Privacy Policy

1. Who We Are

PROJECT50CHALLENGE LTD, a company registered in England and Wales with company number 17480102 (“we”, “us”, “our”), is the data controller responsible for your personal data, on p50c.com and in the P50C apps. Our registered office is:

Contact us about data matters at support@p50c.com.

2. Our Services and Age Restriction

Our website and services (including the 5-Day Challenge, Group Coaching, Live Mastermind Events, and Community Membership) are intended for adults aged 18 and over, and our programmes are designed for men aged 21 and over. We do not knowingly market to or collect data from persons under 18. If we become aware that a person under 18 has provided us with personal data, we will delete it promptly. If you believe a minor has submitted data to us, please contact support@p50c.com.

3. What Data We Collect

We collect the following categories of personal data:

• Identity data: First name, last name
• Contact data: Email address, phone number
• Sign-in data: If you choose Continue with Google, Google tells us your name, your email address and that Google has verified it. We use that address to find or create your account. We never receive your Google password, and we do not ask Google for anything else.
• Payment data: Billing details processed by Stripe and PayPal. We do not store full card numbers on our systems. Purchases in the P50C apps are paid to Apple or Google; we receive what was bought, the price and a transaction reference, never your card details.
• Transaction data: Details of products and services purchased.
• Technical data: IP address, browser type, device identifiers, and usage data collected via analytics tools (see Section 7).
• Health data: Only if you choose to add it on the Health page: body stats and measurements, blood test results, progress photos and your notes on them. This is special category data, which we keep only with your explicit consent, given on that page before anything is saved. It is private to you and never used for marketing. Withdrawing consent on the same page deletes all of it.
• Profile data: Signed-in members can open your profile from your name or photo. It shows your name, the month you joined, your profile photo and social links if you add them, and your streak, ranks and recent completed days. You can hide your streak and history from your profile at any time, and whatever you hide from your pod is hidden there too. Your journal and health data are never on your profile. We shrink a profile photo and remove its hidden details, such as where it was taken, before we store it.
• Pod data: If you join the Pod, we show your pod the progress you choose to share. We keep your pod's messages and photos until the pod is closed or you delete your account, and our admins can read them. If you tell us your city, we use it only to place you in a pod, and only our team can see it. If you leave the Pod, your pod is told that you've left, but not why. We also record when you tap Join on the weekly pod call, and your pod sees how many of them joined.
• Notification data: If you turn on reminders: a push token for your browser or phone, issued by your browser, Apple or Google, so we can send the 8pm reminder. Turning reminders off, or deleting your account, deletes it.
• Marketing preferences: Your preferences for receiving marketing from us.
• Communications: Any messages you send us via email or support channels.

4. How We Collect Your Data

• Lead capture and sign-up forms on our website
• Purchases made through our checkout (Stripe or PayPal)
• Event registrations via Luma
• Coaching call bookings via Tidycal
• Email newsletter sign-ups via Substack
• Direct correspondence with us by email or contact form
• Automatically via cookies and tracking technologies when you visit our site

5. How We Use Your Data

6. Third-Party Service Providers

We share your data with trusted third parties only where necessary to deliver our services. All processors are contractually bound to handle your data securely and in accordance with UK GDPR.

SCCs = Standard Contractual Clauses approved under UK GDPR for international transfers.

8. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes described in this policy, including for legal, accounting, and reporting requirements. In practice, we retain customer records indefinitely unless you request deletion (see Section 10). Where your data is no longer required, we will securely delete or anonymise it.

Deleting your account. You can delete your account yourself at any time: sign in, open Settings (p50c.com/settings, or Settings in the app) and choose Delete account. This permanently deletes your account and everything in it: your habit and streak history, journal, body stats and photos, community posts and comments, your profile photo, pod chat messages and photos, and course progress. A Brotherhood Pod membership bought on our website is cancelled at the same time; one bought through the App Store or Google Play must be cancelled there. We keep only the record of payments you have made, for as long as UK accounting law requires. If you cannot sign in, email support@p50c.com from the address on your account and we will delete it for you.

9. Marketing Communications

We will only send you marketing emails where you have given us explicit consent, or where we have a legitimate interest as a prior customer. You can unsubscribe at any time by clicking the unsubscribe link in any marketing email or by contacting us at support@p50c.com. Unsubscribing from marketing will not affect service or transactional communications.

10. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Ask us to correct inaccurate or incomplete data.
• Right to erasure: Request that we delete your personal data (“right to be forgotten”).
• Right to restrict processing: Ask us to limit how we use your data in certain circumstances.
• Right to data portability: Receive your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent: Where processing is based on consent, withdraw it at any time without affecting prior lawful processing.

To exercise any of these rights, email us at support@p50c.com. We will respond within 30 days. We may need to verify your identity before processing your request.

11. International Data Transfers

Some of our third-party processors are based outside the UK. Where we transfer personal data internationally, we ensure appropriate safeguards are in place, typically UK International Data Transfer Agreements (IDTAs) or Standard Contractual Clauses (SCCs) approved by the ICO, to ensure your data receives equivalent protection.

12. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. Payment data is processed directly by Stripe and PayPal, which are PCI-DSS compliant. We never store full card details on our servers.

Your journal. Only you can read your journal in P50C: it is never shown to other members or to our team, and it is encrypted in transit and while stored. You can also lock it with a passphrase. A locked journal is encrypted on your device before it is sent, with a key only your passphrase or recovery key can unlock, so nobody else can read it, including us. If you lose both, we cannot recover your entries; you can delete the locked journal and start again.

13. How to Complain

If you are unhappy with how we handle your personal data, please contact us first at support@p50c.com and we will do our best to resolve your concern. You also have the right to lodge a complaint with the UK supervisory authority:

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified to you by email or via a notice on our website. The “Last updated” date at the top of this page reflects the most recent revision. Continued use of our services after changes are posted constitutes acceptance of the updated policy.