Continuity Privacy Policy
Who we are. Continuity is built and run by Ambitious Peace Global Ltd, registered in England and Wales, company number 16461094. We're the "data controller" for your information, which means we're responsible for looking after it. Questions, requests, complaints, anything: hello@ambitiouspeace.com.
What we collect and why.
Your email address. We ask for your email address first, before anything else, and create your account when you enter the one-time code we send to it, so everything you add is saved to your account from the start. No passwords. We hold your email so you can log in and so we can send you those codes and links. Legal basis: performing our contract with you.
Your photo, if you add one. A photo is optional. If you choose one, we keep that one picture to show when you open Continuity and in the small circle at the top of the app. Before it leaves your device we shrink it and remove the hidden details cameras add, such as where and when it was taken. It is stored privately with Supabase, our database provider in London, where only your signed-in account can reach it; there is no public link to it, and we never send it to our AI providers. Removing it in Account deletes it straight away, and deleting your account deletes it too. Legal basis: your consent, which you can withdraw at any time by removing it.
What you tell Continuity. Your brain-dumps, tasks, projects, goals, routines, notes, deadlines, your working hours and availability, the days you keep free, and your answers to the setup questions. This is the product; we process it to sort your priorities. It may include personal details about your life, family and work, because that's what real to-do lists contain. While you are still typing a dump, the text stays on your own device until you confirm it. Clearing your browser data clears it. If you start a dump and never come back to finish it, we delete the saved draft after 30 days. Once a brain dump is sorted, we keep its text with the tasks it made, so you can read back what you said and nothing is lost in the sorting. We also keep the parts Continuity heard but did not turn into tasks, in your own words, and anything you said no to. You can read and delete any brain dump yourself in My World → Context → What I said (and from Account → Your data & privacy). We keep each one for 12 months, or longer while a task made from it is still open, and then delete it. All of them are deleted with your account. Legal basis: performing our contract with you. Before your first brain dump, Continuity shows you how it uses AI and asks you to agree to that processing, with a tick box of its own. Continuity cannot work without it, so if you decline you leave, and nothing you have said is sent to an AI provider. We keep a record of your decision: which wording you saw, its version, and when, for as long as your account exists. You can withdraw at any time in Account → Your data & privacy. That stops further AI processing from then on; it does not delete your workspace or change your plan, and it does not undo processing that has already happened.
Sensitive information (special category data). Some information carries extra protection in law: health and treatment, race or ethnicity, religion or beliefs, politics, trade-union membership, sex life or sexuality, and genetic or biometric data. We do not ask you for any of it, and no part of Continuity needs it to work. But a real list can contain it. A hospital appointment is a task like any other, so we do not pretend it never appears. About you: we do not ask you for a separate agreement about sensitive information, and nothing in Continuity treats it differently. If you include it, it is handled exactly like everything else you write: used only to run Continuity for you, and kept and deleted on the same terms as the rest of your content, as described below. About other people: if you write something sensitive about someone else, they have not agreed to anything, and we cannot ask them. We keep entries like that to what you chose to write and nothing more, and we do not use them for anything beyond running Continuity for you. We would rather tell you this plainly than imply the question does not arise. We do not scan or classify what you write in order to find sensitive information. Deciding whether a sentence is sensitive would mean processing it as sensitive data to find out, which is more of exactly the thing we are trying to do less of.
