Bullseye Perspective

Privacy Policy

Version: 1.1.0 • Effective: 9/1/2026

BULLSEYE PERSPECTIVE — PRIVACY POLICY Effective 2026-09-01

  1. WHO WE ARE Bullseye Perspective operates this coaching platform and is the controller of the personal information described here.

  2. WHAT WE COLLECT (a) Account data — email, name, date of birth, role, authentication records. (b) What you create — journal entries, Marks and visions, session notes you write, coaching conversations (text and transcribed voice), life events, handwriting samples if you choose to provide one, progress records. (c) Derived data — structure and pattern signals, persona summaries, and other interpretations our system produces from the above. (d) Transaction data — subscriptions, credits, invoices, and platform fees. (e) Technical data — device and browser information, IP address, and usage events.

  3. VOICE AND RECORDINGS Voice input is transcribed to text and the audio is then discarded. We do not keep recordings. Where transcription runs on your own device, nothing leaves it. Where a coach records a session, the coach is responsible for obtaining the consent of everyone present before recording.

  4. HOW WE USE IT To provide and personalise coaching, to run your account and billing, to support you, to keep the service secure, and to improve it. We do not use your content to train general-purpose AI models for third parties.

  5. WE DO NOT SELL OR SHARE FOR ADVERTISING We do not sell personal information, and we do not share it for cross-context behavioural advertising. This is a default, not a setting you have to find.

  6. WHO SEES YOUR CONTENT (a) You — everything you have written. (b) Your coach — only the categories you have explicitly consented to for that specific coach (journals you pick, activity insights, memory, timeline, handwriting read), each of which you can revoke at any time. Revoking is a permissions change; nothing is deleted. (c) Our staff — only where necessary to support you, investigate abuse, or comply with law. Viewing your session content for debugging additionally requires your standing opt-in, and every such view is logged. (d) Service providers — see the Subprocessor Notice. (e) Law enforcement — only where legally required.

  7. AI PROCESSING AND SUBPROCESSORS Coaching text is sent to third-party AI providers to generate responses. They process it on our instructions to return a response and are contractually barred from using it for their own purposes. Our subprocessors include: Google (Gemini) for AI model inference, Stripe for payment processing, and Base44 for application platform, hosting, and database. Each is bound by a data processing agreement and does not train on your data. The full list is in the Subprocessor Notice.

  8. YOUR RIGHTS You may access and export your data, correct it, delete it, withdraw consent for coach access, and object to processing. Exercise access and portability from Account → Download My Data, and deletion from Account → Delete Account. We respond within 45 days.

  9. DELETION — WHAT ACTUALLY HAPPENS When you delete your account: access is revoked immediately, coaching relationships are paused, upcoming sessions are cancelled, and active subscriptions are cancelled. Your journey data (journals, Marks, conversations, life events, progress, memory, handwriting read) then enters a 30-day recovery window, after which it is permanently deleted. Logging back in during the window restores your access and cancels the deletion.

Two categories deliberately survive: records involving another person (a coach's own notes, bookings, referrals) because they are that person's records too, and financial and audit records we are required to retain for tax and accounting purposes. Those are retained no longer than the law requires.

  1. RETENTION We keep account data while your account is open, journey data until deletion as described above, and financial records for the statutory retention period.

  2. SECURITY Data is encrypted in transit and at rest, access is restricted by row-level security, and staff access is limited and logged. No system is perfectly secure; we notify you of a breach affecting your data as required by law.

  3. INTERNATIONAL TRANSFERS We operate in the United States and your data is processed there. Where you are in the EEA or UK, transfers rely on Standard Contractual Clauses, and you may complain to your local supervisory authority.

  4. STATE-SPECIFIC RIGHTS California residents have the rights described in the CCPA/CPRA, including access, deletion, correction, and the right not to be discriminated against for exercising them; we do not sell or share personal information as those terms are defined. Residents of Washington, Nevada, Connecticut, Colorado, and other states with consumer health data laws have the additional rights described in the Sensitive Information Notice.

  5. CHILDREN The service is for adults 18 and over. We do not knowingly collect information from children, and we delete it if we learn we have.

  6. CHANGES AND CONTACT Material changes are re-presented for your signature. Reach us with any privacy request through the Requests page in the app.