Privacy Policy

Who is responsible

Prometheus Project, operated by Adam Ball, is the controller responsible for your personal information under the UK GDPR and the Data Protection Act 2018. For privacy requests, email support@prometheusproject.cc to reach Adam Ball.

This policy covers the website, waitlist and Prometheus coaching app. Prometheus is for adults aged 18 or over. Please do not sign up or submit personal information if you are under 18. Contact us if a child has supplied information so we can investigate and remove it.

What we collect and why

• Waitlist: your email address, signup source and timestamp. These are sent to the connected signup service to manage your invitation and preferences. Spam checks help protect the form. Joining requests invitations and product notes; unsubscribe at any time.
• Account: email, account identifier, authentication/session information and profile details you supply, such as name or phone number, to provide access and manage your account.
• Coaching: messages, transcripts, goals, habits, tasks, vision statements, reflections, check-ins, progress, plans and optional vision-board images. Cloud features can store conversation summaries and related context to help your coach remember what matters to you.
• Voice: microphone audio you choose to send, transcripts and speech-session details. Audio and relevant coaching context are processed by OpenAI for transcription or live voice coaching. Speech features may also use Azure Speech. Saved transcripts can remain part of your coaching history.
• Payments: account and transaction identifiers, product, subscription entitlement, renewal and usage information. Apple handles in-app billing, with RevenueCat managing entitlements. This website has no checkout. We do not collect card numbers in the waitlist form.
• Technical information: crash/error reports and device information where app reporting is enabled. The cloud app also records account-linked product events in Supabase; these are distinct from anonymous website analytics. Hosting providers process connection details, including IP addresses, to serve requests and protect the service. This website waitlist uses a hidden anti-spam field.

We use only the information needed for the feature you choose. Avoid entering other people’s private details or health information you do not need for coaching. We do not use coaching conversations for advertising or sell them.

Our legal reasons

• Contract (Article 6(1)(b)): account access, requested coaching, cloud storage, transcription, subscription management and responding to service requests.
• Consent (Article 6(1)(a)): invitation and product emails and optional website analytics. Consent to analytics is separate from signup. You can withdraw it without losing access to the website. PECR also applies to marketing messages and browser storage.
• Legitimate interests (Article 6(1)(f)): proportionate security, fraud prevention, anti-spam checks, fault diagnosis (including Sentry) and service reliability. We balance these needs against your privacy, minimise information and consider objections. This basis does not replace consent needed under PECR or Article 9.
• Legal obligation (Article 6(1)(c)): records required for tax, accounting or responding to a binding legal request.

Health, wellbeing and safety

Coaching conversations and reflections can contain health or mental-health information. This is special category data. Processing it for coaching requires your separate, explicit consent under Article 9(2)(a), alongside the relevant Article 6 basis. Agreeing to Terms, joining the waitlist or accepting analytics does not give that consent.

Please do not submit health or mental-health details unless the app has specifically obtained that consent. Joining the waitlist or accepting general terms does not supply it.

You may withdraw consent and request an export or deletion. To contact us, email support@prometheusproject.cc to reach Adam Ball. Withdrawal does not undo lawful earlier processing; features that need this information would stop. Share only what is necessary. We do not use this information for advertising.

The coaching system includes crisis-risk detection and safety signposting. It can miss risk or misunderstand a message. It is not a monitored crisis service and cannot guarantee intervention or contact emergency services for you.

Coaching, not therapy or medical advice. If you are in immediate danger, call 999. For support in the UK, call Samaritans on 116 123, text SHOUT to 85258, or call NHS 111 for urgent health advice. Do not wait for a response from Prometheus.

Who helps run Prometheus

These services support Prometheus. The information each receives depends on the features you use. Coaching uses cloud processing; it does not stay only on your iPhone.

• Supabase (EU): account authentication, database and cloud storage for account details, coaching history and app activity.
• OpenAI: relevant coaching context, messages, audio and transcripts for AI responses, live voice and transcription, through the Prometheus relay.
• Azure Speech: text and audio for speech features where used.
• RevenueCat: purchase identifiers and subscription status to manage membership access.
• Apple: App Store purchases, billing and refunds. Apple handles payment information under its own terms and privacy policy.
• Sentry: crash reports, device information and diagnostics where error reporting is enabled.
• PostHog: optional website analytics after consent, where configured.
• Google Analytics: optional website pageviews after the same analytics consent, where configured.
• Resend: email addresses, waitlist source and signup preferences for invitations and product notes, plus recipient details and message content for transactional emails.
• Fly.io: hosting for the app’s relay, processing requests and technical logs needed to deliver coaching.
• Vercel: website hosting, including connection details and technical logs needed to serve pages and requests.
• Cloudflare Turnstile: browser and connection information for spam and abuse checks where enabled, under Cloudflare’s Turnstile Privacy Addendum.