Your voice, if you speak your list. When you use the mic, in the first brain-dump or anywhere in the app, Continuity records the audio while you talk and sends it to Speechmatics, a UK-based speech-to-text service, to turn your words into accurate text. That text is what gets sorted. We use Speechmatics through its EU endpoint, so processing stays in the EU. Speechmatics retains batch transcription output for up to seven days to allow retrieval, after which it is deleted. Continuity requests deletion after transcription is complete. We also request deletion straight away if you discard a recording or it fails. If a recording takes too long to turn into text, we keep it for up to 30 minutes so you can try again without sending it twice, then request its deletion. If deletion fails, we record the outstanding deletion rather than silently dropping it. Speechmatics does not use our customer audio or transcription data for model training unless we opt in, and our account is opted out. They act as our processor, and we hold their written confirmation of the above. Speaking is always optional; typing and pasting work just as well. Legal basis: our legitimate interest in turning your voice into text when you choose to speak, which you can avoid at any time by typing instead. So that nothing you say is lost if the app closes or your phone runs out of battery, the recording is also kept on your own device while you speak. It stays on your device and is not sent anywhere until you choose to turn it into text. It is deleted as soon as it has been turned into text or you discard it, any recording you never finish is deleted the next time you open Continuity after 7 days, and deleting your account deletes it from that device; on any other device, it goes after 7 days. So that your words are ready the moment you stop, your voice is also sent while you speak to Speechmatics' real-time service, through the same EU endpoint. The real-time service does not keep the audio or the text. If your words do not come back from it, the recording is sent for transcription as described above.
Google Calendar data, if you connect it. Continuity asks Google for read-only access to your calendar, so it can plan your tasks around what's already there. We use only: your calendars' names, event titles, start and end times, whether an event is all-day, and, for a meeting, whether other people are invited and whether you've declined it. We ask Google for only the details Continuity needs: the name of each calendar, and for each event its title, date and time, whether other people are invited, and whether you’ve declined. Google does not send us event locations, descriptions, or the names and email addresses of other guests. We never create, edit or delete your events. Your events are read live from Google when the app needs them and shown to you. They are not stored in our database, with one exception: when a meeting is coming up (a timed event on a calendar you own, with at least one other person invited, that you haven't declined), Continuity can add it to your list as a task, so you can prepare for it. That task keeps the meeting's title, date and time, and a scrambled reference to the event so the same meeting is never added twice. Nothing else from the event is kept. It sits in your list like any task: you can edit, move or delete it, and a meeting you delete is never added again. If the meeting moves or is cancelled, a task you haven't changed follows it or is removed. Nothing from your calendar is ever sent to our AI provider, including tasks made from your meetings, even after you edit them. To keep your connection working, we store one credential issued by Google (a refresh token) together with your Google account email, in our UK database, protected by strict per-user access controls that we test automatically and by encryption at rest. Short-lived access tokens are never stored. Once an hour, our server checks that this credential still works. That check reads nothing from your calendar. If your connection has stopped working (for example, you removed our access from your Google Account), we stop using it straight away and tell you once, in the app and with a single notification if you have notifications on, so you can reconnect. We keep only when it stopped working and whether we've told you. When you disconnect in Account, we ask Google to revoke our access, delete the stored credential, and remove any task made from your calendar that you haven't changed. Tasks you have edited are yours, and stay. Continuity's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In plain English: your Google data is never used for advertising, never used to train AI models, never sold, and never passed to anyone except as needed to show you the feature you asked for. Legal basis: your consent, which you can withdraw at any time by disconnecting.
Your name and preferences. Your name if you give one, and the settings you choose, such as your theme, your notification switches, their times and days, and the words for your daily start, so Continuity works the way you asked. Legal basis: performing our contract with you.
How you use the app. Basic activity like tasks completed and resets, stored in our database and visible only to you, so features like your history work. Also your timezone, so dates and deadlines are drawn on your local day and anything we time for you arrives at the right hour. Legal basis: performing our contract with you.
Suggestions you send us. If you use Suggest a feature, we keep what you write with your account and the date, so we can read it and act on it. Our founders read every suggestion, with your name, on a private page inside Continuity that only they can open. It is deleted with your account. Legal basis: our legitimate interest in improving Continuity.
