Privacy Policy

Last updated: July 2026

1. Who we are

strydefy is a career coaching platform. This policy explains how we collect, use, and protect your personal data.

[PLACEHOLDER — DATA CONTROLLER IDENTIFICATION REQUIRED BEFORE LAUNCH: legal entity name and registered address to be inserted here per UK GDPR Article 13 requirements. Do not remove this box until resolved with legal counsel.]

2. What data we collect

  • Account data: Email address and authentication data (processed via Supabase).
  • Career profile data: Current role, target role, time commitments, strengths, and weaknesses you provide during onboarding.
  • Usage and habit data: Habits, completions, streaks, and milestones.
  • Reflections: Text you write and submit in the app.
  • Analytics data: Usage metrics (via PostHog, EU region), collected only after you explicitly consent via our cookie banner.
  • Technical data: Device, browser, and IP address utilized strictly for security and error monitoring (via Sentry).

3. How we use your data

  • To generate and personalize your career roadmap and habit plan. Note: This includes sending relevant career data to Anthropic's Claude API for AI-generated content.
  • To operate core app features and maintain your account.
  • To send you notifications about your plan (via Firebase Cloud Messaging), only if you explicitly enable notifications.
  • To improve the product based on usage patterns (via consented analytics).
  • To maintain security, monitor infrastructure, and fix errors.

4. Third parties we share data with

We do not sell your personal data. We share data only with trusted service providers necessary to operate strydefy:

  • Supabase: Database and authentication hosting (EU West region).
  • Anthropic: AI processing of your career profile and coaching conversations to generate plans and coach responses.
  • PostHog: Product analytics (EU region, consent-gated).
  • Sentry: Technical error monitoring and crash reporting.
  • Firebase: Push notification delivery (only if notifications are enabled).
  • Sanity: Blog content delivery (does not process any user personal data).

5. Your rights

Under the UK GDPR, you have the following rights regarding your personal data:

  • The right to access the data we hold about you.
  • The right to rectification (correcting inaccurate data).
  • The right to erasure (deleting your account and data).
  • The right to restrict processing.
  • The right to data portability.
  • The right to object to processing.
  • The right to withdraw consent at any time (e.g., for analytics tracking).

To exercise any of these rights, please contact us at support@strydefy.com.

6. Data retention

Your account data, career profile, and reflections are retained for as long as your account is active. If you request account deletion, all associated personal data is removed from our active databases within a reasonable period (approximately 30 days) subject to legal and security retention requirements.

7. Cookies

We use cookies to operate and improve strydefy. Essential cookies required for authentication and security are always active. Analytics cookies (like PostHog) only activate if you provide consent via our cookie banner. Your consent choice is saved for 180 days, after which you will be asked again.

8. Changes to this policy

We may update this policy from time to time. If we make material changes to how we process your personal data, we will notify you within the app or via the email address associated with your account.

9. Contact us

If you have any questions about this Privacy Policy, please contact us at support@strydefy.com.