the curiosity challenge
last updated: [insert date you publish this]
this describes what information the curiosity challenge collects, why, and what happens to it. it's written in plain language on purpose — if anything here is unclear, email jtswhappens@gmail.com and ask.
who this covers
the curiosity challenge is a paid, self-guided 21-day program operated by [your name / legal business name] ("we," "us"), part of JTSWH. this policy covers thecuriositychallenge.com and the account you use inside it. it doesn't cover other JTSWH properties (like jtswhappens.com or the Patreon) or third-party services we link to, like Discord — those have their own privacy policies.
what we collect
when you buy: your email address, and your name if you provide
one at checkout. payment itself — your card details — is handled entirely by
Stripe; we never see or store your card number.
once you're in: the name you choose to go by, which days you've
completed, and whether you've confirmed you're coming to a live session.
what you write: your daily journal entries. this is the most
personal thing this product holds. it is private — visible only to you,
enforced at the database level, not just hidden in the interface. we don't read
it, and we don't want to.
what we don't collect
no tracking cookies, no ad pixels, no analytics that follow you elsewhere. the only thing stored in your browser is a login token, so you stay signed in between visits.
who else touches this data
we use a small number of outside services to actually run the challenge. each only sees the specific piece it needs to do its job:
- Stripe — processes your payment. we never see full card details.
- Supabase — hosts the database and handles login. this is where your account, progress, and journal entries actually live.
- Google — sends transactional emails (your welcome email, your login link) and powers our own internal tracking spreadsheet, which only ever contains your name, email, and aggregate counts like "12 days completed" — never your journal content.
- Netlify — hosts the website itself.
we don't sell your data, and we don't share it with anyone beyond what's listed here for any other purpose.
where your data lives
our database is hosted in the United States. if you're joining from Brazil, the EU, or elsewhere, that means your information is transferred to and stored in the US as part of how this product works. our service providers (Stripe, Supabase, Google) each offer their own data processing agreements covering this kind of transfer — [confirm these are actually accepted on your accounts with each provider before relying on this sentence].
legal basis for processing (EU/UK/Brazil visitors)
we collect and use your email, name, and progress data because it's necessary to provide the challenge you purchased — this is processing under contract. journal content is processed on the same basis, to give you somewhere to write and to show it back to you; we don't use it for any other purpose. transactional emails (your welcome email, your login link) are sent because they're necessary to deliver the service, not for marketing.
we do not sell your information
we have never sold, and do not sell, your personal information to anyone, for money or otherwise. exercising any privacy right described here never results in worse treatment, a different price, or reduced access to the challenge.
how long we keep it
your account and journal stay accessible for the access window that came with your purchase (3–6 months, as stated at checkout). after that, we retain the underlying data for a reasonable period in case you reach out about it, unless you ask us to delete it sooner.
your choices
you can ask us, at any time, to: see what we have on you, correct it, delete it entirely (including your journal), receive a copy in a portable format, or object to or restrict how we use it. email jtswhappens@gmail.com and we'll take care of it. deleting your account removes your access to the challenge along with it. if you're in the EU or UK and feel we haven't resolved a concern properly, you also have the right to complain to your local data protection authority.
children
this challenge is intended for adults. it isn't directed at, or knowingly offered to, anyone under 18.
changes to this policy
if this policy changes in a meaningful way, we'll update the date at the top and, for anything significant, let current members know directly.