Last updated: March 4, 2026
At ChallengeU2, we are committed to protecting your privacy. This Privacy Policy describes how we collect, use, share, and protect your personal information when you use our online platform for participating in challenges, creating accounts, and interacting with our services. By using ChallengeU2, you consent to the practices described in this policy.
We collect information you provide directly to us, such as when you create an account, register for challenges, submit progress updates, or contact us for support. This may include:
Your email address, username, and profile information (e.g., name, photo).
Challenge-related data, such as submissions, progress tracking, and performance metrics.
Communication data, including messages, AI assistant chat history, feedback, and support inquiries.
Payment information processed through third-party providers like Stripe (we do not store full payment details).
We also collect information automatically through cookies, device data, and analytics tools when you interact with our platform. For online challenges, this includes timestamps of challenge participation, IP addresses for security, and usage patterns to improve challenge design.
If you use AI-powered features (e.g., the ChallengeU2 Assistant), we collect and store your chat messages, AI-generated responses, token usage data, and interaction logs (including full request/response payloads for quality assurance and debugging). These are processed through OpenRouter (AI routing service) and underlying model providers such as OpenAI.
We use your information to:
Provide and personalize our services, including facilitating challenge participation, tracking progress, and delivering notifications.
Improve our platform, such as analyzing challenge completion rates and user engagement to refine experiences.
Communicate with you about your account, challenges, updates, and promotional offers (you can opt out at any time).
Ensure security and prevent fraud, including monitoring for unauthorized access.
Process payments and manage subscriptions for premium challenges or features.
Comply with legal obligations and enforce our terms of service.
For AI features, user inputs are processed by external providers to generate responses. We store AI conversation history and debug logs to maintain service quality, resolve issues, and improve the AI experience. We do not share your AI chat data with coaches unless you explicitly enable sharing in Settings.
We do not sell your personal data. We may share your information with trusted third parties who help us operate our platform, including:
Supabase for secure database storage and authentication of user and challenge data.
OpenRouter (AI routing service) and underlying model providers (e.g., OpenAI, others) for processing AI-related inputs. Data sent to these providers is governed by their respective terms and privacy policies.
Stripe for payment processing.
Analytics providers (e.g., Google Analytics) for aggregated, anonymized insights.
Legal authorities if required by law, such as to protect against fraud.
In the event of a merger, acquisition, or sale, your data may be transferred as part of our assets, but we will notify you beforehand.
We use cookies and similar technologies to enhance your experience, such as remembering your preferences and analyzing site usage. You can manage cookie preferences through your browser settings. Essential cookies are required for core functionality; analytics cookies help us understand engagement patterns.
ChallengeU2 operates globally, and your data may be transferred to and processed in countries outside your residence, including the United States. We ensure appropriate safeguards, such as Standard Contractual Clauses, are in place for transfers to comply with GDPR and other regulations.
Depending on your location, you may have rights under laws like GDPR (EU) or CCPA (California), including:
Access, update, or delete your personal information.
Withdraw consent for data processing (e.g., opting out of AI feedback).
Object to or restrict certain uses, such as marketing emails.
Request data portability for challenge progress.
Lodge a complaint with a supervisory authority.
To exercise these rights, log in to your account settings or contact us at support@challengeu2.com. We will respond within 30 days.
Our services are not intended for children under 13 (or 16 in some jurisdictions). We do not knowingly collect personal information from children. If we become aware of such collection, we will delete it promptly. Parents or guardians can contact us to review or delete a child's data.
We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy. Account data is kept while active; inactive accounts may be deleted after 2 years. AI chat history is retained while your account is active. Challenge submissions are retained for 1 year post-completion unless you request deletion.
We implement robust security measures, including encryption (TLS for transit, AES-256 at rest), access controls, and regular audits to protect your data. However, no system is completely secure, and we cannot guarantee absolute security.
We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you via email or in-app notifications for material changes. Your continued use of ChallengeU2 after updates constitutes acceptance. Please review periodically.
Contact Us: support@challengeu2.com
