Last updated 9 August 2026.
Integrity is an accountability app. It asks you to write down what you intend to do, then asks you to prove you did it. That means it holds a detailed record of your intentions, your reasons when you fall short, and photographs you take as proof. This policy says exactly what is collected, where it goes, and how to get rid of it.
Integrity is run by one person, Pravin Parmar, trading as Integrity, at Bangalore in India. Contact: integrity@trysamantha.app.
That person is the data fiduciary under India's Digital Personal Data Protection Act, 2023, and the data controller if you are in the UK or EU and the UK or EU GDPR applies to you.
Grievances. If you are unhappy with how your data has been handled, write to integrity@trysamantha.app. The same person receives and answers those, and will respond within 30 days. If you are not satisfied with the answer you can escalate to the Data Protection Board of India, or to your own supervisory authority if you are in the UK or EU.
Account details you give us:
Things you create in the app:
Things the app derives:
Technical data:
The app does not collect location data, does not read your contacts, calendar, mail or health data, and connects to no third-party accounts. There is no advertising, no analytics, and no tracking across other apps or websites.
What you write in this app can reveal things the law treats as special. A promise, a proof photograph or a reason you give for falling short can disclose your health, your physical or mental condition, your religious or philosophical beliefs, your sex life or sexual orientation, or your trade union membership. We do not ask for any of it, and none of it is required to use the app.
Where you choose to put such information into the app, we handle it on the basis of your explicit consent, given when you create the entry that contains it. You can withdraw that consent at any time by deleting the entry, or by deleting your account. Withdrawing does not affect anything done before you withdrew.
We ask you not to write down more than the app needs, and not to photograph other people.
We do not use your content to train any machine-learning model, and we do not sell or rent your data to anybody.
Two parts of the app send your content to Google's Gemini API:
Google processes this as our provider and, under the terms that apply to the paid Gemini API, does not use it to train its models. Google may process it outside the UK and EU; transfers rely on the standard contractual clauses in our agreement with them.
Your Integrity Score, points and rank are not produced by any model. They are ordinary arithmetic over your own records, so they can be reproduced and checked.
The verification result can stop a promise being marked as proven. It decides only what your own record says. It does not affect any legal right of yours, it is not used to profile you, and it is never shared with anybody or used to make a decision about you outside this app.
You are not left with the machine's answer as the last word. You can retry, and you can email integrity@trysamantha.app to have a person look at a verification, tell us why you think it was wrong, and have it changed. We do not charge for that and we do not limit how often you ask.
If you are on the leaderboard, other signed-in users can see your display name, your avatar, your rank, your points and your streak. Your email address is shown only if you switch that on.
Nobody else can ever see a promise, a reason you gave, a character report, a reflection or a proof photograph. Moderators can clear a display name, remove an uploaded avatar, or take somebody off the leaderboard. Moderators cannot see the content of anybody's record.
You can leave the leaderboard at any time in Settings, which removes your row and makes your profile unreachable.
Nobody is given your data to use for their own purposes. These providers process it on our instructions and under a contract, and nothing beyond what each one needs to do its job:
The database and the app run on servers in India. Proof photographs and uploaded avatars are held in Cloudflare R2 and are served only through links that expire. Some of the providers above process data elsewhere, including outside India, the UK and the EU.
If you are in the UK or EU: Integrity is operated from India, so your data is held there. We are directly subject to the UK and EU GDPR because we offer the app to you, and the rights set out below apply whether or not your data sits in Europe. Where one of the providers above moves data out of the UK or EU, that transfer relies on the standard contractual clauses in our agreement with them, with the UK Addendum where it applies. Ask us and we will tell you what is in place.
Your record is kept for as long as your account exists, because looking back at it is the point of the app. Server logs are kept for up to 30 days.
When you delete your account, it is scheduled for erasure 30 days later. During those 30 days, signing in cancels the deletion. After that, your account row and everything hanging off it — promises, check-ins, reasons, verifications, reflections, character reports and your profile — are deleted from the database, and your proof photographs and avatar are deleted from object storage.
Moderation records are kept after an account is erased, with the account identifiers removed, so that repeated abuse can still be recognised. They are kept for two years from the report and then deleted.
Backups of the database are kept for 14 days and then deleted. An account erased from the live database stays in a backup until the backups it appears in have aged out, and a backup is only ever read to recover the service after a failure.
Under India's Digital Personal Data Protection Act you have the right to know what we hold about you and who we have shared it with, to have it corrected, completed or erased, to raise a grievance with us, and to nominate somebody to exercise these rights if you die or become unable to. You also have duties under that Act: do not give false particulars, impersonate somebody else, or raise a complaint you know to be untrue.
If you are in the UK or EU you have the right to access your data, to have it corrected, to have it erased, to restrict or object to how it is processed, to receive it in a portable form, and to withdraw a consent you have given. You can also complain to the Information Commissioner's Office (ico.org.uk) or your local supervisory authority, and you can do that without asking us first.
Exercising any of these is free, and we do not treat you differently for it.
We answer within one month. If a request is complex or you have made several, we may extend that by up to two further months, and we will tell you within the first month if we do.
Integrity is for adults. You must be 18 or over to have an account. Indian data protection law treats anybody under 18 as a child and requires a parent's verifiable consent before their data can be processed. This app has no way to obtain that, and it holds exactly the kind of record — photographs, health-adjacent reasons, a nightly judgement about character — that a child should not be handing to a stranger's server. So the answer is an age limit, not a consent flow.
We do not knowingly hold a child's data. If we find out that an account belongs to somebody under 18 we delete it and its record immediately, without waiting for the 30-day grace period. If you believe a child has created an account, email integrity@trysamantha.app.
Passwords are hashed with bcrypt. All traffic is encrypted in transit. Proof photographs are never publicly readable and are served only through links that expire. Access to production data is limited to the operator.
No system is perfectly secure. If you find a vulnerability, please email integrity@trysamantha.app rather than disclosing it publicly. Reporting one in good faith is not a breach of the terms of service.
If a breach happens that is likely to put your rights at risk, we will tell you without undue delay, and we will notify the supervisory authority within 72 hours where the law requires it.
The app sets no cookies and carries no tracking technology. It stores your sign-in tokens on your own device, in the secure storage the operating system provides, so that you stay signed in. The web pages that publish these documents set no cookies either.
If this policy changes in a way that materially affects you, the app will tell you before the change takes effect. The date at the top always reflects the current version.
integrity@trysamantha.app