Privacy Policy

This policy explains what [LEGAL ENTITY] collects when you take part in The Watchman Challenge, what we do with it, and what we deliberately cannot see.

1. The short version

• Your private journal entries are unreadable to us. They are encrypted, and our admin tools have no permission to open them — not a hidden setting, no permission to grant.
• Your weekly reflection is read by our clinical lead. That is its purpose, and the page says so before you write.
• We never sell your data. We never share it for marketing.
• You can get an export or a full deletion, on request, at any time.

2. What we collect

At intake

• Name, email address, and phone number if you choose SMS.
• Age, and your answers about relationship, work, and family circumstances.
• Your reasons for signing up, including free-text answers about what you are finding hard. These specific fields are encrypted at rest with a key held outside the database.
• The life areas you want to work on, and how you rank them.
• Your answers to five baseline questions, repeated on day 30.
• Names and phone numbers of people you choose to list as your own support contacts. We never contact them. They exist so the program can show them back to you when you ask for them.
• Your answers about what got you through hard seasons before, shown back to you when you press the support button.
• The plan you chose and the card that holds it. We store only the card’s brand and last four digits, and the dates your free month started and, if you cancel, when you did. The card number itself is never stored by us; when card payments go live it is held by the payment processor, which will be listed in section 5 before it receives anything.
• Your timezone, US state, and a mailing address for the medallion.
• Your delivery preference, morning window, and difficulty preference.
• A record that you accepted each required consent, with a timestamp and a hash of the exact document text you saw.

During the 30 days

• Which challenges you were served, and why the router chose them.
• Whether you accepted, pressed Too Easy, or did not respond.
• Your four evening check-in answers.
• Your private journal entries — encrypted, see section 3.
• Your weekly reflections.
• When you press the support button, and on which day. We record the press so the pilot can learn whether men who needed it were the men who later stopped. Pressing it notifies nobody.
• Message delivery records.

The safety screen

If your screening answers indicate you are in crisis, we do not create an account and we do not store your answers. We increment an anonymous daily counter that records only that the screen fired. If you choose to give an email address for a single follow-up message, that address is stored on its own, used for exactly that one message, and deleted the moment it is sent.

3. Your journal

The journal box on the evening check-in is private in the strongest sense we can build. Entries are encrypted before storage. The administrative database role used by our internal tools has no read permission on that table at all, so there is no screen to build, no toggle to flip, and no way for a founder, an administrator, or a support request to retrieve them.

Journal text is never used to generate a summary, never included in your weekly reflection, never sent to any AI model, never included in a report to the founders, and never written to a log.

Journals are deleted 90 days after your cycle ends, by a job that runs every five minutes. If a cycle is simply abandoned rather than finished, the clock starts anyway.

4. SMS and mobile information

If you choose SMS, we use your phone number solely to deliver the program messages you signed up for.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third party except the messaging provider strictly required to transmit the messages to you.

Reply STOP to stop, HELP for help. Message and data rates may apply. Message frequency is approximately two per day during your 30 days.

5. Who processes your data

We use a small number of providers, each for one job:

• Twilio — SMS delivery. Receives your phone number and message text.
• Resend — email delivery. Receives your email address and message text.
• DigitalOcean — database and background jobs, hosted in the United States.
• Vercel — application hosting.

We do not sell your personal information, and we do not share it with advertisers or data brokers.

6. AI

During this pilot, no AI model writes anything you receive. Every challenge, encouragement message and reflection was written by a person and approved by a licensed counselor. AI is used only as an internal drafting aid for our content team before human review, and your journal text is never sent to any model.

7. How long we keep things

• Journal entries: 90 days after your cycle ends.
• Safety follow-up email addresses: deleted on send.
• Everything else: for the duration of the pilot and its analysis, then purged, unless you ask for deletion sooner.

8. Your rights

You can ask us for a copy of your data, or ask us to erase it. We respond within 30 days. Deletion is real deletion, not a hidden flag — the exception is anonymous aggregate counts that contain nothing identifying you.

Depending on where you live you may have additional rights to correct data, restrict processing, or complain to a regulator.

To make a request: [PRIVACY EMAIL]

9. Security

• Encryption in transit, and at rest for the sensitive fields named above.
• Separate database roles with least privilege, so the administrative tools cannot reach what they must not reach.
• Two-factor authentication on all administrative accounts.
• An audit log of every administrative action.

No system is perfectly secure. We designed this one as though the data were sensitive, because it is.

10. Not a HIPAA covered entity

We are deliberately outside HIPAA scope because we do not deliver a covered clinical service. We hold your information to a comparable standard of care regardless.

11. Children

This service is for adults 18 and over. We do not knowingly collect information from anyone under 18.

12. Changes

If we change this policy materially we will tell you before it takes effect and update the version and date at the top.

13. Contact

[PRIVACY EMAIL]
[MAILING ADDRESS]