Privacy Policy

1. Information We Collect

Driven may collect your name, email, phone number, location, profession, application answers, investment readiness, financial assistance responses, goals, onboarding progress, vision contract, daily actions, check-ins, journal entries, counselor messages, support requests, notification settings, sign-in method, and device or browser information.

Driven also stores payment and subscription metadata such as plan, billing option, checkout session ID, customer ID, subscription status, paid date, claim status, and related provider records. Full card details are handled by Stripe or the payment provider.

2. Sensitive Coaching Content

Application answers, journal entries, goals, messages, and self-assessment responses may include sensitive personal information about your life, habits, relationships, finances, work, health, mindset, or goals.

Driven is a coaching and mentorship service, not a medical provider, health plan, therapy service, or emergency service unless a separate written agreement says otherwise. Do not submit emergency medical records or crisis communications through Driven.

3. How We Use Information

Driven uses information to review applications, create AI-assisted plan drafts for human review, approve and send invitations, process checkout, link paid subscriptions to verified users, route users to the right onboarding step, personalize plans, provide counselor support, operate messaging and journaling, send notifications, and provide support.

Driven also uses information to keep the app secure, prevent fraud, debug product issues, enforce access rules, improve program quality, create internal reports, meet legal obligations, and protect participants, counselors, admins, and the business.

4. AI-Assisted Plan Drafting

Driven may use application answers and related intake information with approved AI tools to draft a proposed plan. Admins or counselors review and approve the plan before it is used for participant onboarding.

Participant journals and private counselor messages should not be used to train public AI models unless Driven later asks for permission or has another lawful basis explained in an updated policy.

5. How We Share Information

Information may be shared with authorized admins, assigned counselors, payment providers, email providers, cloud hosting providers, database providers, authentication providers, notification providers, AI service providers, analytics or observability vendors, and support vendors when they need it to operate Driven.

Driven may also share information if required by law, to respond to lawful requests, to protect safety, to investigate fraud or abuse, to enforce terms, or as part of a merger, acquisition, financing, reorganization, or sale of business assets.

6. Payments and Authentication

Stripe or another payment provider processes checkout and billing. Driven receives payment status and related identifiers needed to confirm payment, create or update a subscription record, and link that payment to a verified account.

Driven owns the application session and stores only hashed opaque session tokens in its backend database. Passwordless email codes and Google sign-in are used to verify identity and maintain access.

7. Notifications, PWA, and Device Data

If you install the Driven PWA or allow notifications, Driven may store push subscription data, notification delivery state, user agent details, and device/browser permission information needed to send reminders and in-app alerts.

You can disable push notifications through your browser or operating system. Some iPhone notification behavior may require installing the PWA to the Home Screen.

8. Retention

Driven keeps information for as long as needed to provide the program, maintain records, support billing, preserve application and invitation history, meet legal or tax obligations, resolve disputes, enforce terms, and protect safety.

Declined, expired, abandoned, or inactive records may be retained for fraud prevention, audit history, operational reporting, and legal compliance, then deleted or de-identified according to Driven retention rules.

9. Security

Driven uses administrative, technical, and organizational safeguards designed to protect personal information, including backend-enforced access rules, role checks, session-cookie validation, hashed tokens, provider webhooks, and restricted operational access.

No online service can guarantee absolute security. If Driven learns of a security incident that requires notice, it will provide notice according to applicable law.

10. Your Choices, Rights, and Contact

You may ask to access, correct, update, export, or delete personal information, subject to identity verification, legal obligations, payment records, safety needs, and legitimate business records. You may also ask questions about counselor access, support records, or account claim issues.

Driven is not intended for children under 18. Privacy rights may vary by location. If state, federal, or international privacy laws give you additional rights, Driven will honor those rights as required.

To contact Driven about privacy or terms, use the email and contact information below.