Impact Collective LLC ("Impact Suite," "we," "us," or "our") provides websites, mobile applications, educational programs, communities, coaching-related features, and related services (collectively, the "Services"). This Privacy Policy explains what information we collect, how we use and disclose it, how long we keep it, and the choices available to you.
Some Impact Suite programs address sexual health, mental wellness, behavior change, and other sensitive subjects. Please read this policy carefully before using the Services.
1. Information we collect
The information we collect depends on the Services and features you use, how you access them, and whether an employer, school, organization, or other sponsor provides your access.
Information you provide
We may collect:
Account and contact information, such as your name, email address, telephone number, username, password credentials, age or date of birth, time zone, country, profile image, and account identifiers.
Profile and demographic information, such as gender, ethnicity, marital status, household information, employer or affiliated organization, and other information you choose to provide.
Wellness and other sensitive information, such as your focus areas, sexual-health information, check-in and inventory responses, goals, setbacks, tracker entries, wellness plans, journal entries, survey responses, and other information you enter while using the Services.
Content and communications, such as community posts, comments, messages, relationship or accountability-partner invitations, support requests, coaching communications, and feedback.
AI feature content, including prompts, messages, conversation history, feedback, and responses associated with AI-powered features such as AI Coach.
Coaching, scheduling, and session information, such as the professional you select, appointment details, meeting identifiers, cancellation information, and information needed to deliver coaching or related services.
Subscription and transaction information, such as the plan selected, subscription status, purchase history, transaction identifiers, billing contact information, and limited payment-card details received from a payment processor, such as card type, expiration date, and partial card number. Payment processors or app stores may collect full payment credentials directly from you.
Survey, promotion, and marketing information, including your responses, preferences, and communications choices.
Please do not include information in a community or other shared area that you do not want other participants to see.
Information collected automatically
When you use the Services, we and providers acting for us may automatically collect:
device, browser, operating-system, app-version, and language information;
IP address and information derived from it, such as approximate location;
login, access, and activity timestamps;
pages, screens, features, links, and content you interact with;
referring pages, campaign information, cookies, mobile identifiers, push-notification tokens, and similar technologies;
crash reports, diagnostics, performance data, and security events; and
subscription, feature-use, and engagement events.
IP addresses, cookie identifiers, device identifiers, and similar data may identify or be linked to a person or device. We do not treat them as anonymous merely because they do not contain a name.
Information from other sources
We may receive information from:
an employer, school, organization, health or wellness program, or other entity that sponsors or administers your access;
another user when they invite you to connect or share information with you;
coaches, professionals, or scheduling providers involved in a service you request;
payment processors and app stores regarding purchases, renewals, cancellations, refunds, and subscription status;
authentication, communications, support, analytics, advertising, and technology providers.
2. How we use information
We may use information to:
create, authenticate, maintain, and support your account;
provide and personalize lessons, trackers, journals, check-ins, communities, coaching, scheduling, AI features, subscriptions, and other requested Services;
process purchases, manage subscriptions, and maintain transaction records;
send service messages, reminders, security notices, support responses, product updates, educational content, surveys, and marketing communications consistent with your choices;
operate communities and user-directed connections;
understand use of the Services, measure engagement, improve features, and develop new offerings;
generate program and utilization reports for sponsoring organizations as described below;
detect, investigate, and prevent fraud, abuse, security incidents, and technical problems;
enforce our terms, protect users and the public, and establish, exercise, or defend legal claims;
comply with law, lawful process, and documented accounting, tax, clinical-record, or other legal obligations; and
perform other purposes that we explain when collecting the information or that you direct or authorize.
Where applicable law requires consent for a particular activity, we will request it separately. You may decline optional fields, but some features may not work without the information necessary to provide them.
3. AI-powered features
If you use an AI-powered feature, the content you submit and relevant conversation context are processed to generate a response. Impact Suite currently uses Amazon Web Services, including Amazon Bedrock and AI models made available through that service, for this processing. We may also retain the conversation and your feedback in your account so you can use the feature and so we can operate, troubleshoot, and improve it.
AI-generated responses may be incomplete or inaccurate. AI features are not a substitute for professional medical care, mental-health care, diagnosis, or emergency services. Do not use an AI feature for an emergency. If you are in immediate danger or experiencing an emergency, contact local emergency services.
