Charioteer privacy policy
At a glance
- Quantica Labs Ltd is the controller of your data.
- Your data is stored with Supabase in London, UK. Health data is special category data. We use it only with your explicit consent.
- Apple Health is read only with your permission. Workout GPS routes and your location stay on your iPhone and are never uploaded.
- Thumos and meal estimates use xAI (Grok), and message notifications use Expo, only with your separate, explicit consent.
- We never share your information with anyone for marketing or research.
- Community sharing is off by default and opt-in, item by item.
- No ads, no analytics trackers, no selling of data.
- You can export and delete your data in the app.
1. Who we are
Charioteer ("Charioteer Sober Coach" on the App Store) is run by Quantica Labs Ltd, registered in England and Wales, company number 17124284, registered office 14a Mill Close, Borrowash, Derby, DE72 3GU. We are the controller under the UK GDPR and the Data Protection Act 2018. Contact us at hello@quanticalabs.co.uk. We have not appointed a Data Protection Officer.
Charioteer is for adults aged 18 and over.
2. What we collect
Account
Email address and password (handled by Supabase Auth; we never see your password), display name, age confirmation, consent choices (health data, AI coach, community), and app preferences.
Your sobriety journey
Sober start date and stage, typical weekly spend and units, your reasons, daily check-ins (mood, sleep, cravings, notes), resets, gratitude diary entries, vision board items, saved quotes and goals.
Photos
Progress, gratitude, vision board, profile and meal photos you add. Photo files are kept in private storage that only your account can open, unless you choose to share a photo (see section 5).
Health and fitness
With your permission in Apple's Health screen, Charioteer reads steps, sleep, resting heart rate, heart rate variability, cardio fitness (VO2 max), walking heart rate, heart rate recovery, workouts (type, duration, energy and average heart rate), weight, height, body fat, lean body mass and active energy. We store daily totals and summaries, not raw heart-rate traces. Charioteer also writes to Apple Health only the meals and water you choose to save. You can also log food, nutrition goals, body composition, training goals and planned sessions yourself.
Workout routes and location
A workout GPS route is read from Apple Health only when you open that workout, and it is shown on your iPhone only. Routes and your location are never uploaded to our servers or sent to the AI. If you use the community you can add a town or area, which you type yourself.
Thumos (AI coach)
Your messages to Thumos and its replies, so the conversation can continue. If you use voice, your speech is processed by xAI to produce a transcript and reply. [TO CONFIRM] whether voice audio or transcripts are stored by us.
Community (only if you turn it on)
Your community settings and the items you choose to share, connection and accountability-buddy requests, direct messages and read status, blocks and reports.
Push notifications
If you allow notifications, we store your device's push token (an Expo push token) and platform so we can alert you to new direct messages. The alert says "New message from [name]" only if you turn that on; otherwise it is generic. Message text is not included. Workout reminders are local notifications scheduled on your iPhone, only if you turn them on; they do not go through our servers.
Error logs
When a screen hits an error, the app records the screen name, a short technical error message (up to 300 characters), the app build and the time, linked to your account. It contains no message text or profile content. It is deleted when your account is deleted. [TO CONFIRM] any shorter retention period.
Technical logs
Supabase keeps standard server logs (such as IP address and request times) to run and secure the service. [TO CONFIRM] log retention for our Supabase plan.
We do not use advertising or analytics SDKs, and this website uses no cookies.
3. Health data (special category data)
Information about your drinking, sobriety, mood, sleep, cravings, body and fitness is special category data. We process it only with your explicit consent (UK GDPR Articles 6(1)(a) and 9(2)(a)), which you give in the app. You can withdraw consent at any time in the app; some features will stop working. Withdrawing does not affect earlier processing.
