privacy, plainly.

All of You is run by People Work Life Ltd, a company registered in England, based in Ascot, United Kingdom. We are the data controller for everything described on this page. You can reach us at rob@peopleworklife.com.

Your account — your name (any name you like), email address, and a securely hashed password.

Your reflections — the content of your sits (session conversations), journal pages, parts and their descriptions, check-ins, noticings, and any assessments you take. We treat all of this as sensitive psychological data and hold it to the strictest standard we apply to anything.

Technical records — error reports if something breaks, and anonymised usage counts (token counts, never content) so we can run the service. There are no advertising trackers and no third-party analytics scripts.

Your data is stored server-side, in a database hosted by Turso in the AWS eu-west-1 region (Ireland), encrypted in transit. It is not stored only on your device — storing it in your account is what lets you pick up where you left off on any device. No one at People Work Life reads your reflections; there are no moderators or reviewers.

To make the app work, some of your content is processed by these companies on our behalf, under data-processing agreements:

• Anthropic (US) — your session messages and journal text are sent to Anthropic’s Claude models to generate the facilitator’s responses, summaries, and gentle pattern noticing.
• OpenAI (US) — used as a fallback for conversation, and for voice: when you speak instead of typing, your audio clip is sent to OpenAI’s Whisper service for transcription. OpenAI can also provide spoken replies as a fallback.
• ElevenLabs (US) — when replies are read aloud, the reply text is sent to ElevenLabs to generate the voice.
• Turso (US company, data held in Ireland) — the database.
• Vercel (US) — hosting.
• Sentry (US) — error monitoring. Error reports are sanitised; we do not send your reflections to Sentry.

Sending content to Anthropic, OpenAI, and ElevenLabs involves a transfer to the United States. Those transfers rest on the providers’ standard contractual safeguards (the UK International Data Transfer Addendum or equivalent). Under our agreements, your content is not used to train their AI models.

We never sell your data. We never share it for advertising.

Running your account rests on our contract with you. AI processing of your reflections rests on your explicit consent — the one-time consent moment before your first AI conversation — which you can withdraw at any time by deleting your account or emailing us. Security and error monitoring rest on our legitimate interest in keeping the service working and safe.

Completed sits are deleted by our clean-up process 90 days after they finish. Everything else stays until you remove it: you can archive parts in the app, and you can delete your whole account — with everything in it — from settings. Deletion is immediate and permanent.

Under UK GDPR you can ask us for a copy of your data, ask us to correct it, delete it, restrict or object to how we use it, or hand it over in a portable format. Each sit can be exported as markdown or JSON from its own page. For anything else, email rob@peopleworklife.com and we will respond within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office (ico.org.uk).

All of You is for adults. You must be 18 or over to use it.

If this policy changes in any way that matters, we will say so plainly in the app before the change takes effect. The date at the top is always the date of the last change.