Privacy Policy

Summary

The Council is a personal planning app. To generate plans, routines, and guidance, it sends parts of what you write in the app to OpenAI, a third-party AI provider, for processing.

We do not sell your data. We do not use it for advertising. We do not share it with data brokers. This policy explains exactly what we collect, how, why, and who else sees it.

1. Who we are

The Council ("the app") is developed and operated by Curtis Gaye, an independent developer ("we", "us"). For any privacy question or request, contact curtisgaye5@gmail.com.

2. What we collect and how

Information you give us directly

• Account details — username, email address, and a password. The password is stored only as a salted cryptographic hash; we never store or transmit it in readable form.
• Planning content you create — goals and their descriptions, habits, routines, processes, tasks and actions, lists, reminders, and notes.
• Living context — optional profile details you choose to provide, such as housing situation, available free time, physical restrictions, gym access, general disposable-income level, typical energy level, and free-text personal notes.
• Measurements and workouts — figures you log, such as weights, counts, exercise sets, and other self-tracked numbers.
• Voice recordings — audio you record when using voice capture. See section 4.
• Support messages — anything you send us through the support form or by email.

Information generated as you use the app

• Completion and activity history — which habits and tasks you completed or missed, and when.
• Time tracking — timers you run, time blocks, and daily itinerary structure.
• Calendar events — if, and only if, you grant calendar permission, the app reads your events so it can plan around what is already on your day. The event title and time are included in what is sent to OpenAI (see section 3). You can revoke this at any time in iOS Settings.
• Health data — if, and only if, you grant permission, the app reads your nightly sleep hours and daily step total from Apple Health. These are stored as measurements and, like your other measurements, are included in what is sent to OpenAI (see section 3). No other Health data is read. You can revoke this at any time in iOS Settings.
• Device and diagnostic data — crash reports and error diagnostics, plus a device token used to deliver notifications and Live Activities.

3. Sharing with OpenAI — our AI provider

This is the most important disclosure in this policy, so we are being specific.

Who receives your data

The app's AI features are powered by OpenAI, L.L.C. ("OpenAI") through the OpenAI API. When you use an AI feature, the relevant data listed below is transmitted over an encrypted connection from our servers to OpenAI's servers, processed there, and a generated response is returned to the app.

OpenAI is the only third-party AI service the app uses. Your data is not sent to any other AI provider.

Exactly what is sent

What is never sent to OpenAI

• Your password, in any form.
• Your email address or account credentials.
• Your location.
• Your contacts, photos, or browsing history.
• Payment information — the app does not collect payment details at all.

How OpenAI protects it

We use OpenAI's API under its business terms. Under those terms, OpenAI states that:

• Data submitted through the API is not used to train or improve OpenAI's models.
• API data may be retained for up to 30 days for abuse and misuse monitoring, after which it is deleted, unless retention is required by law.
• Data is encrypted in transit and at rest, and OpenAI maintains a published security and compliance program.

We have reviewed these terms and consider the protections OpenAI applies to this data to be equivalent to the protections described in this policy. OpenAI acts as our processor for this data and is not permitted to use it for its own independent purposes. OpenAI's current policies are published at openai.com/policies/privacy-policy and openai.com/enterprise-privacy.

Your consent, and how to withdraw it

Before any of your data is sent to OpenAI for the first time, the app shows you a disclosure screen naming OpenAI and listing the categories above, and asks you to agree. Nothing is sent unless you agree.

You can withdraw consent at any time from Settings in the app. Withdrawing consent stops all further transmission to OpenAI immediately. Your existing plans, habits, and history remain in your account and the app remains usable as a manual planner.

4. Voice recordings

Voice capture is optional and only records while you actively hold or start a recording. When you do:

1. The audio is uploaded to our server over an encrypted connection.
2. Our server forwards the audio file to OpenAI's Whisper transcription service to convert it to text.
3. The resulting text is returned and saved to your account as a note, task, or other entry, depending on what you asked for.
4. The audio file itself is discarded by our servers after transcription; we do not build an archive of your recordings.

If you do not grant microphone permission, or you decline AI consent, voice capture is unavailable and no audio is ever recorded or transmitted. Every other part of the app continues to work.

5. How we use your data

We use the data described above only to:

• Provide the core features of the app — storing and displaying your goals, habits, routines, tasks, and history.
• Generate AI-assisted plans, suggestions, summaries, and guidance, as described in section 3.
• Transcribe voice input you record, as described in section 4.
• Calculate your progress, streaks, statistics, and insights.
• Deliver notifications, reminders, and Live Activities you have enabled.
• Diagnose crashes and fix defects.
• Respond to your support requests.
• Comply with legal obligations.

We do not use your data for advertising, profiling for third parties, or automated decisions with legal or similarly significant effects. We do not sell or rent your data to anyone.

6. Other service providers

Besides OpenAI, we rely on a small number of infrastructure providers that process data strictly on our instructions:

Each of these providers is bound by contract to protect the data and to process it only for the purpose above. We do not permit them to use it for their own purposes.

We may also disclose data where required by law, to enforce our terms, or to protect the rights, property, or safety of our users or the public.

7. Where your data is held

Our servers and the services listed above are located in the United States. If you use the app from outside the United States, your data is transferred to and processed in the United States, where data-protection law may differ from your own. By using the app you consent to this transfer.

8. Retention

• Account and planning data — retained while your account is active, because it is what the app displays back to you.
• Voice recordings — discarded after transcription.
• Data sent to OpenAI — retained by OpenAI for up to 30 days for abuse monitoring, then deleted, per its API terms.
• Diagnostic data — retained up to 90 days.
• After account deletion — your data is permanently deleted from our production systems within 30 days, except where we must retain records to meet a legal obligation.

9. Your rights

Wherever you live, you may:

• Access a copy of the data we hold about you.
• Correct anything inaccurate — most content is directly editable in the app.
• Delete your account and all associated data.
• Receive a copy of your data in a portable format, by emailing us a request.
• Withdraw AI consent at any time from Settings, which stops all transmission to OpenAI.
• Object to or restrict processing, and lodge a complaint with your local data-protection authority.

To delete your account, use the account deletion option in the app, or send a request to curtisgaye5@gmail.com — you can also use the support form and select "Complete Account Deletion Request". We action deletion requests within 30 days.

We do not charge for these requests and we will not degrade your service for making one.

10. Security

All traffic between the app, our servers, and OpenAI is encrypted in transit using TLS. Data is encrypted at rest. Passwords are stored only as salted hashes. Access to production systems is restricted and authenticated.

No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects your data, we will notify you and the relevant authorities as required by law.

11. Children

The Council is not directed to children under 13, and we do not knowingly collect data from them. If you believe a child has provided us data, contact us and we will delete it.

12. Changes to this policy

If we change this policy we will update the date at the top of this page. If we make a material change to what data is sent to a third-party AI service, we will present a new in-app disclosure and ask for your consent again before that change takes effect.

13. Contact

Questions, requests, or complaints about this policy: curtisgaye5@gmail.com. We aim to respond within a few business days.