Privacy

Challenge notebooks

Signed out, the /challenges notebook saves challenge plans — including each part of a day, its wording and any time window you set for it — daily notes, reflections, timer sessions, and manually entered circle updates in this browser’s local storage. Nothing is sent to our servers. They remain after closing the tab, and they stay on this device only.

Signed in, the same notebook is saved to your account so you can open it on another device. What we then store is the challenge title, each part of the day with its action, its smaller version, its label and any time window, the days it runs for, your reason and cue, your reflection, each part’s entry and note, the time at which you wrote each entry, and the start and stop instants of each timer session.

Two things are never sent, on purpose. The updates you type in yourself about friends — their names and what you entered for them — stay in this browser, because those people did not agree to anything and are not here to be asked. A timer that is running right now also stays on the device holding it; the session it produces when you stop it is saved. A different device will show your challenges but not those typed-in updates.

A time window is a note to yourself, not a rule we enforce. If you say a part of your day belongs between 5am and 7am, the notebook will tell you when that window has closed and whether an entry was written after it — and that is the whole of what it does with it. It never records anything on your behalf, it never marks a day as skipped or missed because a clock passed, and it never stops you recording something afterwards. It cannot know whether you did the thing and reached for your phone later, so it does not guess. The time an entry was written is stored beside it for the same reason a timer session is: so the record can say where a fact came from.

Copying an existing browser notebook to your account only happens when you ask for it, using the button that appears when you sign in. Signing in does not upload anything by itself, and your browser copy is kept afterwards, so nothing depends on one of them surviving.

A timer session stores only the clock instants at which you pressed start and stop. Whether it is kept in your browser or on your account, those times are yours to change or delete — we do not, and cannot, present them to anyone as verified. What we can say is narrower and true: a clock recorded them and nobody typed them in.

Two devices editing the same day is the one case this does not make safe. The last one to save that day is the version kept; there is no merge, because there is no true way to combine “I did the full thing” and “I did the smaller one” into a single answer.

Anyone with access to the same browser profile may be able to read them. Clearing site data or using a temporary browser session can remove them. Use Download backup to keep a copy, Restore backup to transfer one, and Delete local challenge data to remove this notebook from this browser.

Walkthrough

The separate /preview walkthrough uses session storage. Its example entries are separate from your challenge notebook. Browser session restoration may restore this data; use Start over or clear site data to remove it.

Member accounts and project records

Where member sign-in is configured, authentication is handled by our identity service. Signing in uses account identifiers, profile information, and session tokens. This app stores session information in browser storage and an access-token cookie to authorize member requests.

Member project plans, check-ins, notes, and evidence are sent to the project service when you save them. The export downloads the records of your projects and of any challenges saved to your account, as one file. It does not include circles, invitations or your account details. Your project record remains a separate record from your challenge notebook, even though both are stored on your account and Today lists both.

Deleting browser data does not delete an account or anything stored on it — including, while you are signed in, the challenge notebook saved there. “Delete local challenge data” removes this browser’s copy only, and says so. Deleting a challenge from the notebook while signed in does remove it, and its entries, from your account.

Contact us about access to or deletion of account data. This interface does not currently offer self-service account deletion or display a server retention schedule.

Circles, invitations, backups, and sharing

A circle is people who joined it themselves. When you open one, we store its title, the practice’s dates and each part’s wording and window, the name you chose to show it, and who is in it. Members see the kind of each day the others recorded (full, smaller, partial or rest) and, only if a member turns it on, the time their clock measured. Notes, reasons and reflections are never shown to a circle: there is no field for them. You see the members of the circles you are in, and nobody else’s; a member who invites their own friends opens their own circle, and those friends never see you. Leaving stops you seeing the circle and it seeing you; your own challenge and record stay yours.

An invitation leaves this site only because you sent it. Copy it into your own messages, or type an address and click Send: one email goes to that address, from Innerova on your behalf, naming you, the practice and a link that works for one person for fourteen days. The address is used for that one send and is not stored anywhere. We keep a record that you sent an invitation, not to whom. Nothing is scheduled, nothing is retried, and no reminder is ever sent.

Updates you type in yourself about a friend who is not in a circle are your notes. Ask friends before recording their information, and use a nickname if preferred. There is no connection to that person’s account, and these entries are never sent to our servers, signed in or not — so they stay on the browser that wrote them, and will not appear on your other devices.

Backups include your private notes and typed-in circle updates, and are made from what this browser is showing. Store them carefully. Share images and captions include the challenge title and counts; your saved reflection is included only if you select it. Daily notes and circle details are excluded. You decide whether to upload or send exported content. The service you share it with then handles that copy.

Site requests and contact

Serving and protecting this site involves processing network information such as IP addresses and request logs through our hosting and delivery services. The app does not include an advertising pixel or analytics SDK. If you email us, we receive the message and the contact information you provide.

The challenge notebook does not send your writing to an AI model.

Contact

For privacy questions, write to [email protected].