Last updated 31 August 2026
Draft pending legal review. This document describes how the product actually behaves today, written by the team that built it. It has not been reviewed by a lawyer and must be before Brutal Mode, deposits or any money movement goes live.
Scoring an idea is anonymous. Running a sprint costs us your email address and whatever you write in your check-ins. Your check-ins are private by default and stay private unless you chose Accountable or Public before your sprint started. We do not sell data and we do not run ads.
L1, scoring an idea. The text of the idea, the five scores, your answers to the three follow-up questions if you give them, and a random session identifier stored in your browser. No account, no email address, no name. We keep a one-way hash of your IP address for a short window purely to enforce the three-scores-per-hour limit; the address itself is never written down.
L2, running a sprint. Your email address, your commitment text, your check-in schedule and timezone, every check-in you write, every coach reply, and your closing reflection. If you arrived from a scored idea, we link that score to your account so we can tell which ideas turn into finished ones.
L3, Brutal Mode. Not built yet. When it is, it will add payment details held by Stripe (we never see card numbers) and share a summary of your sprint with the human witness who verifies it. This policy will be updated before that ships, and existing users will be told.
Your check-in responses are sent to OpenAI to generate the coach reply, the daily question and your closing summary. Only the last seven days of check-ins plus your commitment go with each request, not your whole history. Very long responses are truncated before they are sent; the full text stays with us.
We use the OpenAI API under terms where submitted content is not used to train their models. If the model is unavailable, you get a pre-written reply from us instead and your sprint carries on.
Everything you write passes through an automated moderation check before it is shown anywhere. If it flags a risk of self-harm, the coach reply is replaced by a human-written message with crisis resources, your sprint is paused rather than cancelled, and a member of our team is alerted so a person can look at it. We would rather over-respond here.
You choose this before the sprint starts and it cannot change mid-sprint, in either direction. That is deliberate: it means nothing you wrote privately can be made public later.
We send check-in questions on the schedule you set, in your timezone, never between 10pm and 7am. We send at most one product update a month, and you can turn those off without touching your check-ins. Every email has a one-click unsubscribe. Unsubscribing from check-ins pauses your sprint rather than ending it, and we tell you that before you confirm.
If you reply to a check-in email, the body of that reply is stored as your check-in. Quoted history below your reply is stripped before it is saved.
We set one cookie to keep you signed in, and one to remember whether you accepted measurement. Neither is used for advertising. The anonymous session identifier for scoring lives in your browser storage, not in a cookie, and never leaves your device except attached to the score it created.
Optional analytics are off until you accept them, and declining is a single click with no follow-up prompt. If you accept, we record which pages were visited and which steps of the funnel completed. Neither the analytics provider nor anyone else receives what you wrote in a check-in.
Separately, and whether or not you accept those, we keep a plain count of how many times each page was opened: the date, the page, and the name of the site the link came from. Nothing identifying is attached to it — not your session identifier, not a cookie, not your IP address — so it can tell us that forty people read the front page and cannot tell us that you were one of them.
Sprint data is kept for two years and then anonymised: the writing is detached from you and retained only as aggregate evidence about why people abandon ideas. Magic-link tokens expire after an hour and are deleted once used.
You can export everything we hold about you, or delete your account outright, from your dashboard at any time. Deletion removes your account, sprints, check-ins and coach replies. It is immediate and cannot be undone. This covers the access, portability and erasure rights under GDPR and CCPA; you do not have to cite either to use them.
Write to ideacommitter@gmail.com. If you would rather read what you agreed to, the Terms are next door.