The retention periods and account-deletion process in Section 9 apply to AI conversations and to copies held by providers processing that information for us, subject to the limited exceptions described there.
4. How we disclose information
We may disclose information in the following circumstances.
Service providers and processors
We use companies that process information for us to operate the Services. Depending on the features you use, these may include:
Cloud infrastructure, storage, and AI processing: Amazon Web Services, including Amazon S3 and Amazon Bedrock;
Customer support: Zendesk;
Product analytics: Mixpanel and Google analytics technologies;
Error monitoring and diagnostics: Sentry;
Email and communications: Iterable and Mailgun;
Payments and subscriptions: Recurly, Stripe, Apple App Store, and Google Play;
Mobile notifications, authentication, and linking: Google Firebase and platform services provided by Apple and Google; and
Scheduling and connected communications: Nylas and other providers used to arrange or deliver a requested session.
These providers receive the information reasonably needed to perform their functions. Their own privacy notices may also apply when you interact with them directly, such as when paying through an app store or connecting an external account.
Sponsoring and affiliated organizations
If an employer, school, organization, or another entity sponsors or administers your access, we may provide that organization with program-administration and utilization information. Reports may include enrollment or signup information, login or participation counts, program progress, tracker activity, and summary results from inventories or check-ins.
Reports may be aggregated, de-identified, or individual-level as described in the terms, notices, authorization, or agreement that applies to the sponsored program. Removing a name or account number does not always make information anonymous, particularly in a small group. Contact the program sponsor or info@impactsuite.com if you have questions about the reporting that applies to your program.
At your direction and in shared features
We disclose information when you ask us to, such as when you post in a community, communicate with another participant, invite an accountability partner, work with a coach or professional, or connect a third-party service. People who receive information at your direction may save or further disclose it under their own practices.
Legal, safety, and business purposes
We may disclose information when we reasonably believe it is necessary to comply with applicable law or valid legal process; investigate fraud, abuse, or security incidents; enforce agreements; respond to support requests; or protect the rights, property, health, or safety of Impact Suite, our users, or others.
We may also disclose information in connection with a merger, financing, acquisition, reorganization, bankruptcy, or sale of all or part of our business, subject to appropriate confidentiality and legal requirements.
Analytics, advertising, and the meaning of “sale” or “sharing”
We use analytics and, on some websites, advertising technologies to understand traffic, measure campaigns, and improve our Services. These technologies may receive online identifiers, device information, approximate location derived from IP address, and website or app activity.
Some privacy laws may define certain disclosures for advertising or analytics as a “sale,” “sharing,” or targeted advertising even when no money changes hands. To ask about or exercise an applicable opt-out right, email info@impactsuite.com.
5. Cookies and similar technologies
Our websites and Services may use cookies, local storage, software development kits, pixels, and similar technologies to keep you signed in, remember settings, operate features, understand use, diagnose problems, secure the Services, and measure communications or campaigns.
Browser and device controls may allow you to block or delete some of these technologies. Blocking them may affect login, saved preferences, and other Service functions. Mobile operating systems may also provide controls for permissions, notifications, and advertising identifiers.
6. Communications and choices
You can unsubscribe from promotional email by using the unsubscribe link in the message. Even if you opt out of promotional messages, we may still send non-promotional communications, such as account, transaction, security, support, and deletion-request notices.
You may manage mobile push notifications through your device settings. You may update certain profile information and preferences in the Services or contact us at info@impactsuite.com.
7. Privacy rights
Depending on where you live, you may have the right to request access to, correction of, deletion of, or a portable copy of certain personal information; to object to or restrict certain processing; to withdraw consent where processing is based on consent; and to opt out of certain sales, sharing, profiling, or targeted advertising.
To submit a privacy request, email info@impactsuite.com and describe the request. We may take reasonable steps to verify that you control the relevant account. An authorized agent may submit a request where permitted by law, but we may require proof of authority and verification of the account holder. We will not discriminate against you for exercising an applicable privacy right.
Rights are subject to applicable law and exceptions. If we deny a request, you may have the right to appeal by replying to our decision or contacting us at the email above.
