You agree to the privacy policy below, and the Privacy Policy for Substack, the technology provider.

Privacy Policy

Privacy

Last Updated: 2 July 2026

1. Data We Collect

We only collect what is strictly necessary to help you reach your goals:

  • Contact Info: Name and email to communicate with you.

  • Community Info: Discord handles and any info you share in the private community.

  • Coaching Notes: Brief notes from sessions to track your progress as well as form submissions.

  • Analytics: We use Simple Analytics, which is 100% anonymous. No cookies, no IP tracking, no personal data stored.

  • Authentication: We use Google Sign-In. We receive your email and user ID to manage your account.

  • Payment Authorization: We use Stripe for payments. We do not see your full card details. We store a secure payment token to allow you to trigger Commitment Devices charges via the app.

  • Email Delivery: We use Resend to send transactional and product emails, including account, reminder, billing, and accountability emails.

2. Legal Basis

We process your data to fulfill our contract with you (delivering coaching, Commitment Devices, account access, reminders, billing, and related communications) or because you gave us explicit consent (signing up for the newsletter or joining our community).

3. Data Processors & Transfers

Our subprocessors are:

  • Partner | Role | Data Handled | Location

  • Substack | Email & Content | Email address, Reactions, Comments | USA

  • Discord | Community | Username, Chat data | USA

  • Stripe | Payments | Payment info | USA/Global

  • Google Cloud | App hosting, SSO | Authentication data, app data | USA (auth), EU (everything else)

  • Resend | Email Delivery | Email address, name, email content, delivery and engagement data | USA

  • Attio | CRM | Name, email address, interaction history, app and Substack usage | USA

Some of these providers may process data outside the European Economic Area (EEA). We rely on their compliance with the EU-US Data Privacy Framework or Standard Contractual Clauses (SCCs) to ensure your data remains protected.

4. Your Rights

Under the GDPR, you have the right to see, change, or delete your data. Contact us at christoph@euzoia.org and we will handle it within 30 days.