Privacy

What Laurels collects.

Laurels keeps a private record of what you set out to do and what happened. This notice covers this website, its waitlist and the Laurels iPhone app. It says what is kept about you, why, who else handles it, and how to have it removed.

The short version

Everything you record in Laurels is private. Nothing is shown to other people, and nothing in the app shares it.
Laurels does not ask for your location, your contacts or your calendar.
When you speak, your voice is turned into text. The recording is not kept.
The app and this website have no advertising or analytics tools in them, and we do not sell your information.
You can delete your account in the app. Below is what that removes and what it leaves.

Who is responsible

Laurels is a product of CSXII LTD, registered in England and Wales (company number 17156821), 128 City Road, London EC1V 2NX. CSXII LTD decides why and how your information is used, which under UK data protection law makes it the data controller. Where this notice says "we", it means CSXII LTD.

Write to hello@earnlaurels.com about anything in this notice.

How you may use Laurels, and what each of us is responsible for, is in the Terms of Use.

The website and the waitlist

If you type your email address into the form on the home page and press the button, we store that address, the date you sent it, and the fact that it came from this website. We do not ask for your name and there is no other field on the form.

We store it for one purpose: to email you once, when Laurels opens. We will not send you anything else, we will not share the address with anyone for their own use, and we will not sell it. The lawful basis is your consent, which you gave by pressing the button and can withdraw at any time by asking us to delete the address.

We keep it until Laurels opens and that one email has been sent, or until you ask for it to be removed, whichever comes first.

The website has no analytics, no advertising and no tracking pixels, and it sets no cookies. Nothing on it counts you, profiles you or follows you to another site.

Three companies touch the site itself. Vercel hosts it and, like any web server, processes your IP address and browser details to send you the page. Supabase receives your sign-up when you press the button and stores the waitlist, in Frankfurt, Germany. Google Fonts supplies the site's typeface, so your browser asks Google for it and Google sees your IP address when it does.

What the app keeps, and why

Laurels keeps this so that it can do what you asked of it: offer you Quests, and hold the record of what you did about them.

Your account. You sign in with Apple, or with Google or a code sent to your email where the app offers them. We receive the email address you sign in with. With Apple, that can be the private relay address Apple gives you. With Google we also receive your basic profile details. You give your date of birth so that Laurels can check you are 18 or over. We also hold a time zone and a language setting for your account, so that dates and times make sense.
A random reference. Everything else is filed under a random account reference, not under your name or email. In our database, one record links that reference to your sign-in. Deleting your account removes it.
What you tell Laurels when you set up. Your goal, in your own words, up to three lines, and if you choose, how you would measure it and a month to aim for. Someone you admire, if you pick one, and the qualities you choose for them. Where you place yourself on a handful of scales, and how far you are willing to be stretched, seen, spend and travel.
The box for things you never want to be asked to do. It is optional and holds up to 200 characters. We do not ask about your health. Whatever you write, for example an injury or that you don't drive, is used to leave out Quests that don't fit you and to shape the ones written for you. Before it is saved, the app asks your permission for Laurels AI to read it (see below). We keep the note apart from the rest of your information and never show it to anyone but you. You can withdraw your permission at any time by clearing the box.
What you record. For each Quest you take: which of the pair you chose, the time you said you would do it, whether it happened, and whether it was harder or easier than you expected. If it did not happen, the reason you picked from a list, and any words you added. The sentence you record about what happened, up to three more lines if you write them, and a photo if you add one. If you flag a Quest as not feeling right, or turn one down, we keep that and the reason you picked. We also keep your answers to the short warm-up quiz that comes before some Quests, and the Laurels awarded. Together these make your Chronicle.
Notifications, if you turn them on. To tell you a new Quest is ready at the hour you chose in Account → Notifications, we keep a code that lets us reach your phone (a push token), with that hour and whether the notification is on. The notification says only that new Quests are ready, never what they are. The code is removed when you sign out, when you delete your account, or when the app is removed from your phone. Turning the notification off in Account stops it, and the code is kept until one of those happens.
If you change something. You can edit your goal, the box for things you never want to be asked to do, your Campaign names and the words of a Chronicle entry. When you edit a Chronicle entry, the earlier wording is kept as well, until you delete your account.
Photos. You choose a photo from your photo library. Laurels does not use your camera. The photo is stored privately, and the app opens it for you with a link that expires after ten minutes. Laurels does not edit the photo, so anything saved inside it, such as where it was taken, goes with it.
Your subscription. Subscriptions are not on sale yet. When they are, you buy one through the App Store: Apple takes the payment and we never receive your card details. RevenueCat, which manages subscriptions for us, identifies you by your random account reference and tells our servers whether your trial or subscription is active and when the current period ends. We keep that.
Reminders. If you turn reminders on, Laurels asks your iPhone to show them at the time you named. They are set on your phone, and Laurels does not send them from a server.
Error reports. When something goes wrong on our servers, a report goes to Sentry. It says which part failed, gives the technical error and carries your random account reference. It is built not to include your goal, your reflections or your email address, and Sentry's software is told not to attach IP addresses or request headers.
On your phone. Your sign-in is kept in the iPhone keychain. A copy of recently loaded information, such as a page of your Chronicle, is kept in the app for up to a day, so that it opens quickly, and is cleared when you sign out or delete your account. A few small settings, such as which screens you have already seen, stay on the phone until you delete the app.

The microphone. Laurels uses your microphone mainly to turn what you say into text, so you can speak instead of typing. It may also use it in other features, where that use is part of the feature and plain to you when you use it. Speech is turned into text by Apple's speech recognition. Laurels does not keep the recording.