Service providers may process information outside the UK. We do not promise that all processing stays in the EU or that providers immediately delete all audio. See the sections on retention and international transfers in the privacy policy.

Optional analytics and browser storage

Before you choose Accept analytics, we do not start optional website analytics or create an analytics visit identifier. Reject analytics is equally available. The first-party notice and its configuration load so you can choose; these do not contact PostHog or Google Analytics.

If enabled and accepted, analytics record visits to public pages, selected button clicks and whether a waitlist submission succeeded, with a random identifier for the browser tab. We exclude email addresses, form contents, account identity and private information in page addresses; automatic interaction capture and session replay are not used. The receiving service still handles network requests, so this is not a promise that no personal data can ever be processed.

Change or withdraw your choice using the Analytics control on this website. Browser Do Not Track and Global Privacy Control signals keep analytics off. Your browser settings also let you remove stored website data.

For the exact cookies and browser storage this website uses, including Google Analytics cookies where configured and Cloudflare Turnstile on the waitlist form, see our Cookies & Analytics page.

How long information stays

We retain information only as long as needed for the purpose described or a legal obligation. Retention varies by record and provider, including backup copies. This policy does not promise automatic deletion after a fixed number of days. Contact us for the period that applies to your information.

• Waitlist details support invitations and product notes until you unsubscribe; a minimal suppression record may be needed to honour an opt-out.
• Account and coaching records support your account and requested features. Ask for deletion or export by emailing support@prometheusproject.cc.
• Saved transcripts can remain in coaching history. Temporary relay files are cleaned up, but this is not a promise that every provider immediately deletes all audio.
• Billing records may need to be kept for accounting and legal requirements. Apple and other providers have their own applicable obligations.
• Your website analytics choice is stored in your browser until you change it or clear site data; the optional visit identifier lasts for the tab’s session or until rejection. Contact us for the applicable analytics retention period.

If a legal claim requires longer retention, restrict the information to that purpose and remove it when no longer necessary. Ask us for the applicable period for your information.

Security and international transfers

Account authentication and access controls help protect your information. No online service can guarantee complete security. Keep your sign-in details private and contact us if you suspect unauthorised access.

Providers may process information outside the UK, including through overseas support. For restricted transfers, we must use a UK adequacy decision or appropriate safeguards such as the UK International Data Transfer Agreement (UK IDTA), or EU Standard Contractual Clauses (SCCs) with the UK Addendum, together with the required transfer assessment and extra safeguards where needed.

For information about the safeguards that apply to your data and how to request a copy, email support@prometheusproject.cc to reach Adam Ball.

Export, delete or exercise your rights

Your rights include access, rectification (correcting information), erasure (deletion), portability (a reusable export), restriction of processing and objection, including to legitimate-interest processing. To exercise them, email support@prometheusproject.cc to reach Adam Ball. You may withdraw consent at any time. You can unsubscribe from emails through their unsubscribe link and withdraw analytics through the Analytics control on this website.

The app includes account deletion in Settings. Deleting an account does not cancel an App Store subscription: cancel that separately through App Store subscription settings. For an export of account and coaching information, contact us with the subject “Data export”; for erasure use “Delete my data”. Do not email passwords, payment details or coaching history. We will arrange a secure export after any necessary identity check. We may need proportionate identity checks before acting. We normally respond within one month; if a lawful extension is needed, we will explain why within that month. Some rights have legal exceptions, such as necessary accounting records.

You can complain to the Information Commissioner’s Office (ICO). You do not have to contact us first. Coaching uses AI to generate suggestions; you remain responsible for deciding whether to act on them. Contact us if you have concerns about an AI suggestion.

Version and changes

We will explain material changes on this page and, where appropriate, in the app or by email. A new purpose requiring consent needs a new choice; continued use is not consent.

Also read our Terms.