4. How we use it, and our lawful bases
| Purpose | Lawful basis |
|---|---|
| Run your account, sign-in and settings | Contract (Art. 6(1)(b)) |
| Tracking, check-ins, health trends, fitness snapshot and plans | Explicit consent (Art. 6(1)(a), 9(2)(a)) |
| Thumos replies, health plans, gratitude reflections and meal estimates via xAI | Explicit consent, given with a separate tick (Art. 6(1)(a), 9(2)(a)) |
| Message notifications via Expo | Consent, given with the same separate tick (Art. 6(1)(a)) |
| Community profile, connections and messages | Explicit consent (opt-in); contract for delivering messages |
| Safety: blocks, reports and moderation | Legitimate interests (Art. 6(1)(f)) [TO CONFIRM] Article 9 condition |
| Fixing errors and keeping the service secure | Legitimate interests (Art. 6(1)(f)) |
| Legal duties and claims | Legal obligation (Art. 6(1)(c)); Art. 9(2)(f) |
We do not make automated decisions that have legal or similarly significant effects on you.
5. Who can see or receive your data
Other community members
Community is off until you turn it on and confirm you are 18 or over. When on, other signed-in adults can see your name and interests. Everything else is off until you switch it on, item by item, with Share on profile: for example town, stage, days sober, reasons, money and unit totals, mood streak, health headlines, a progress photo, a gratitude line or photo, a vision caption, or a pinned quote. The first time you share sensitive items, the app asks you to confirm. People you have blocked, or who have blocked you, see nothing.
Gratitude photos are shared only when you choose to share a specific photo, and only signed-in community members can open it. Signed-out visitors cannot.
Service providers (processors)
- Supabase: database, sign-in, file storage and server functions. Your data is stored on Amazon Web Services servers in London, UK (region eu-west-2).
- xAI (Grok), USA: only if you turn the coach on. Our server functions send your Thumos messages with relevant context (for example days sober, reasons, recent check-ins and a short health summary, not raw samples) to generate replies, health plans and gratitude reflections. Meal photos you ask to be estimated are sent to xAI. Voice conversations connect to xAI using a short-lived token issued by our server; our API keys are never in the app.
- Expo (push service), USA: only with your consent, delivers direct-message alerts to Apple's push service. Expo receives your push token and the alert text, not message content. Expo privacy policy.
- Apple: Apple Health on your device, push delivery, and TestFlight / App Store distribution under Apple's own privacy policy.
We never sell your data, and we never share any user's information with any party for marketing or research. We may disclose data where the law requires it or to protect someone's life.
6. International transfers
Your account data, photos and health records are stored in the UK (London). Data leaves the UK only when, with your consent, it is sent to xAI or Expo, both in the United States. The safeguards are:
- xAI: xAI's Data Processing Addendum applies the EU Standard Contractual Clauses as modified by the UK Addendum to UK personal data. xAI's enterprise terms (section 3) say xAI will not use API content to train its models, and will delete it no later than 30 days after the interaction, unless a longer period is needed by law or for safety, security or abuse investigations.
- Expo: Expo's privacy policy says it is self-certified under the EU-U.S. Data Privacy Framework and the UK Extension (the UK-US data bridge).
7. How long we keep data
We keep your data while your account is open. When you delete your account, your account, private photos, gratitude diary, saved quotes and linked records are deleted from our live systems straight away. Backups may hold data for a short period. [TO CONFIRM] Supabase backup window, and how long reports and moderation records are kept.
8. Your rights
Under UK GDPR you have the right to access, correct, erase, restrict, port and object to processing of your data, and to withdraw consent at any time.
- Export: Profile tab > Download my data (JSON file; photos as links that expire after one hour).
- Delete: Profile tab > type DELETE > Delete account and data.
- For anything else, email hello@quanticalabs.co.uk. We reply within one month.
If you are unhappy, please tell us first. You can complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, phone 0303 123 1113.
9. Security
Data is encrypted in transit. Database tables use row-level security so each account can reach only its own rows, and others see only what you share. AI keys stay on our servers. Quantica Labs Ltd is Cyber Essentials certified.
10. Not an emergency service
In an emergency call 999. For urgent medical advice call NHS 111. Samaritans: 116 123, free, any time.
11. Changes
We will update this policy when the app changes, and tell you in the app before important changes take effect.