Updated October 13, 2026
When you create an account: your email address, a password (stored only as a one-way cryptographic hash — we cannot read it), and your date of birth (used once to confirm you are 18 or older; the app is for adults only).
As you use the app: your onboarding answers, the reps you log and the XP/levels they produce, your daily briefs and reflections, messages you submit for review, and your conversations with the coach. This is your coaching record; storing it is what lets the coach know you.
We keep daily counts of coaching requests, success and error categories, model use and response timing to check reliability. This separate measurement store does not contain your question or answer text, email, profile, IP address or a stable user or device identifier. Infrastructure access logs are separate and may contain IP addresses.
App versions with an optional usage control collect usage measurements only after you turn it on for the current app session. Collection starts off again after each app launch. These measurements include the first measured app open, onboarding completion, foreground sessions and duration, return visits, first coach use, and any helpful or not-helpful vote you choose to give. These events contain no question text, answer text or personal identity. You can turn measurement off in Profile; this clears unsent events. Delivery already in progress may finish.
We retain daily aggregates for 90 days. A random identifier for a delivery batch prevents duplicate counting; the server keeps its hash for at most seven days. These counts do not identify individual people or prove coaching outcomes. Once combined into an aggregate, they cannot be tied back to an account or removed individually when that account is deleted.
When you use the brief, message review, coach chat, or reflection features, the relevant text (your message, your profile context, your recent activity) is sent to a third-party AI provider — currently Google (Gemini) — to generate the coaching response. These providers process the text to produce a reply under their own terms. We do not use your data to train AI models, and we do not permit providers to do so through our API configuration.
We send account emails — verification, password reset — through our email provider (Resend), plus the single Android-launch email described below if you asked for it. No marketing lists, no newsletters you didn't ask for.
If you join the Android waitlist on approachxp.com, we store your email address, whether you said you're on Android, and which link brought you to the site (for example, a link from X). We use it for one thing: a single email telling you when ApproachXP is on Google Play. We don't share it, sell it, or add it to any other list. Deleting an app account doesn't touch the waitlist, because the two aren't linked — to be removed, email coach@approachxp.com and we'll delete it.
We never sell or share your personal information. We never show ads or use ad trackers. We never post anywhere on your behalf. The people you talk about in coaching are never contacted, identified, or profiled by us — your conversations are between you and your coach.
Settings → Delete account, inside the app. This permanently erases your account, profile, rep log, XP, chats, reviews, and sessions from our server. There is no soft-delete or retention window — it's gone.
All traffic is encrypted in transit (HTTPS). Passwords are hashed with scrypt. Sessions expire and can be revoked. Our server enforces per-user rate limits to prevent abuse.
Questions or requests: coach@approachxp.com.