Your information

Privacy policy

Last updated 15 October 2026

Commit Collective Ltd (“Commit”, “we”, “us”) makes the Commit app and runs commitproductivity.com. We are responsible (the “controller”) for the personal information described here. Questions or requests: hello@commitproductivity.com.

Who can use Commit

Commit is for people aged 16 and over, including people who join a Group Commit as a guest.

What stays on your iPhone

Your modes and the apps and websites you choose, schedules, Wake alarms, Commit history, Moments (photos and notes) and settings are stored on your iPhone. We don’t receive them. Your app and website choices are handled by Apple’s Screen Time, and the Screen Time usage shown in Insights is produced by Apple on your iPhone; neither reaches us.

If you let Commit use your calendar, events are read on your iPhone. A Commit made from an event keeps that event’s title and identifier on your iPhone. Moment photos are saved without location data.

If you’re signed in to iCloud, your emergency-release balance and purchase records are also saved in your iCloud account, so they carry over to a reinstall or a new iPhone. Apple stores these; we can’t see them. In-app purchases are processed by Apple; we never receive your payment details. Information on your iPhone may be included in your device backups.

What we collect and why

Card pairing

When you pair or remove a Commit card, the app sends us a code derived from your card and a random ID for this installation (we store only a scrambled version). We use these to check that the card is genuine and to limit how many phones can use it.

Friends (optional)

When you sign in with Apple, we receive an account identifier. If you let Apple share your name, we use your first name as your starting friend name, which you can change. We don’t ask Apple for your email address. We store your friend name, a generated public handle, your avatar or optional profile photo, your ranking choices (and your country, if you join country rankings), your friends, invitations, blocks and reports, and the start and end times of your Commits and scheduled Commits so we can credit your protected time. We never receive the apps you block or the names of your modes and schedules.

Friends see your name, photo and protected time. Country and global rankings are optional and show only your handle and initials.

Before friends can see a profile photo, we send it to OpenAI’s moderation service for an automated safety check. OpenAI doesn’t use it to train its models.

Group Commits (optional)

We store the group’s title, the host’s name and account, the planned times, a code that lets guests finish with the host’s card, and each participant’s chosen name and status (for example joined, started or finished, and how). Guests don’t need an account. Anyone with the invitation link can see the title and host’s name; people in the group see each other’s names and statuses.

Notifications

To send Friends and Group Commit notifications, we store your device’s notification token, time zone and notification preference. Apple delivers these notifications. Other reminders are created on your iPhone.

Reports

If you report a person, photo or group, we keep the report, the names and title involved and the reason, so we can review it.

Support

If you email us, we receive your email address, your message and anything you attach. Emails started in the app include your app version, iOS version, iPhone model, language and time zone. You can choose to attach a diagnostic report containing recent technical events, setting counts and the times of your schedules and alarms. It never includes names, your chosen apps, notes or photos.

Security

Our servers briefly process IP addresses and request details to protect the service and limit abuse. Apple’s App Attest helps us confirm that requests come from a genuine copy of the app.

Our website

Essential cookies remember your cookie choice for up to 180 days. With your permission, Google Analytics and Microsoft Clarity measure how the site is used (analytics), and the Meta and TikTok pixels measure our advertising (marketing). You can change your choice at any time in Cookie settings.

When you buy a card, Stripe processes your payment and we receive your name, email address, delivery address and order details so we can deliver your order. We share your name and delivery address with our delivery carrier. If you allowed marketing cookies, we tell Google, Meta and TikTok that a purchase happened, with your IP address and browser details, but never your name, email or address.

If you joined our earlier waitlist, Kit (ConvertKit LLC) stores your email address and sends our emails. Submitting the waitlist form added you to the list immediately. Every email has an unsubscribe link.

Our legal reasons

  • To provide the features you use (card pairing, Friends, Group Commits and notifications) and deliver your orders: to perform our contract with you.
  • To keep Commit secure, review reports, check photos and answer support requests: our legitimate interests in running a safe, reliable service.
  • Website analytics and marketing cookies, and marketing emails: your consent, which you can withdraw at any time.
  • Keeping order records: our legal obligations.

Who we share it with

We share information only with service providers that help us run Commit: Cloudflare (hosting, databases, photo storage and email delivery), Apple (Sign in with Apple, App Attest, notifications, iCloud and the App Store), OpenAI (photo checks), Microsoft (our email), Stripe (payments), our delivery carrier, Kit (waitlist emails), and, only with your consent, Google, Microsoft Clarity, Meta and TikTok (website measurement). We require them to protect your information to at least the standard described in this policy. We do not sell your information.

Some providers are in the United States. When information leaves the UK, we rely on UK adequacy regulations (including the UK–US data bridge) or the UK’s approved data-transfer contract terms.

How long we keep it

  • Friends account, rankings, friends and photo: until you delete your account in Settings › Delete account. A record needed to revoke your Apple sign-in is kept for up to 7 days afterwards.
  • Group Commits: deleted 30 days after the group is created.
  • Card pairing: while your card is paired, then 90 days after you remove it.
  • Reports: 2 years.
  • Notification delivery records: 14 days. IP addresses used to limit abuse: about 24 hours.
  • Support emails: 2 years after your last message.
  • Orders: 6 years, as required by tax law. Checkout references used for advertising measurement: 7 days.
  • Waitlist: until you unsubscribe.

Your rights

You can ask to access, correct or delete your information, restrict or object to how we use it, or receive a copy. You can withdraw consent at any time. Email hello@commitproductivity.com. Group Commit guests can make requests too: tell us the group and the name you used, but don’t send the invitation link. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

Changes

When we change this policy, we’ll update the date at the top.

Commit Collective Ltd, registered in England and Wales, company number 17415169. Registered office: 50 Clumber Drive, Radcliffe-on-Trent, Nottingham, NG12 1DB.