Messages you send us for help. If you use Still stuck? Message us in Help, we keep what you write with your account and the date, together with the type of phone or computer you use, your browser, whether you opened Continuity from your home screen, the app version, whether the microphone and notifications are allowed, and a list of recent problems on that device (what went wrong and when, never your tasks or brain dumps). It is shown on a private page inside Continuity that only our founders can open, and they get an email saying a message has arrived; the email never contains your message. They reply to you by email. It is deleted with your account, or after 12 months. Legal basis: our legitimate interest in helping you when something goes wrong.
Invite links. Each account has its own invite link and invite code. If someone signs up through yours, we record that their new account came through your link and when, so we can count sign-ups from each link. We don't tell them anything about you, and we don't tell you who they are. There is no reward. The record is deleted with their account. If you open someone's invite link, your device remembers its code for up to 60 days, and the code is saved to your account when you ask for your sign-in code, so it is not lost if you finish signing up on another device. Legal basis: our legitimate interest in understanding how people find Continuity.
Notifications. Continuity can send you three notifications: a Morning digest, What matters now, and an Evening reflection. All three are on when you sign up. You choose which to keep, and you can change any of them, and their times and days, at any time in Account → Notifications. We ask your phone for permission once, at sign-up, when you set your preferences. If you decline, nothing is sent and nothing is stored until you allow notifications in your phone settings. Once you allow them, we store a push subscription for each device you enable (a credential your browser issues so a notification can reach that device) along with basic device information such as your browser type, in our UK database, protected by the same strict per-user access controls as the rest of your data. Each notification travels through the push service your browser or phone uses (run by Apple, Google or Mozilla). A notification is a short message and never contains the title of a task or event. The Morning digest arrives at the time and on the days you choose (6:30am, Monday to Friday, until you change them). It is one short line about your day, written fresh from your own list: for example, how many things you finished yesterday, how many are rolling over, a deadline coming up, or something that needs preparing. Our AI provider, Anthropic, writes that line from counts and dates only, never from your name or the titles or notes of your tasks. What matters now is sent only when a deadline is genuinely at risk: a heads-up when it is time to start something so it does not become a scramble, or a last chance when only today is left. It is never sent before your morning time. At most one a day, plus one more only if a deadline becomes a same-day last chance. It never repeats once you have acted. The Evening reflection arrives at the time and on the days you choose (8:30pm, Monday to Friday, until you change them). It asks what went well and what to carry over. If you reply, see “Your evening reply” below. We never send one for every deadline, only when one is genuinely at risk. We never send a notification to ask how much you have in you (Continuity asks that when you open it), and never for advertising. You can turn any notification off at any time in Account → Notifications or in your device settings. When you turn them all off, we delete the stored subscription for every device and cancel anything waiting to be sent. Legal basis: your consent, which you can withdraw at any time.
Your evening reply. When you reply to the Evening reflection, by typing or speaking, your reply is handled exactly like a brain dump (see “What you tell Continuity” and “Your voice, if you speak your list”). Before anything changes, Continuity shows you what it will change: things done, things moved to tomorrow, notes added, new tasks. Nothing is saved to your list until you tap Yes. If you close it instead, nothing changes and your reply is not kept. After you tap Yes, you see one short line of acknowledgement, written by our AI provider and shown once. It is not stored. Legal basis: performing our contract with you.
When notifications arrive. For your first 14 days, notifications arrive at exactly the times you chose. After that, unless you choose exact times, Continuity learns when you usually first and last open the app, and sends the Morning digest and Evening reflection just before then, so they arrive when you are most likely to see them. To do this we keep the times of day you opened the app, on your account, for 28 days. We use only when you opened it, never what you did. You can switch to exact times at any time in Account → Notifications. When you do, or turn notifications off, or after 28 days, those open times are removed from your account and kept only in the anonymous form described in “How we improve Continuity”. Legal basis: our legitimate interest in sending notifications when they are useful to you.
