Privacy Policy

Who we are

TRUPATH is a goal-tracking and accountability product operated by [Legal entity name], [Registered address] (“TRUPATH”, “we”, “us”). This policy covers the TRUPATH website, web application, and mobile apps.

TRUPATH supports personal goal setting and peer accountability. It is not a medical, psychological, financial, or legal service, and we do not hold ourselves out as a healthcare provider.

What we collect

Information you give us

• Account details — your email address, display name, and profile information you choose to add.
• Goal content — goals, the reasons you attach to them, milestones, dates, cadences, check-ins, voice notes and their transcriptions, and journal entries.
• Sharing choices — who you have invited to a goal and at what level, and what you have published.
• Messages to us — support requests, feedback, and reports about other members.
• Mentor information — if you apply to mentor, your profile, focus areas, and the terms you publish.

Information we collect automatically

• Technical data — IP address, device and browser type, and timestamps, from ordinary server logs.
• Usage data — which features are used and when errors occur, so we can fix faults and decide what to build.
• Session data — the cookies described in our Cookie Policy.

We do not buy personal data about you from third parties, and we do not run advertising or third-party advertising trackers.

How we use it

• To provide the product — storing your goals and showing them back to you and to the people you shared them with.
• To send the emails the product depends on: invitations, check-in reminders on the cadence you chose, and account notices.
• To generate coach suggestions and mentor strategy summaries, within the limits set out below.
• To keep the service safe — investigating reports, enforcing our Terms of Use, and preventing abuse.
• To fix faults, measure reliability, and decide what to build next.
• To meet legal obligations.

Where the law requires a legal basis, we rely on performance of our contract with you (providing the product), our legitimate interests (safety, reliability, product improvement), your consent where we ask for it, and compliance with legal obligations.

Who can see your content

This is the part most people are actually asking about, so it is set out in full.

• Private by default. A goal is visible only to you when you create it. Publishing it or inviting someone to it are separate, deliberate acts.
• Followers see the goal, its milestones, and the progress you publish, and can react and comment.
• Mentors see the working detail of the goals you shared with them — check-ins, blockers, milestone changes — for as long as the relationship is active.
• The public directory lists only goals you explicitly made public. Private goals are never listed, never indexed, and never surfaced in search.
• Journal entries and AI coach conversations are not publishable and are not used to generate mentor strategy summaries.

Revoking someone's access takes effect immediately for content held in TRUPATH. It cannot recall anything they already saw, copied, or was sent by email while they had access.

AI features

The AI coach works from the goal you are asking about, its milestones, its cadence, and the check-ins attached to it. To produce a response, that context is sent to a third-party model provider acting as our processor.

• Generated suggestions are labelled as generated and shown separately from what you reported.
• We do not use your content to train third-party foundation models, and our provider agreements prohibit it.
• Mentor strategy summaries are built only from goals and check-ins a member has shared with that mentor.

AI output can be wrong. It is a prompt to think, not advice, and it is not a substitute for a qualified professional.

Who we share it with

We do not sell your personal data, and we do not share it for cross-context behavioural advertising. We use the following processors to run the service:

We may also disclose information where we are legally required to, or to establish or defend legal claims. If TRUPATH is involved in a merger or acquisition, we will tell you before your information becomes subject to a different privacy policy.

How long we keep it

• Goal content is kept while your account is open, because the point of the record is that you can look back at it.
• Deleted items are recoverable in the app for a short window, then removed from active systems. Encrypted backups are rotated on a rolling schedule and deleted content clears from them within 90 days.
• Account deletion removes your goals, check-ins, journal entries, and profile from active systems within 30 days.
• Logs are retained for a limited period for security and reliability, then deleted or aggregated.
• Records we must keep — for example billing records — are retained for as long as the law requires.

Your rights

Depending on where you live, you may have the right to access, correct, delete, export, restrict, or object to our use of your personal data, and to withdraw consent where we relied on it.

• Export and delete are both available from account settings without contacting us.
• For anything else, email privacy@trupath.me. We respond within 30 days.
• We will not treat you differently for exercising these rights.

International transfers

Our processors operate in several countries, including the United States. Where personal data moves out of the UK or the European Economic Area, we rely on the UK International Data Transfer Addendum and the European Commission's Standard Contractual Clauses, together with the safeguards those require.

Children

TRUPATH is not intended for children under 16, and we do not knowingly collect their personal data. If you believe a child has created an account, tell us at privacy@trupath.me and we will remove it.

Changes to this policy

We will post any change here and update the date at the top. If a change materially affects how we use your information, we will tell you by email or in the product at least 30 days before it takes effect.