1. Who we are
ToUltra ("we," "our," "us") operates the website toultra.com and the 21-Day Presence Protocol digital course. This policy explains how we collect, use, and protect your information when you visit our site, purchase our course, or interact with our AI coach.
2. What data we collect
We collect only what is necessary to provide and improve our service:
- Account data: If you purchase the protocol, we collect your name, email address, and payment confirmation. We do not store full credit card numbers — payments are processed by our payment provider (Stripe).
- Usage data: We store your course progress locally in your browser (via localStorage) — which daily exercises you've completed, your difficulty preferences, self-assessment scores, and morning check-in responses. This data stays on your device and is never sent to our servers.
- Coach conversations: When you use the AI coach panel, your messages are sent to DeepSeek's API for processing. We do not store these conversations on our servers. DeepSeek's privacy policy governs how they handle data in transit.
- Analytics: We use Google Analytics to understand how visitors use our site. Google may collect anonymized data including pages visited, time on site, and approximate location. You can opt out via Google's opt-out browser add-on.
3. How we use your data
Your data is used exclusively to:
- Deliver the course content you purchased
- Process payments and send purchase confirmations
- Improve the course based on anonymized usage patterns
- Send you course-related emails (tips, reminders) — only if you opt in
We never sell, rent, or trade your personal information to third parties.
4. Cookies and localStorage
We use browser localStorage to remember your progress, preferences, and unlock status. No cookies are set for tracking purposes beyond Google Analytics. localStorage data is stored entirely on your device — we cannot access it, and clearing your browser data removes it permanently.
5. Third-party services
We rely on the following third parties to operate:
- Stripe — payment processing (Stripe privacy policy)
- DeepSeek — AI coach responses (DeepSeek privacy policy)
- Google Analytics — site analytics (Google privacy policy)
6. Data retention
Purchase records are retained indefinitely for legal and accounting purposes. Your course progress data in localStorage persists until you clear your browser data. Coach conversations are ephemeral — we do not log or store them.
7. Your rights
Depending on your jurisdiction, you may have the right to:
- Request a copy of personal data we hold about you
- Request correction or deletion of your data
- Withdraw consent for marketing emails
- Lodge a complaint with your local data protection authority
To exercise any of these rights, contact us at privacy@toultra.com.
8. Children's privacy
ToUltra is not directed at children under 16. We do not knowingly collect data from anyone under 16. If you believe a child has provided us with personal data, contact us immediately.
9. Changes to this policy
We may update this policy from time to time. Material changes will be communicated via email or a notice on our website. Continued use of the service after changes constitutes acceptance.
10. Contact
For questions about this policy or your data, email privacy@toultra.com.