Privacy Policy
Last updated: 2026-10-21
Iters is a 28-day guided sprint toward earning more. This policy explains what personal data we collect, why, who receives it and how you can control it. It is a plain-language template and has not yet been reviewed by a lawyer.
Who we are
The service is operated by iters.app , a company registered in Georgia. You can reach us at the contact address at the bottom of this page.
What we collect
- Email address. To confirm your signup, send your check-in links and reminders, and reply to you.
- Your goal, plan, check-in answers and notes. Everything you type into the service. Your notes can be personal, so please do not share medical or psychological details; Iters is not designed for them.
- Source information. Where you came from (campaign tags in the link, the website that referred you) and your country, taken from a network header. We do not store your IP address in our own database.
- Cookies and similar data. Two first-party cookies: one remembers the source information above (90 days), the other is a random visitor id used for aggregate analytics (365 days). We use no advertising cookies.
- Payments. If you buy the Sprint pass, our payment provider (Paddle) collects your payment details and sells to you as the merchant of record. We receive confirmation of the purchase, not your card number.
Why we use it
- To provide the service you asked for (plans, check-ins, weekly reviews).
- With your consent, for reminders and optional emails. You can withdraw consent at any time with the unsubscribe link or by writing to us.
- To keep the service secure, prevent abuse and understand, in aggregate, how the site is used.
We do not sell personal data and we do not use it for advertising.
Who receives it
Service providers that process data on our behalf are listed below. Each receives only what it needs.
| Provider | Purpose |
|---|---|
| Supabase | Database and sign-in (data centre in Frankfurt, Germany) |
| Hetzner | Server that runs the service (Germany) |
| Upstash | Rate limiting |
| Email delivery provider | Sending confirmation, check-in and reminder emails |
| PostHog | Product analytics (US). We do not send your email or free text |
| Sentry | Error reports. We do not send your email or free text |
| Cloudflare | Hosting, DNS and bot protection (Turnstile) |
| Sign-in with Google, if you choose it | |
| Paddle | Payments, taxes and refunds |
| AI model provider | Generates plans and reviews from the goal and check-in text you provide. We use providers whose terms say your data is not used to train their models |
Your data is processed in Georgia, the European Union and the United States.
How long we keep it
- Account data stays until you delete your account, then it is removed after a 30-day grace period.
- Technical AI logs are deleted after 30 days.
- Payment records are kept as long as tax rules require.
- Email suppression lists keep the address so we do not email you again.
Your rights
Depending on where you live (for example GDPR, UK GDPR, CCPA, PIPEDA, Australian Privacy Act or the law of Georgia) you can ask to access, correct or delete your data, object to some processing and withdraw consent. Write to the contact address and we will answer within 30 days. Deleting your account removes your plans, check-ins and notes.
Age
Iters is for people aged 18 or older. We do not knowingly collect data from anyone younger.
What Iters is not
Iters does not provide financial, legal, tax, career-counselling or medical advice and is not therapy. We do not promise results or income.
Changes
If we change this policy in a meaningful way we will update the date above and, where required, tell you by email.
Contact: [email protected]