Reminders to prepare. If you switch on “Remind me to prep” for a task, Continuity adds a Prep step inside that task, due the day before (or the last working day before it, if that day is kept free). You can give it its own date, time and notes; they stay in your list like any task’s and are never part of a notification. Meetings that arrive from your connected calendar have it switched on; you can switch it off on any of them. The Morning digest may mention that something needs preparing, but never says what. This uses only your own list, to plan your time. Legal basis: performing our contract with you.
How we improve Continuity. To understand how Continuity is used, we keep a small set of anonymous signals: how many things were marked done or carried over, when a reply was sent and roughly how long it was, a general theme from a fixed list, whether Low or High was chosen, and the day and hour the app was opened. These signals carry no name, no email address, no link to your account and nothing you wrote. Your words, including your evening replies, are never kept for this. We keep these signals for 12 months. Legal basis: our legitimate interest in improving Continuity.
Reminder emails, if you opt in. If you turn reminder emails on, and only then, we may send you the occasional short email when you have been away for three days or more, so your list does not quietly get lost. At most one each time you are away, and never more than one in 14 days. We work out that you have been away from your own activity in the app, never by reading your content, and we never send one to an empty account. These go through Resend, the same provider that delivers your sign-in emails, and are a separate, optional stream from those sign-in messages. Every one carries a one-click unsubscribe link, and you can turn them off any time in Account → Notifications. Legal basis: your consent, which you can withdraw at any time.
If you don't finish setting up. If you start setting up Continuity but don’t finish, and we can’t reach you with a notification, we may email you to help. That’s one email, and one last reminder three days later. After that, we won’t email you about it again. Legal basis: our legitimate interest in helping you finish setting up.
Technical information. Like almost every online service, the providers that run our infrastructure process some technical data on our behalf when you use Continuity (things like your IP address, browser and device type, and timestamps) in their service and security logs. We don't use any of this for advertising or profiling. Legal basis: our legitimate interest in keeping Continuity secure and working.
Records of your choices. When you agree to something or change your mind, for example about reminder emails, we keep a record of what you chose and when, so we can show what you agreed to. Legal basis: our legal duty to be able to prove consent, and our legitimate interest in keeping accurate records.
Human access. Our team does not read your content or your Google Calendar data, except if you ask us to for a specific support issue, if it's necessary to investigate a security incident or abuse, or if the law requires it.
Who helps us run Continuity (sub-processors). A small number of trusted services process data on our behalf: Supabase (our database, hosted in London, UK), Netlify (serves the website and runs our functions), Anthropic (the AI behind five things: turning your brain-dumps and your evening replies into sorted tasks, understanding the answers you give about the shape of your week when you first set Continuity up, drafting a message when you ask for help chasing someone, writing your Morning digest line, and writing the short line that closes your Evening reflection. The text you dump or reply with is sent to Anthropic for processing, together with the titles, dates, status and project names of your open tasks so it can tell you when it mentions something you already hold; the answers you give about your week during setup are sent the same way, along with the names of your projects; the task title and any notes you ask us to draft from are sent when you ask for a chase message; the Morning digest line is written from counts and dates only; and the Evening reflection’s closing line from your first name and the titles of what you finished, carried over or added that evening. Tasks made from your calendar are never sent. None of it is used to train their models), Speechmatics (turns your voice into text when you use the mic, processed through its EU endpoint, not used for model training, and transcription output retained for up to seven days before deletion), and Resend (delivers your sign-in emails, the setup reminders described above and, if you opt in, the occasional reminder email). If you connect your calendar, Google provides that data under your Google account permissions.
