Privacy Policy
Version 1.0. Effective 1st September 2026.
Conscioushood is run by Conscioushood Ltd, registered in England and Wales under company number 17362523, with its registered office at 24 Grafton Road, Office 3, Worthing, West Sussex, England, BN11 1QP. We are the controller of the personal data described here.
Write to us at info@conscioushood.com about anything on this page.
The short version
You can practise without giving us your name or email at all. If you do create an account, the only thing we hold that identifies you is an email address and a display name of up to 40 characters. What you write in your practice is private to you. What you post to the community is shown to other people, and each community surface handles your name differently, which we set out below. We do not collect your location, your contacts, your photos, or an advertising identifier, and we do not sell or share your data with anyone for their own purposes. You can download everything you have written, or delete your account, from Settings in the app.
What we collect
Your account. If you create an account, we hold your email address. Your password is stored by our authentication provider in hashed form; we never see it. We do not ask for your phone number, date of birth, gender, address, or a photo.
Your display name. Up to 40 characters, and the only name we hold. You choose it during onboarding and can change it in Settings. Many people use a first name; you do not have to.
Your practice. Your chosen virtue and practice plan, including the times of day you asked to be reminded and which days are active. Your practice sessions, with the time each started and ended. The prompts you were shown, the options you selected, and any free text you wrote in response. Your daily Pulse check-ins, which record which virtues felt easy, which felt hard, and which you wished you had more of. Your Baseline assessment scores across the 20 virtues. Your Now interactions, which record which situation you chose and which response you were given.
What you post to the community. Your Wisdom Thread contributions, Witnessing Wall contributions, Practice Circle sentences and closing responses, and the virtue responses you leave on other people's posts.
How the app is used. We record events such as opening the app, completing a practice session, finishing a Pulse check-in, tapping into a virtue, signing up, and signing in. Each record holds an account identifier, the name of the action, the time it happened, and in some cases the virtue or situation involved. This is our own record, kept in our own database. There is no third-party analytics service in the app.
Technical logs. Our hosting provider keeps server logs for security and reliability. These can include IP addresses. We also apply rate limits to sign-in attempts by IP address to prevent abuse. We do not store IP addresses alongside your practice data.
What we do not collect
- No location data of any kind, precise or approximate.
- No advertising identifier, and no advertising or tracking software. There are no adverts in the app.
- No third-party analytics or crash-reporting service. Nothing about your use of the app is sent to Google, Meta, or any analytics company.
- No access to your contacts, photos, camera, microphone, calendar, or health data. The app never asks for these permissions, because it never uses them.
- No push notification tokens. Reminders are scheduled by your phone, on your phone, and never leave it.
- No payment card details. If we ever charge for anything, the App Store or Google Play handles the payment and we never see your card.
- No file uploads. There is nowhere in the app to upload a photo or a document.
Using the app without an account
The app creates an anonymous session for you on first launch, so you can practise straight away. In this state your practice, reflections, check-ins and Baseline stay on your device and are never sent to us.
Two things are still true while you are anonymous. Usage events, as described above, are sent to our server; they carry a random identifier for the device's profile and never contain anything you have written. And the community surfaces are unavailable, because they need an account.
If you later sign up, your existing session is upgraded in place and the practice held on your device syncs to your account. Nothing is lost and nothing is duplicated.
Why we use your data, and our legal basis for it
To provide the practice you asked for — your plan, your sessions, your reflections, your Baseline, your check-ins, and the community surfaces. Our legal basis is performance of our contract with you.
To keep the service working and safe — fixing faults, preventing abuse, moderating what people post. Our legal basis is our legitimate interests in running a service that works and a community that is safe.
To understand how the app is used, in aggregate, so we can improve it. Our legal basis is our legitimate interest in improving the product. We use our own first-party records for this, not a tracking service.
To send you reminders. Our legal basis is your consent, given when you allow notifications. You can withdraw it at any time in your phone's settings.
To meet legal obligations where they apply to us.
The community, and what other people see
The three community surfaces treat your name differently, on purpose.
Wisdom Threads are anonymous. Your contribution is shown to other people without your name attached. Our own moderators cannot see who wrote it either. Nothing in what we store links a published thread contribution back to you in the view other people see.
The Witnessing Wall carries your display name. One sentence from your practice, shown to everyone signed in, with the name you chose. Because of that, a moderator reads every contribution before it appears. Until it is published, only you can see it.
Practice Circles show your display name to your circle. The other members of your circle see your display name, your sentences, your closing response, and a grid showing which weeks you completed a session. The grid shows that you turned up, not what you practised. Nobody outside your circle sees any of it.
Virtue responses are never attributed. When you respond to someone's post with a virtue, they see the count, not who left it. This cannot be traced back to you by anyone using the app.
Two things apply everywhere. Posts cannot be edited once submitted, so read yours before you send it. And we may hold, hide, or remove anything posted to a community surface.
