Privacy Policy

Summit is a personal coaching app that helps you turn a goal into one clear step a day. We've written this policy to be specific about what Summit collects, what we send to other companies, and what stays on your device. If anything is unclear, write to rmardall@gmail.com.

1. Who we are

Summit is operated by Rob Mardall ("Summit", "we", "us"). You can reach us at rmardall@gmail.com.

2. What Summit collects

Account information

When you sign in with Apple or Google, we receive a unique account identifier and - if you allow it - your name and email address. You can use Apple's "Hide My Email" feature; Summit will work the same.

What you tell Summit

During onboarding and check-ins, Summit asks for:

  • The goal you're working on and why it matters
  • Your timeline and weekly time available
  • Your experience level and what's stopped you before
  • How each daily step felt (too easy, about right, too much) and any reflections you write

You provide this information voluntarily. You can use Summit without writing reflections.

Voice input

Summit lets you dictate the long-form answers - your goal, your why, your reflections - using your device's built-in speech recognition (Apple's Speech framework on iOS, Google's recognizer on Android) to convert speech to text. On iOS, audio may be sent to Apple's servers for transcription; this is governed by Apple's privacy policy. On Android, transcription is governed by Google's privacy policy. Summit only stores the resulting text - not the audio.

Subscription and purchase data

When you start a free trial or subscribe, the App Store or Google Play handles the transaction. We use RevenueCat to confirm whether your subscription is active. RevenueCat receives a pseudonymous user identifier and your subscription status; it does not receive your goal, your name, or any of your check-ins.

Usage analytics

We use Mixpanel to understand how Summit is being used - for example, which screens people drop off on, or whether daily steps are being completed. Mixpanel receives a pseudonymous device or account identifier and event names. It does not receive the contents of your goal, your reflections, or your name.

Diagnostic data

If Summit crashes, the App Store or Google Play may send us anonymous crash reports. You can opt out of this in your device settings.

What Summit does not collect

  • Your photos, contacts, calendar, or location
  • Audio recordings of your voice (we discard them after transcription)
  • Payment card details (these go directly to Apple or Google)

3. How we use it

We use the information above to:

  • Generate personalised daily steps for your goal
  • Adapt future steps based on how prior ones felt
  • Sign you in and remember your subscription status
  • Understand how to make Summit better and fix bugs
  • Reply if you contact support

The legal basis under GDPR is your consent (when you sign up and provide goal details) and our legitimate interest in operating and improving the app.

4. Who we share it with

We don't sell your data. We share specific information with these processors so the app can function:

  • Our AI provider - your onboarding answers, prior step titles, and recent check-ins are sent to our AI model to generate the next batch of steps. The provider processes this data on our behalf and does not use it to train its models.
  • Apple - for Sign in with Apple, App Store billing, and (on iOS) speech recognition.
  • Google - for Sign in with Google, Google Play billing, and (on Android) speech recognition.
  • RevenueCat - to verify your subscription status.
  • Mixpanel - for product analytics.
  • Expo / EAS - to deliver app updates.
  • DigitalOcean - hosts the Summit API that forwards your requests to our AI provider.

We may also disclose information if required by law, to protect our rights, or in connection with a sale of the business (in which case you'll be notified before your data is transferred).

5. Where it's stored

Your goal, daily steps, and check-ins are stored locally on your device. The Summit API does not maintain a database of your coaching history - every request you make sends the context it needs and forgets it once the response is returned.

Account identifiers, subscription status, and analytics events are stored by the processors listed above, on servers in the United States and the European Union.

6. How long we keep it

  • On your device: until you delete the app or sign out.
  • API requests to our AI provider: not stored by us; handled by the provider per its policy (typically up to 30 days for abuse monitoring).
  • Analytics events: kept by Mixpanel for up to 12 months.
  • Subscription records: kept while your account is active and for as long as required for accounting purposes (typically 7 years).

7. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete the personal data we hold about you, and to object to or restrict certain processing.

To exercise any of these rights, email rmardall@gmail.com. We'll respond within 30 days. You can also delete most data yourself by signing out and deleting Summit from your device.

If you're in the EEA or UK and we can't resolve your concern, you have the right to complain to your local data protection authority. If you're in California, you have the additional rights described in the CCPA - including the right not to be discriminated against for exercising them.

8. Children

Summit is not directed at children under 13 (or under 16 in the EEA), and we do not knowingly collect personal information from them. If you believe a child has provided us with information, email us and we'll delete it.

9. Security

We use TLS for traffic between the app and our API, and rely on our processors' security practices for data they hold. No system is perfectly secure, so we encourage you not to share anything in Summit you wouldn't want a future you to read.

10. Changes to this policy

If we make material changes, we'll update this page and adjust the "Last updated" date. For significant changes we'll also notify you in the app or by email.

11. Contact

Questions, requests, or worries: rmardall@gmail.com.