← Home

Privacy Policy

Last updated: October 21, 2026

Who we are

The 28-Day Action Plan™ app is operated by Elliott AI Foundry LLC ("we," "us," or "our"). This policy explains what we collect, how we use it, and the choices you have. You can reach us anytime at operations@elliottaifoundry.com.

The 28 Day Action Plan™ is a planning and accountability tool. It is not a medical or mental health service, and it is not a replacement for professional medical or mental health care, diagnosis, or treatment. Clarity, the app's AI accountability partner, is not a doctor, therapist, or counselor and cannot respond to emergencies. If you are in crisis or thinking about harming yourself, please contact your local emergency services or a crisis line where you live. You can find free, confidential helplines for your country at findahelpline.com.

What we collect

  • Account data: your email address, used to sign you in with a 6-digit email code, and a name or preferred name you choose to give us.
  • Quiz responses: the answers you provide to the intake questions used to build your plan (your goal, timeframe, available time, blockers, and experience level).
  • Your plan: the personalized 28-day plan we generate from your answers, and any revisions to it.
  • Check-ins and reports: your daily check-in conversations with Clarity, your AI accountability partner, and the reports Clarity generates. These are saved to your account so you can review, copy, and keep a long-term record of your progress.
  • Reminder preferences: the morning and evening times you choose for check-in reminders.
  • Phone number and messaging choices: if you join an available messaging program, your mobile number, selected brand, message types and channels, messages you send and receive, delivery records, and your consent and opt-out records. Giving your phone number is optional.
  • Usage and security data: minimal technical logs (such as plan generations and sign-in events) used for rate limiting, abuse prevention, and keeping the service reliable.
  • Safety acknowledgements: when you tick the wellbeing box at sign-in, or "I understand" before a new plan, we record which wording you agreed to and when (and, for a plan, which plan). This is our record that you were shown the notice.

How we use your data

We use your data to generate your plan, save it to your account, power your daily check-ins and your report history, send the reminders you ask for, and improve the app. We do not sell your data, and we do not share it with advertisers.

Optional anonymized data sharing

With your explicit opt-in consent, we may use anonymized versions of your reports and progress to improve the app and understand outcomes. Anonymized means the data never includes your name, email, or anything that identifies you. This sharing is off by default. You choose whether to turn it on during setup, and you can turn it on or off at any time from the My Reports screen.

Your AI accountability partner (Clarity)

Clarity is an AI system, not a human, and your plan and reports are generated by AI. Clarity is an accountability partner, not a chatbot: its only purpose is to help you stay on track, so it asks about the status of your tasks and for updates on your goals and plan as part of its normal operation. Clarity is powered by an AI provider. The content of your check-ins is sent to that provider solely to generate Clarity's responses and your reports. Your inputs are not used to train their models. Your conversations and reports are stored in your own account.

Data retention

We keep your account, plan, check-ins, and reports for as long as your account is active so your history stays available to you. You can request deletion at any time (see Your rights and choices). We may retain minimal security and operational logs for a limited period for abuse prevention and legal compliance. Safety acknowledgements are kept while your account exists, even if you delete or replace a plan, because they record that you were shown the notice; they are deleted with your account.

Your rights and choices

You can do these yourself in the app, at any time. On My Account, tap Download my data for a copy of everything we hold about you, or Delete Account to permanently delete your account and its data. You can change your plan and your notes in the app, control the optional anonymized data sharing from the My Reports screen, and turn off reminders at any time. To correct your email address or name, or for anything else the app cannot do for you, email operations@elliottaifoundry.com.

How we protect your data

Your data is transmitted over encrypted connections and stored with access controls so that you can only see your own information. We use reputable infrastructure providers and apply bot protection and rate limiting to guard against abuse.

Privacy notice for shared devices

When you sign in, you can tick "Keep me signed in on this device." Please only do this on a phone or computer that is yours alone. While you stay signed in, anyone who picks up that device and opens the app can see your plan, check-ins, notes, and reports, and could talk to Clarity as you. On a shared, family, work, or public device, leave the box unticked, and always sign out when you finish (My Account, then Sign Out). Leaving the box unticked is the safer choice, but it does not replace signing out.

Phone Numbers and Text and WhatsApp Messages

We plan to offer optional text and WhatsApp messaging programs. These disclosures apply when you join an available program. The app works fully without a phone number or messaging signup. Our public Messaging Terms describe each program. Accepting the app terms, giving your number, or booking a call does not enroll you in messaging. Consent to messaging is not a condition of purchase.

We use your number for the brand, message types, and channels you select: plan check-ins, appointment messages, or offers and updates, over text, WhatsApp, or both. We keep your choices, consent wording, date, time, and signup method as proof of consent. We keep consent and suppression records as needed to honor your choices and meet legal requirements.

We use Twilio Inc. for text and WhatsApp message delivery. Twilio, telecommunications carriers, and WhatsApp/Meta process phone numbers, message content, and delivery information to operate messaging. We also use delivery records for support, security, and compliance. Clarity replies use the AI providers described below, and we save messaging conversations to your account when you use messaging for app check-ins.

We do not sell or share mobile information with third parties or affiliates for marketing or promotional purposes. We do not sell or share text messaging originator opt-in data and consent with third parties for their own purposes. We share it only with service providers supporting delivery, consent management, and compliance, or when law requires disclosure. Our optional anonymized data sharing excludes phone numbers and messaging consent records.

