Privacy
What the Follow Through Protocol keeps and who can see it.
You’re giving the Follow Through Protocol information about something you struggle with. Here’s what we keep, how it’s used, and what you can control.
Updated October 26, 2026
Health data privacy — health information, choices, and requests
What we record
We store account details, the behaviors you choose to work on, assessment answers, planned attempts, check-ins, outcomes, Recovery records, lesson progress, reminder delivery records, membership status, and product-usage events needed to operate and improve the service. Some of this, such as assessment answers, stress, sleep, or emotional check-ins, and behavioral notes, can be sensitive. We collect it only because the service uses it to work for you.
Feedback you choose to send
If you submit feedback, we store your message, the category and area you select, your account identifier, submission time, and review status. Michael and authorized administrators can read it to fix problems and improve the Follow Through Protocol. Your private action history is not attached. If you choose to allow a reply, we include your account email for that purpose. This is separate from Founder Beta and research consent. Feedback is included in your account export and can be included in a deletion request.
What we do not do
We do not sell your personal information. We do not share it with advertisers or data brokers, and we do not use your behavioral record for targeted advertising.
Payments
Stripe processes the $49 one-time payment for new purchases and any older subscription payments. We never see or store your full card number. We store the payment, customer, and checkout identifiers needed to verify your purchase, access, and refund status. For older subscriptions, we also store subscription identifiers and billing status needed to manage those payments.
How people find and use the Follow Through Protocol
We record product events such as page visits, checkout starts, activation, setup completion, first actions, Recovery, and cancellation. If you arrive through a tagged link, we may store first-touch campaign labels such as source, campaign, or content tag. For referrals, we store only the referring site’s domain, not the full page address.
What’s saved in your browser
Sign-in storage and a separate checkout identifier support account access and checkout retries. Optional browser usage tracking starts only when you allow it. It uses a random visitor identifier, a session identifier, and campaign labels. Choose required storage only to decline it. You can reopen Privacy choices on this page and change your decision. A Global Privacy Control signal disables optional browser usage tracking. Changing this choice does not erase required billing, security, or the action records you save in the app.
Lesson videos
Loom lesson videos do not load until you choose to load one. Loading a video connects your browser to Loom, which receives your IP address and browser information and can process playback information under its own privacy policy. No assessment answers or account email are added to the embed URL. You can keep reading without loading the video.
Founder Beta
Founder Beta is optional and requires your explicit consent. When it is on, the founder can receive only specific support alerts: repeated misses on real planned attempts, a long delay returning after a miss, a long gap before your first real action, or a help request you send. It does not expose your full assessment, private Recovery text, health or safety answers, or anything recorded before you consented. Turning it off stops future alerts.
Research consent
Research consent is optional and separate from using the service or Founder Beta. Consent is never treated as permission to publish your identity or your personal story. You can change this preference in Settings at any time.
Reminder email
Reminder emails are enabled by default when you create your account. You can turn them off, choose individual categories in Settings, or use the unsubscribe link in a reminder. We use your account email for these messages. Delivery records note sent, failed, or unconfirmed messages; unconfirmed sends are held rather than automatically sent again.
Optional text reminders
If you opt in when text reminders are available, Twilio processes your mobile number, verification requests, and reminder messages. We store your verified number, consent date, opt-out status, preferences, and delivery status. Reminder texts link to the Follow Through Protocol and do not include your private behavioral notes. We do not share mobile numbers or text-message consent with third parties for marketing. You can turn texts off in Settings or reply STOP, and include these records in your data export or deletion request.
How long we keep it
We keep your record while your account exists so your history stays available to you. If you request deletion, your behavioral record is removed after review. Limited billing, transaction, security, or compliance records may be kept for as long as the payment processor, platform, or law requires.
Your choices and rights
For health-related information and Washington consumer health data rights, read the separate Health data privacy notice linked above. You can view your record in the app, download an export from Settings, correct your details, change reminder and sharing preferences, and request deletion. Deletion is reviewed before it is carried out; it is never silent or instant. Depending on where you live, you may have additional privacy rights, and we will honor valid requests under applicable law.
Service providers and security
We use service providers to run the service, including Base44 for the application and Stripe for billing, and they process data on our behalf. Access controls limit your behavioral record to you and authorized administration, and payment access is verified on the server. No system can promise perfect security.
Age
The service is intended only for adults 18 and older. We do not knowingly collect information from anyone under 18, and we will delete it if we learn we have.
Scope
The Follow Through Protocol is educational behavior-change support, not medical care, diagnosis, therapy, crisis support, or treatment. Safety answers are used to pause normal action prompts when a reported situation is outside what the service is built for.
Changes to this notice
If we change this notice in a way that materially affects how your information is used, we will tell you by email or in the app before the change takes effect. Updating a notice does not itself authorize a new use of previously collected health data. We will obtain separate consent when required before collecting, using, or sharing additional categories or using them for additional purposes.
Contact
The Follow Through Protocol is run by its founder, Michael, in Arizona. For privacy questions, data requests, or anything in this notice, email support@followthroughprotocol.com.