How we keep Continuity working and improve it. Like most apps, Continuity keeps records of how it is used, so we can keep it working and make it better. This applies to everyone who uses Continuity. We record how you opened the app (from one of our notifications, or by yourself) and when; what you do in it, such as starting a brain dump, adding and completing tasks, your Headspace answer, and which days you used it; when something goes wrong for you, such as a recording that didn’t turn into text, a brain dump that couldn’t be sorted, changes that didn’t save or a screen that couldn’t load; and, each time we use our AI or speech-to-text provider for you, which feature it was for, how much was processed (the amount of text, or the length of a recording) and what it cost us. These records never contain what you wrote or said: no brain-dump text, recordings, transcripts, task titles or notes. We also record the type of phone or computer you use, your browser, whether you opened Continuity from your home screen or in a browser, which version of the app you have, and whether the microphone and notifications are allowed. We use these only to fix problems. Nothing about where you are or your network is recorded. We use them to fix what breaks, to see whether people get started and keep coming back, to notice when someone may be stuck so we can help, to keep our costs under control, and to decide what to build next. Only our founders can see them, on a private page inside Continuity. We never sell or share them. They’re stored with the service providers listed in this policy. Our lawful basis is our legitimate interest in keeping Continuity working and improving it for the people using it. You can object at any time by emailing us at hello@ambitiouspeace.com. We keep your activity and error records for 24 months after you last use Continuity, and the usage and cost records for 13 months. When you delete your account, your activity and error records are deleted with it, and the usage and cost records keep only the numbers, with nothing that links them to you.
Where your data lives, and transfers. Your account data is stored in the UK (London). Some of our providers process data outside the UK, for example when your dump text is processed by Anthropic, a US company, or when our website and email providers route traffic. Where that happens, transfers are protected by legally recognised safeguards such as UK adequacy regulations or approved standard contractual terms with those providers.
How we protect it. Your data is encrypted in transit and at rest, stored in the UK, and locked down so each user can only ever access their own information, a control we test automatically.
How long we keep it. For as long as you have an account. If you disconnect your calendar, the stored Google credential is deleted at that moment, along with any task made from your calendar that you haven’t changed; if you turn notifications off, the stored push subscriptions for every device are deleted at that moment. When you delete a task or a corner, it stays in Recently deleted for 30 days so you can bring it back, and is then deleted for good. If you delete your account, your data is removed from our live database straight away, and any copies in our routine backups fall away within up to 8 days as those backups are replaced. An unfinished brain-dump draft is deleted after 30 days without being touched, whether or not you ever return to it. When you finish a task we keep a record that you finished it; 30 days later that record keeps only the date and the counts, and the task’s words are removed. Starting again (Account → Your data & privacy) removes your brain dumps and the words from your finished-task records straight away. We may keep minimal records longer where the law requires it.
Your rights. Depending on the circumstances and applicable law, you may have the right to ask for a copy of your data, ask us to correct it, restrict or object to how we use it, take it with you in a portable format, withdraw consent (like disconnecting your calendar), or ask us to delete everything. To ask for a copy of your data, including one you can take elsewhere, or to use any other right, email hello@ambitiouspeace.com. We'll reply within one month; if a request is complex we may take up to two more months, and we'll tell you why. To delete everything yourself, use Delete my account in Account → Your data & privacy; deletion means your account and all your content, permanently. Withdrawing consent does not undo processing that has already happened.
Complaints. If you are unhappy with how we have handled your data, please tell us: email hello@ambitiouspeace.com with "Complaint" in the subject. We will acknowledge your complaint within 30 days, look into it without undue delay, and tell you the outcome. You also have the right to complain to the UK's Information Commissioner's Office at any time, whether or not you have complained to us first (ico.org.uk).
Children. Continuity is for adults running their lives and businesses. It's not directed at anyone under 18, and we don't knowingly collect children's data. If you think a child has an account, tell us and we will delete it.
Cookies and local storage. Continuity sets no cookies. We use local storage on your device to keep you signed in and remember small preferences, essential to make the app work, and to keep a recording safe while you speak, as described above. Nothing more. No advertising cookies, no tracking pixels. If you connect Google Calendar, Google's own sign-in tool loads from Google and may set Google's cookies, under their own policies.
If something goes wrong. If a data breach ever affects you, we'll tell you and the ICO as the law requires.
Changes. If this policy changes meaningfully, we'll flag it in the app, not bury it.