Frequency per selected channel: up to 2 scheduled check-ins per day on plan days; one confirmation and up to two reminders per booking; up to 4 offers and updates per month per brand. Replies in conversations you initiate add messages and vary with use. Message and data rates may apply.

Reply STOP to a text or WhatsApp message to stop messages from the sender. This may stop multiple message types sharing a sender or messaging service. Reply HELP for help. You may also email operations@elliottaifoundry.com to change your choices, opt out, or reach a person for support. Leaving messaging does not change your app account or membership.

Health information and HIPAA

This app is not covered by HIPAA (the US Health Insurance Portability and Accountability Act). Elliott AI Foundry LLC is not a healthcare provider. We do not offer HIPAA-covered healthcare services through this app or its messaging programs. You never need to share medical or mental health details to use the app or its messaging programs. Do not send medical or mental health details by text message or WhatsApp. If you choose to enter private medical or health information in your plan, check-ins, notes, conversations with Clarity, or messages, you do so at your own risk and discretion. We still protect it the same way we protect everything else you enter (see How we protect your data).

Children's privacy

The app is intended for adults and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us at operations@elliottaifoundry.com and we will delete it.

Where your data is processed

Elliott AI Foundry LLC is based in the United States. Your account and everything you create in the app are stored in the United States. If you use the app from another country, your information is sent to the United States. Vercel runs a worldwide network, so the first step of your connection may pass through a server near you. Messaging delivery also involves carriers and WhatsApp/Meta. These providers operate globally, so messaging data may be processed outside the United States, including for US members.

  • Vercel Inc.: hosts the app. The servers that run it are in Washington, D.C.
  • Supabase Inc.: stores your account and everything you create in the app: your plans, check-ins, reports, notes and acknowledgements. Our database is in Ohio.
  • Amazon Web Services, Inc.: provides the data centers that store your account and everything you create (Ohio) and that send our emails (Northern Virginia). Some of the other companies listed here may also run parts of their systems on Amazon Web Services.
  • OpenRouter, Inc.: passes your quiz answers, plan edits and messages to Clarity on to the AI model and returns the reply. We allow it to use only the model maker below, and only on terms that do not let it collect your words or use them to train its models.
  • Anthropic PBC: its Claude models write your plan, your reports and Clarity's replies. If OpenRouter is unavailable, we reach Anthropic directly, with processing limited to the United States.
  • Resend, Inc.: sends the one-time sign-in code to your email address, from Northern Virginia. We do not track whether you open our emails or click links in them.
  • Sentry (Functional Software, Inc.): records technical error reports so we can fix problems. It is set up not to collect your personal details and never records your screen.
  • Google: handles customer email correspondence and calendar bookings.
  • Twilio Inc.: text and WhatsApp message delivery for people who join an available messaging program.
  • WhatsApp/Meta: operates the WhatsApp platform for WhatsApp messaging, alongside Twilio and network providers.

Vercel hosts the app. Supabase stores accounts and app data, on Amazon Web Services infrastructure. OpenRouter routes AI requests to Anthropic's Claude models. The app restricts routing to Anthropic and requests providers with data collection denied. This setting does not guarantee zero data retention; providers may retain data for security or abuse monitoring under their applicable terms. Resend sends app emails, including sign-in codes. The providers above support the additional functions described beside their names.

Skool is separate: your Community membership is between you and Skool, and the app does not send your app data to Skool.

Your rights under GDPR (EU, EEA, UK, and Switzerland)

If you are in the European Union, the European Economic Area, the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) and equivalent laws apply to your data. Elliott AI Foundry LLC is the controller of your personal data. You can reach us at operations@elliottaifoundry.com.

Why we process your data (legal bases):

  • To provide the app you signed up for (performance of a contract): your account, plan, check-ins, notes, reports, and reminders.
  • With your consent: optional anonymized data sharing, optional messaging programs, and any health information you choose to enter (see below). You can withdraw consent at any time without affecting anything done before.
  • Our legitimate interests: keeping the app secure, preventing abuse, and improving the service, balanced against your rights.
  • Legal obligations: where the law requires us to keep or disclose information.

Health information. Health information is a special category of data under GDPR. We do not ask for it and you never need to give it. If you choose to enter it, you give your explicit consent for us to process it only to run the app for you. You can withdraw that consent by deleting the entry or your account.

Your rights. You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to you or another service in a portable format. You can also withdraw any consent. You can download your data and delete your account yourself on My Account at any time. For any other request, email us and we will respond within one month. You also have the right to complain to the data protection authority where you live or work.

International transfers. We and our service providers are based in the United States, so your data is transferred there. We rely on safeguards the law recognizes for these transfers, such as the European Commission's Standard Contractual Clauses, or a provider's certification under the EU-U.S. Data Privacy Framework where it applies.

AI and automated decisions. Your plan, reports, and Clarity's responses are generated by AI. We do not make decisions based solely on automated processing that have legal or similarly significant effects on you.

Changes to this policy

If we make material changes, we will notify signed-in users by email before the changes take effect, and we will update the date at the top of this page.

Contact

Questions about this policy or your data? Email us at operations@elliottaifoundry.com.