Privacy & your data

The Training Boutique SRL, Hipodromului 30D, Corbeanca, Ilfov, Romania (CUI RO14823562), is responsible for your personal data. For privacy questions, write to hello@unshakeable.biz.

Last updated: 9 November 2026. Version: 2026-11-09.1.

Account details: your name, email, company or group, access dates and sign-in details. We use them to provide and manage your journey (contract).

Self-assessment answers and results; journal entries, card reflections, action notes, promises, weekly evidence, check-ins and stage reviews. These help you practise, save and revisit your work (contract). Please avoid adding information about other people or sensitive health information you do not need to share.

The AI companion is optional and off until you choose it. When on, your recent chat (up to 10 messages) and relevant reflections, assessment and progress are sent to AI providers for replies, celebrations and personal summaries. Turn it off in Settings to stop new personal AI requests. Earlier saved conversations are not erased by switching it off. Your typed journey and saved writing remain available. The legal basis is consent.

Voice dictation is a separate optional choice and off until you choose it. When on, audio is sent to an AI provider for transcription, held temporarily in memory and not saved by the app. You can always type instead. Provider-side handling and retention still need confirmation in the provider agreements; we do not promise that third parties retain nothing. The legal basis is consent. The resulting text is yours to save.

Usage and progress data: stages, card status, badges, activity dates and AI token/credit counts. We use these to provide the journey (contract), and to protect the service and manage reliability and costs (legitimate interests). AI usage logs do not contain journal or chat text.

Purchase and subscription data from Shopify/Appstle: buyer email, order references, offer, subscription status and next billing date. We use these to give access, manage renewals and send service notices (contract). Accounting records required by Romanian invoice and tax law are kept by the responsible merchant (legal obligation); the applicable statutory retention period needs legal confirmation.

Email delivery data: recipient, email type, send time and delivery outcome. We use this to deliver expected service messages and troubleshoot delivery (contract and legitimate interests). These are not marketing consent.

Legal acknowledgement and optional consent choices, their version and dates, and content-free privacy request events help us respect your choices and demonstrate compliance (legal obligation and legitimate interests).

Company and group admins see member progress such as stage, cards completed and last activity, never your journal text, reflections, check-in answers or companion chats. The app's access rules restrict private writing to your own account. Hosting and AI processors handle the data needed to operate the service; authorised operational access is not the same as company-admin access.

The providers below help deliver the service. Some AI providers may process data outside the EU/EEA. Where required, transfers rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses.

• Lovable Cloud — App hosting, account services and database.
• Lovable AI and underlying model providers — Companion replies, optional personal summaries and voice transcription. Currently OpenAI for companion/summaries and Google for transcription; models may change.
• Brevo — Service email delivery and delivery records.
• Shopify and Appstle Subscriptions — Shop purchases, subscription status and billing dates. Their own privacy notices also apply.
• Google Fonts — Loads the app and PDF fonts; the browser or server requests fonts from Google.

After a dated access period ends, your journal remains readable in the usual archive for 12 months. The daily retention job then deletes your account and its app-held personal records. Ongoing accounts without an end date and staff accounts are excluded from automatic deletion. You can still request deletion.

Saved assessment results from visitors who never create an account are automatically deleted 12 months after they were saved, by the daily retention job. Results linked to an account, including results associated with its verified email, follow that account's retention period. You can ask for earlier deletion by emailing hello@unshakeable.biz after we verify your identity. Unfinished answers saved only in your browser remain on that device until completed, restarted or cleared.

Deleting the app account does not delete records in the separate shop, subscription app or email provider, or override legally required merchant records. Contact us for help with those requests. Backups and processor-side deletion periods need confirmation before launch.

Access and portability: open Settings → Privacy & your data to download a readable PDF and a machine-readable JSON copy. Correction: use Your details in Settings; contact us for an email change or correction of other records. You can edit your saved journal writing in the journal.

Deletion: choose Delete my account in Settings and confirm permanently. It cannot be undone. Cancel any paid subscription in your Shopify customer account too: deleting the app account does not itself cancel shop billing.

Withdraw consent: turn off AI companion or dictation in Settings at any time. This stops future processing for that feature without stopping typed journey practice, and does not affect the lawfulness of earlier processing. For restriction, objection (including to processing based on legitimate interests), additional access, or requests affecting third-party records, email hello@unshakeable.biz. We may ask for identity verification and will normally respond within one month, subject to lawful extensions and exceptions.

If you are concerned about how we handle your data, please contact us. You can also complain to Romania's supervisory authority, ANSPDCP, at www.dataprotection.ro. Your other GDPR rights remain available.

The app uses essential sign-in session storage and saves unfinished assessment answers on your device so you can return to them. Journey preferences, such as dictation language and automatic sending, are stored with your account. A reusable sidebar control can store its open/closed preference if used. We found no tracking-cookie or advertising-analytics code added by this app. Hosting or embedded preview tools may have separate storage and telemetry; their behaviour must be checked on the published site. Clearing browser storage removes local drafts and may sign you out.