Privacy policy.

1. Who we are

Resist is operated by GLORIFIED LTD, company number 16773902, registered in England and Wales. Our registered office is 54 Smedley Lane, Manchester, United Kingdom, M8 8XD. We are responsible for the personal information we decide to use for Resist.

This policy covers getresist.app, our waitlist and support channels, and the Resist app features described below. The website is currently a prelaunch landing page. Sections about app accounts, subscriptions, the community and the AI mentor apply when you use those features.

2. Information we use

Your account

When you register, we process your name, email address, account identifier and sign-in information needed to create and secure your account. You can sign up using Apple, Google or email. If you choose Apple or Google, that provider supplies the account information you authorise it to share, and handles its own processing under its privacy policy.

Information you enter in the app

We process the information you choose to enter or send through a feature so that it can work. This can include your habit or task entries, reasons, progress, preferences, AI mentor messages and community content. The information required depends on the feature you use. Information sent to our app backend is handled by our infrastructure providers, including Supabase.

Community posts and messages

Content you share in the community is processed to display and deliver it, and to support filtering, moderation and reports. Information you post in an open community area can be seen by other users with access to that area. Please avoid posting information you want to keep private.

Subscriptions

Subscription services process information such as account or device identifiers, product and transaction identifiers, subscription status and paywall interactions to manage paid access and understand purchase activity. The provider that bills you handles your payment details. Please do not send card details through support or the AI mentor.

The website, waitlist and support

Joining the waitlist provides your email address and records that you requested launch and early access updates. A signup can also include its traffic source and the current page-view identifier. The contact form collects your email, optional name, selected topic and message. Messages are stored privately through Netlify Forms and sent to our support inbox at help@getresist.app. Contacting support does not subscribe you to marketing emails.

Website analytics and technical information

Our website records landing-page views, a random identifier for each page view, and the referring website hostname or a campaign source label. A visit identifier can connect a page view to a waitlist signup. It is not saved as a persistent visitor identifier. Our analytics script does not use cookies, send full referrer URLs or full URL query strings, or follow you across websites. It respects Do Not Track and Global Privacy Control.

Hosting and app service providers may process technical information, including IP addresses, device or app information, timestamps and security logs, to deliver their services and protect against abuse. Permissions on your device can be reviewed and changed in its settings; withdrawing a permission can limit the associated feature.

3. Why we use information

• To provide Resist: create and secure accounts, run the features you choose, deliver community content and manage subscriptions. Where processing is necessary to provide the service you request, we rely on our contract with you.
• To respond and protect: answer support requests, resolve problems, moderate abuse and keep our services secure. We rely on our legitimate interests in operating and protecting Resist, while considering your rights.
• With your permission: send requested waitlist updates and carry out optional processing that requires consent. You can withdraw consent without affecting earlier lawful processing.
• To meet legal obligations: handle lawful requests, required records and applicable consumer or data-protection duties.

You can ask us which lawful basis applies to a particular use of your information. If a feature needs information you do not provide, we may be unable to provide that feature.

4. The AI mentor

The AI mentor uses OpenAI. When you chat with it, your input is sent to OpenAI to generate a response. Any personal information you include in a message can therefore be shared with OpenAI. We explain this processing and request permission before sending personal information through this feature.

Please leave out passwords, payment information, medical records and other sensitive details. AI responses can be incorrect or unsuitable. The mentor provides general habit and productivity support; it is not a healthcare professional or emergency service.

OpenAI states that API data is not used to train its models by default unless the API customer opts in. Its standard abuse-monitoring logs can retain content for up to 30 days, with exceptions for legal or safety needs. Other retention depends on the API features and settings used. Deleting a Resist account does not itself instantly erase all provider records. See OpenAI’s API data controls.

5. Who helps us run Resist

We do not sell your personal information. We share information as needed to provide the service, follow your instructions, protect people and comply with law.

• Supabase: app infrastructure, account authentication and backend storage.
• OpenAI: processing inputs for AI mentor responses.
• Superwall: subscription access, paywalls and purchase-related events.
• Apple and Google: the sign-in services you choose. Apple also processes purchases made through its App Store.
• Netlify: website hosting, waitlist submissions, website analytics records and contact-form submissions.
• Our email service: receiving and answering support messages and delivering the updates you request.

Access is limited to authorised people and providers who need the information for their work. Providers processing information for us are expected to protect it under appropriate contractual and security obligations. A provider may also act independently for its own payment, authentication, security or legal obligations.

We may disclose information when legally required, to investigate abuse or protect rights and safety. If ownership of Resist changes, relevant information may transfer with the business, subject to continuing data-protection obligations.

6. International processing

Our providers can process information outside the UK or your home country, including in the United States. Where data-protection law requires safeguards for a transfer, we use the relevant legal safeguards, such as an adequacy arrangement or approved contractual terms. Contact us for information about the safeguards relevant to your data.

7. Retention and account deletion

We keep information for as long as needed for the purpose it serves. Account information is needed while your account is active. Waitlist information is needed while we operate the list and you want updates. Support and safety records are kept while needed to resolve the issue, handle follow-up, protect users or meet legal duties. We consider those needs when deciding when to delete or anonymise records.

You can use Delete account inside the app, or request deletion through our contact form or help@getresist.app. We may need to verify that a request relates to your account. Account deletion removes associated personal information from our active account systems, subject to records that must be retained for lawful security, dispute or legal purposes. We do not offer account recovery after deletion.

Some information may remain for a limited period in provider backups, technical logs or records that a provider must keep. The period depends on the provider and its configuration; for example, OpenAI’s standard monitoring retention is described above. Content copied or saved by other community members is outside our direct control. You can contact us about any remaining content connected to your account.

Account deletion does not cancel an App Store subscription. Manage any Apple-billed subscription separately in your Apple account settings.

8. Your choices and rights

Depending on where you live and the circumstances, you may have rights to access, correct, delete or receive a copy of your information, restrict its use, object to certain processing, or withdraw consent. These rights can have legal limits. Contact us to make a request; we will respond within the period required by applicable law.

You can stop waitlist updates by using an unsubscribe option in an email or asking us at help@getresist.app. You can change device permissions in your device settings. To raise a concern, contact us first or complain to the UK Information Commissioner’s Office or your local data-protection authority.

9. Young people

Resist accounts are for people aged 16 and over. If you are under 16, please do not create an account or use account-based app features. A parent or guardian can contact us to raise a concern or request deletion of a child’s information.

For users aged 16 or 17, local rules about parental permission, purchases and consent can still apply. We consider young users’ privacy and safety when operating our services. If we learn that an account does not meet our age requirements, we will take appropriate steps to remove it and handle its information.

10. Security and changes

We use reasonable technical and organisational measures to protect information, including access controls for private records. No online service can guarantee absolute security. Please keep sign-in details private and tell us about suspected misuse.

We will update this policy when our practices change. The date at the top identifies the current version. We will provide an appropriate notice of significant changes, and seek fresh permission where required.

11. Contact us

For privacy questions, access requests or deletion requests, use our contact form or email us.