Privacy Policy

1. Introduction

ISPY2INSPIRE ("we", "us", "our"), available at app.ispy2inspire.com, is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data We Collect

• • Account data: name, email address, password (encrypted).
• • Profile data: display name, membership tier, primary focus, pillar selection.
• • Journal entries: text you submit to the iJournal and Athena AI responses.
• • Goals & achievements: goal data, progress, milestones, and achievements you log.
• • Usage data: pages visited, features used, session duration.
• • Payment data: processed by our payment provider; we do not store card numbers.

3. How We Use Your Data

• • To provide and personalise your ISPY2INSPIRE experience.
• • To generate AI mentor responses via Athena.
• • To track your progress, streaks, and achievements.
• • To process membership payments and manage your subscription.
• • To send you communications about your account and platform updates.
• • To improve our curriculum, features, and services.

4. Legal Basis for Processing

We process your data under the following UK GDPR lawful bases: (a) contract — to deliver the services you subscribed to; (b) consent — for optional communications and analytics; (c) legitimate interests — for platform security and improvement.

5. AI & Journal Data (Sacred & Private)

Your journal entries are sacred and private. They are processed by our AI mentor (Athena) solely to generate your personal responses and are encrypted at rest. Journal entries are visible only to you — they are never shared with, or referenced to, other members, and ISPY2INSPIRE staff cannot read individual member journals. We do not use individual journal entries to train AI models. Aggregated, fully anonymised data may be used for platform analytics only.

6. Data Sharing

We do not sell your data. We share data only with: (a) our AI provider for generating Athena responses; (b) our payment processor for subscription management; (c) cloud hosting providers; (d) legal authorities where required by law.

7. Data Retention

We retain your data for as long as your account is active. You may request deletion at any time. After account closure, data is permanently deleted within 90 days, except where legal obligations require longer retention.

8. Your Rights

Under UK GDPR, you have the right to: access your data, rectify inaccuracies, erase your data, restrict processing, data portability, object to processing, and withdraw consent. To exercise these rights, contact us through the platform.

9. Security

We employ industry-standard security measures including encryption, access controls, and regular security audits. No system is 100% secure, but we are committed to protecting your data.

10. International Transfers

Some data may be processed outside the UK. We ensure appropriate safeguards (e.g., Standard Contractual Clauses) are in place for all international transfers.

11. Contact

For privacy questions or requests, contact us through the ISPY2INSPIRE platform support channel.