Where language models come in

Laurels uses language models from Anthropic in four ways. In the app this is called Laurels AI. None of them is given your name or email address.

Reading your goal. The words of your goal, and your measure if you gave one, are sent to a model that turns them into short tags and phrases, such as "five-a-side". That is how a Quest can be about your life and not a template. They are sent again only if you change them. Nothing else you write is sent, apart from the box below: not your Chronicle entries, your reasons or your photos.
Reading the box for things you never want to be asked to do, if you write in it and give your permission. The note is sent to a model that turns it into a few short labels from a fixed list, such as "Doesn't drive". You can see the labels in Account and remove any that are wrong. It is sent again only if you change the note.
Writing your Quests. When a Quest is written for you, the model is given the focus and time frame of your goal and those short phrases. It is never given your goal as you wrote it. If you wrote in the box, the model is also given those labels and your note, so that the Quest fits you, and the safety check also asks whether you can do it. Quests are checked for safety before anyone sees them.
Suggesting qualities. If you pick someone you admire, their public name and a one-line public description go to a model on their own, so that it can suggest qualities people admire in them. Nothing in it says who asked, and it is done once for each public figure.

Who else handles it

Supabase stores your information in Frankfurt, Germany (the database, your photos and your sign-in), and runs the servers behind the app.
Anthropic runs the language models described above.
Expo delivers notifications to your phone. It receives the push token and the notification's words, and passes them to Apple.
Apple provides Sign in with Apple, speech recognition when you speak, notifications to your iPhone, and the App Store, which takes your payment. The app does not ask Apple to keep speech recognition on your phone, so Apple's own terms for speech recognition apply.
Google provides Sign in with Google, if you use it, and the website's typeface.
RevenueCat manages subscriptions once they are on sale, as described above.
Sentry receives the error reports described above.
Wikimedia, which runs Wikipedia and Wikidata. If you search for someone you admire, the letters you type are sent to Wikipedia, with your IP address, to find matches. No account details go with them, and the pictures in the results load from Wikimedia too. Our servers also read the public description of the person you choose from Wikidata.
Vercel hosts this website.

Some of these companies are based outside the UK and can handle information outside the UK and the European Economic Area. UK law allows that only with safeguards, such as a UK adequacy decision or approved contract terms with the company. Ask us at the address above which applies to any company on this list.

How long it is kept

Your Chronicle, your photos, your goal and your set-up answers are kept for as long as you have an account, and are removed when you delete it.
Your voice is not kept. Only the text it becomes is.
A waitlist address is kept as described in the waitlist section above.
What stays after you delete your account is described below. We have not set an end date for it.
Error reports and server logs are held by Sentry and Supabase on their own schedules. We have not set a different one. Vercel holds this website's server logs on its own schedule.

Deleting your account

In the app, go to Account, then Your data, then Delete your account.

What goes. The words you wrote about your goals and about each Quest, and the short phrases drawn from them, including earlier versions of anything you edited. Your photos. The words you added to a reason. The name of the person you admire and the qualities you added. Your Campaign names. The box for things you never want to be asked to do, and anything Laurels set from it. Your quiz answers. Your date of birth, and the one record that links your account reference to you.

What stays. A record that each Quest happened: the dates, how it ended, the Laurels awarded, and the numbers and settings Laurels used to choose Quests for you. The Quests that were written for you stay too, and can contain the short phrases drawn from your goal. All of it is filed under the random account reference, and apart from those phrases it holds none of the words you wrote. With the link to you removed, nothing in our database connects it to you. It stays because Laurels does not rewrite the history of the Laurels it has awarded.

What does not go. Deleting the account does not end your subscription. You do that in the App Store. It also leaves the sign-in record held by our sign-in service, which is your email address or your Apple or Google identifier. Write to us and we will remove that too.

Why we are allowed to use it

Your consent, for the waitlist, and for the box for things you never want to be asked to do, which you give with the switch under it. You can withdraw consent at any time.
A contract with you, for what the app needs in order to work for you: your account, Quests, the Chronicle, photos, voice to text, your subscription, reminders and notifications, and the language model steps above, apart from the box.
Legitimate interests, for keeping Laurels working and safe: error reports, the review of Quests that people flag and of a sample of the rest, and the website's hosting. We keep these to what that needs, and you can object to them.
The law, where we must keep or share something, or answer you when you use your rights.

When you flag a Quest as not feeling right, a person reads that Quest. The review holds the Quest and not your name.

Your rights, and how to use them

Under the UK GDPR and the Data Protection Act 2018, you can ask for a copy of what we hold about you, ask for it to be corrected, ask for it to be deleted, ask us to limit how we use it, object to a use that rests on our legitimate interests, and ask for what you gave us in a form you can reuse. Where we rely on your consent you can withdraw it at any time. That does not undo what was done before you withdrew it.

Write to hello@earnlaurels.com. We will answer within one month, we may ask you to confirm who you are first, and you do not have to say why. If you ask us to delete your information, we will do what the section above describes, and remove your sign-in record as well.

Laurels chooses which Quests to offer you by comparing them with your record. No person makes each choice. It has no legal effect on you, or anything like one.

If you think we have handled your information badly, please tell us first. You can also complain to the Information Commissioner's Office, the UK regulator, at ico.org.uk.

Adults only

Laurels is for people aged 18 and over. If the date of birth you give shows you are under 18, the app stops there and your set-up answers are not saved on our servers. The sign-in you made just before that step stays until you ask us to remove it. If you think a child has used Laurels, tell us and we will remove what we hold.

Changes to this notice

If this notice changes, we will change the date below. If the change affects how we use information you have already given us, we will tell you before it applies.

Last updated: October 19, 2026. This notice has not been through legal review.