8. Children’s privacy
The Services are not directed to children under 13, and children under 13 may not create or use an Impact Suite account. We do not knowingly collect personal information from children under 13. If we learn that we collected personal information from a child under 13, we will take steps to delete it. A parent or guardian who believes a child under 13 has provided information may contact info@impactsuite.com.
Programs made available to teenagers age 13 or older may have additional notices, permissions, or age requirements.
9. Retention and account deletion
Retention
We keep information for the periods or purposes described below. A deletion request may shorten those periods, subject to the limited, documented exceptions in this section:
Account information and user-created sensitive content: We retain account information, journals, check-ins, goals, tracker entries, wellness plans, community content, coaching-related content, and AI conversations while your account is active and while the information is needed to provide the feature. Through the account-deletion process below, we delete this information or de-identify it so it can no longer reasonably be linked to you, subject to the limited exceptions in this section.
Routine application, access, crash, and diagnostic logs: 30 days, unless a limited portion is needed longer for a documented security investigation, legal hold, or other legal obligation.
Security records: 90 days ordinarily. We retain a limited subset longer only for a documented investigation or applicable legal obligation and remove it when that purpose or obligation ends.
Identifiable product analytics: 90 days. We may retain aggregated information longer when it no longer identifies or can reasonably be linked to you.
Support tickets: 12 months after the ticket is resolved, subject to earlier deletion when requested and unless a documented exception applies. We may remove sensitive attachments or content sooner.
Backups: Data deleted from active systems may remain in restricted backup copies for up to an additional 90 days. Backup copies are maintained for recovery and are not used for ordinary business purposes.
Billing, tax, legal, and clinical records: We retain only the minimum information required for the period applicable to a documented accounting, tax, legal, legal-hold, fraud-prevention, or clinical-record obligation. These obligations do not justify retaining unrelated journals, AI conversations, or other wellness content.
For categories governed by a purpose or obligation rather than a fixed period, we consider the amount and sensitivity of the information and review whether continued retention remains necessary. An exception does not extend the retention of unrelated information.
How to request account and data deletion
To request deletion of your Impact Suite account and associated personal information:
Email info@impactsuite.com with the subject line “Account deletion request.” Include the email address associated with your account. Never send your password. Do not include journal entries, health information, or government identification in the initial request; if additional verification is necessary, we will explain what is needed and how to provide it securely.
In the Impact Suite mobile app, go to Settings → Account → Delete Account → Contact Support to initiate a request through support.
We will acknowledge the request within 2 business days. After any reasonably necessary identity verification, we will delete the account and associated personal information from our active systems and work with applicable service providers to complete deletion from their active systems within 30 calendar days of the original request. Verification does not restart that period. If an applicable legal requirement or legitimate security or fraud-prevention need requires us to retain limited information, we will explain the category and reason where permitted. We will notify you when active-system deletion is complete and identify any remaining backup period or justified exception.
Remaining backup copies will expire within an additional 90 days, meaning deletion from backups may take up to 120 days from the original request. If a backup is restored during that period, we will take steps to prevent deleted information from returning to ordinary use.
We may keep a limited record that a deletion request was received and completed, without retaining the deleted account’s sensitive content, when needed to demonstrate compliance, prevent fraud, or honor the request.
Deactivation is not deletion. A deactivated account may be reactivated and its information may remain stored. To delete the account and associated information, use the process above.
Deleting an Impact Suite account may not automatically cancel a subscription billed by Apple, Google, or another third party. Follow that provider’s cancellation instructions to prevent future charges. The need to manage a subscription separately does not change the date on which we received your deletion request.
10. Security
We use administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, and disclosure. No security measure or method of transmission is completely secure, so we cannot guarantee absolute security.
11. Third-party services and links
The Services may link to websites, apps, payment platforms, app stores, scheduling tools, or other services that we do not control. This Privacy Policy does not govern a third party’s independent handling of information. Review the third party’s privacy notice before providing information directly to it.
12. Changes to this policy
We may update this Privacy Policy to reflect changes in the Services, technology, our practices, or legal requirements. We will post the updated policy and revise the effective date. When required by law, we will provide additional notice or obtain consent before a material change takes effect.
13. Contact us
For privacy questions, concerns, rights requests, or account-deletion requests, contact:
Impact Collective LLC
1525 W 2960 S
Logan, UT 84321
United States
Email: info@impactsuite.com