Privacy Policy

This policy explains what [LEGAL ENTITY] collects when you take part in The Watchman Challenge, what we do with it, and what we deliberately cannot see.

1. The short version

• Your private journal entries are unreadable to us. They are encrypted, and our admin tools have no permission to open them — not a hidden setting, no permission to grant.
• Your weekly reflection is read by our clinical lead. That is its purpose, and the page says so before you write.
• We never sell your data. We never share it for marketing.
• You can get an export or a full deletion, on request, at any time.

2. What we collect

At intake

• Name, email address, and phone number if you choose SMS.
• Your relationship status, whether you are a father, whether you have brothers or sisters, and your work situation. These decide which questions you are shown and which challenges are relevant to you. Also who you live with, anything physical that limits you, whether you work nights, whether you have tried something like this before, and how you heard about us. We ask whether you are 18 or older, and we do not keep the answer.
• Your answers to the first two safety questions are never stored, whatever they are. See “The safety questions” below. Your answers about drinking, drugs, hard mornings and a head that will not switch off, and what settles you, are kept: they keep certain challenges away from you, and what settles you is shown back to you when you press the support button.
• What would make this month worth it, anything going on in your life right now (for example a new baby, a move, a death in the family, a separation, a health scare), and where you are with faith.
• If you choose to write it, why you are doing this, in your own words. It is encrypted, it is shown back to you on day 30, and nobody on our side can read it.
• Your answers to the statements about your life — sleep, food, money, feelings, the people around you, who you are, and, if you opt in, faith — each answered never to always, or “does not apply to me”. They show you where you are starting, and they are asked again, word for word, on day 30 so you can see what moved.
• The five areas you picked to work on, and the order you picked them in.
• Nobody on our side can look up these answers for an individual man — the admin tools have no permission to read them, and the founders see totals only.
• The plan you chose and the card that holds it. We store only the card’s brand and last four digits, and the dates your free month started and, if you cancel, when you did. The card number itself is never stored by us; when card payments go live it is held by the payment processor, which will be listed in section 5 before it receives anything.
• Your timezone, delivery preference and morning time.
• While you are filling in the form, your answers so far are kept in your own browser, not on our servers, so that you can close it and come back. Your age answer and your safety-screen answers are never kept this way. The copy is deleted when you finish, when you choose “Leave without saving anything”, or after a week.
• A record that you accepted each required consent, with a timestamp and a hash of the exact document text you saw.

During the 30 days

• Which challenges you were served, and why the router chose them.
• Whether you accepted, pressed Too Easy, or did not respond.
• Your four evening check-in answers.
• Your private journal entries — encrypted, see section 3.
• Your weekly reflections.
• When you press the support button, and on which day. We record the press so the pilot can learn whether men who needed it were the men who later stopped. Pressing it notifies nobody.
• Any challenge you mark as not applying to you, so it is not sent to you again.
• On day 30, if you earn the medallion and choose to give one, a mailing address — used to post it and for nothing else.
• Message delivery records.

The safety questions

We ask whether, in the last two weeks, you have had thoughts that you would be better off dead or of hurting yourself, and whether something is going on that you cannot handle on your own. If you answer yes to either, we show you crisis resources, and you can still take part. Those two answers are never stored and are not linked to you in any way. We increment an anonymous daily counter that records only how many times the answer was yes.

3. Your journal

The journal box on the evening check-in is private in the strongest sense we can build. Entries are encrypted before storage. The administrative database role used by our internal tools has no read permission on that table at all, so there is no screen to build, no toggle to flip, and no way for a founder, an administrator, or a support request to retrieve them.

Journal text is never used to generate a summary, never included in your weekly reflection, never sent to any AI model, never included in a report to the founders, and never written to a log.

Journals are deleted 90 days after your cycle ends, by a job that runs every five minutes. If a cycle is simply abandoned rather than finished, the clock starts anyway.

4. SMS and mobile information

If you choose SMS, we use your phone number solely to deliver the program messages you signed up for.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third party except the messaging provider strictly required to transmit the messages to you.

Reply STOP to stop, HELP for help. Message and data rates may apply. Message frequency is approximately two per day during your 30 days.

5. Who processes your data

We use a small number of providers, each for one job:

• Twilio — SMS delivery. Receives your phone number and message text.
• Resend — email delivery. Receives your email address and message text.
• DigitalOcean — database and background jobs, hosted in the United States.
• Vercel — application hosting.

We do not sell your personal information, and we do not share it with advertisers or data brokers.

6. AI

During this pilot, no AI model writes anything you receive. Every challenge, encouragement message and reflection was written by a person and approved by a licensed counselor. AI is used only as an internal drafting aid for our content team before human review, and your journal text is never sent to any model.

7. How long we keep things

• Journal entries: 90 days after your cycle ends.
• Everything else: for the duration of the pilot and its analysis, then purged, unless you ask for deletion sooner.

8. Your rights

You can ask us for a copy of your data, or ask us to erase it. We respond within 30 days. Deletion is real deletion, not a hidden flag — the exception is anonymous aggregate counts that contain nothing identifying you.

Depending on where you live you may have additional rights to correct data, restrict processing, or complain to a regulator.

To make a request: [PRIVACY EMAIL]

9. Security

• Encryption in transit, and at rest for the sensitive fields named above.
• Separate database roles with least privilege, so the administrative tools cannot reach what they must not reach.
• Two-factor authentication on all administrative accounts.
• An audit log of every administrative action.

No system is perfectly secure. We designed this one as though the data were sensitive, because it is.

10. Not a HIPAA covered entity

We are deliberately outside HIPAA scope because we do not deliver a covered clinical service. We hold your information to a comparable standard of care regardless.

11. Children

This service is for adults 18 and over. We do not knowingly collect information from anyone under 18.

12. Changes

If we change this policy materially we will tell you before it takes effect and update the version and date at the top.

13. Contact

[PRIVACY EMAIL]
[MAILING ADDRESS]