notes and approximate location (if you allow it) are sent to our AI provider with each request so the coach can reply with relevant context.
· Transcribe and summarise meetings you record.
· Run coaching programs you join, so the program’s coaches can follow and support your progress.
· Find scripture references: when the coach is asked about Qur’an or hadith content, the request is sent to Islamic content services to fetch the exact text. Your personal data is NOT sent in those lookups.
· Keep the coach safe and improve it: review reports about replies and look at how the app is used overall.
· Operate and secure the service: diagnose bugs, prevent abuse and improve reliability.

We do NOT sell your data. We do NOT use it for advertising. We do NOT train AI models on it without your explicit, separate consent.

4. Who we share data with

We use a small set of trusted service providers to run the app. They process data on our behalf:

· Supabase: hosts our database, sign-in and server functions. Row-level security means your signed-in session can only read and write your own rows.
· OpenRouter and the AI companies it routes to (Anthropic, Google and OpenAI): receive the coach, assessment or practice prompt with the context it needs, meeting audio to transcribe, and text for the coach’s spoken voice. Replies come back to the app and are stored in your account.
· Google: handles Google sign-in and, on Android, speech recognition through your phone’s Google speech service.
· Apple: handles Sign in with Apple and, on iPhone, speech recognition and push notifications.
· Quran.ai and hadith-mcp.org: receive only the search words or verse reference needed to return scripture text, never your identity or personal data.

We also share data in these cases:

· Coaching programs you join: if you join a program with its code, the program’s coaches can see the name you use there, your practice entries and your assessment results, so they can support you.
· Our team: a small number of authorised team members can see account data in our admin dashboard to run the service, support coaching programs and review reports.
· Legal reasons: when required by law or a valid legal process, or when necessary to protect the rights, safety or property of the app, its users or the public.

We do not share your data with anyone else unless you ask us to.

5. How long we keep your data

We keep your data while your account is active. When you delete your account from inside the app, your account and all of your data are permanently erased from our systems immediately and cannot be recovered. If you cannot use the app, you can ask us to delete it by email; see our delete-account page for both options.

We may keep minimal records (for example, logs needed to detect abuse or comply with legal obligations) for as long as needed for those specific purposes.

6. Your rights

You have the right to:

· access the data we hold about you;
· correct it if it is wrong (you can edit most of it in-app, or email us);
· delete it (permanently, in-app under Profile → Account → Delete account, or by email; see our delete-account page);
· receive a copy of it in a portable format (by request);
· ask us to stop processing it for purposes other than running the service.

Depending on where you live, you may have additional rights under your local data protection law (for example GDPR or comparable regimes). You can exercise any of these rights by emailing us. We will respond within a reasonable time.

7. Security

All traffic between the app and our servers is encrypted in transit (HTTPS). Database access is gated by row-level security so each authenticated user can only read their own rows. Service-role credentials are never shipped in the iPhone or Android app. We do our best to protect your data, but no system on the internet can be guaranteed perfectly secure. If we ever become aware of a breach affecting your data, we will notify you in line with applicable law.

8. Contact

For privacy questions, data access or deletion requests, or anything else related to this policy, please email:

azhanmohamed43@gmail.com

Please include the email address associated with your account so we can verify the request.

9. Children

Impact is not directed at children under 16. If you believe a child has signed up and shared data with us, please email us so we can investigate and delete the account.

10. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. We will not reduce your rights under this policy without giving you reasonable notice. Continued use of the app after a change means you accept the updated policy.