About what you write
Your reflections are free text. We do not filter, scan, or scrub them, and we do not use them to train any model. They can be as personal as you want, and we would rather you wrote honestly than carefully.
Two things follow from that. Anything you post to a community surface is read by other people, so do not write there what you would not want read. And because the Alphabet draws on philosophy, world religions and indigenous traditions, the virtue you choose to work on can suggest something about your beliefs. We do not ask you about your religion, health, or politics, and we have no field to record them, but you may write about them, and we want you to know where that text goes before you do.
Who can see your data inside our team
A small number of administrators can see profile records — display name, practice plan, Pulse check-ins, Baseline scores — and the aggregate usage figures. They can publish or hide what people post to the community surfaces. They cannot edit or delete anyone's records from the admin tools, and those tools do not show anyone's email address.
Our engineers hold direct access to the database and the authentication records, including email addresses, because someone has to be able to fix and restore the service. That access is limited to the people who need it.
Who we share it with
Supabase hosts our database, handles account sign-in, stores the app's audio and content, and sends the confirmation and password-reset emails that carry your address. They process this data on our instructions and for no purpose of their own. Our database is hosted in the European Union.
Apple and Google distribute the app. They do not receive your practice data from us. Your phone's operating system handles the reminder notifications locally. On Android, the app's local data is eligible for the automatic backup that Android makes to your own Google account; you control that in your device settings.
That is the whole list. We do not sell your personal data, we do not share it for anyone else's advertising, and we have no advertising partners.
International transfers. We are a UK company and our database is in the EU. Transfers between the UK and the EEA are covered by the UK's adequacy decision for the EEA, so no further safeguard is needed. If we ever move hosting outside those areas, we will update this page and put an approved transfer mechanism in place first.
How long we keep it
We keep your account, your practice records and your community posts until you delete your account, or until you ask us to remove them.
We have not yet set a fixed retention period for usage events. Today we keep them until we clear them. When we settle on a period, we will state it here rather than leave this vague.
Server logs held by our hosting provider expire on their schedule, not ours.
Deleting your account
Settings has "Delete account & data". It takes effect immediately, with no waiting period and no way back. It removes your account, your profile, your plan, your sessions, your reflections, your check-ins, your Baseline, and everything you have posted to the community.
One thing survives, and we would rather tell you than let you find out. Usage events are not linked to your account by a database key, so deleting your account does not currently remove them. They hold an account identifier, the name of an action, and a time. They contain nothing you have written. We intend to remove or anonymise them on deletion; until we do, email info@conscioushood.com and we will delete yours by hand.
Your rights
Under UK and EU data protection law you have the right to be told what we hold, to get a copy of it, to have mistakes corrected, to have it deleted, to restrict or object to how we use it, to receive it in a portable form, and not to be subject to decisions made purely by automated means. We make no automated decisions about you.
Two of these are built into the app. "Download my data" in Settings gives you one file containing your profile, plan, sessions, prompts and reflections, check-ins, Baseline, Now interactions, community posts and your own usage events. "Delete account & data" does what this page describes.
For anything else, write to info@conscioushood.com. We will reply within one month.
If you think we have handled your data badly, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk, or to the data protection authority in your own country.
If you are in California or elsewhere in the United States
In the past twelve months we have collected identifiers (an email address, a display name, an account identifier), internet and app activity (the usage events described above), and the content you write in the app. We collect it from you, and from your use of the app. We use it to provide and improve the service, as set out above.
We have not sold or shared personal information in the past twelve months, and we do not do so now. We do not use or disclose sensitive personal information for any purpose beyond providing the service you asked for, so there is nothing to limit.
You have the right to know what we collect and to receive a copy, to have it corrected, and to have it deleted. You can use "Download my data" and "Delete account & data" in the app, or write to info@conscioushood.com. An authorised agent may act for you if you give them written permission. We will not treat you differently for exercising any of these rights.
Children
Conscioushood is for adults. You must be 18 or over to create an account, and the app is not directed at children. We do not knowingly collect data from anyone under 18, and if we learn that we have, we will delete it.
An adult can create a profile for a child under their own account. That profile has no login of its own and cannot post to the Witnessing Wall or join a Practice Circle. The adult who created it is responsible for it, and it is included when that adult downloads or deletes their data.
Security
Everything the app sends travels over an encrypted connection, and the database is encrypted at rest. Each account's records are isolated at the database level, so one person's data cannot be read by another. New accounts confirm their email address before they can be used. Because the app has no upload feature, there is no path for a file to reach us at all.
If a breach affects you, we will tell you and the Information Commissioner's Office as the law requires.
Changes to this policy
When we change this page we will update the version number and the date at the top. If a change materially affects how we handle your data, we will tell you in the app before it takes effect.
Contact
Conscioushood Ltd, company number 17362523, with its registered office at 24 Grafton Road, Office 3, Worthing, West Sussex, England, BN11 1QP.