Charm

Privacy Notice

Effective June 3, 2026

1. Who is the data controller

Fast Quality Solutions LLC (trading as "Charm Coaching") is the data controller for personal data processed through the Charm app and website. You can reach us at support@trycharmcoach.com.

2. What we collect

  • Account data: email address, display name, password hash, sign-up date.
  • Profile & onboarding answers: optional info you tell us (gender, goals, experience).
  • Usage data: chat conversations you have with the AI, saved lines, achievements, streaks, XP.
  • Uploaded images: screenshots you choose to send to the AI coach. These may contain information about other people (names, messages, photos). We ask you to blur or crop those details before uploading, we use the image only to generate your coaching reply, we do not keep it on your account afterwards, and we never use it to train models.
  • Payment data: handled entirely by our payment processor (Stripe) — we receive only the transaction status and customer ID, never card numbers.
  • Device & analytics data: IP address, browser, device, pages visited, anonymised product analytics (via PostHog).

3. Why we use it (legal basis)

  • To provide the service you signed up for (contract).
  • To process payments and prevent fraud (contract & legitimate interest).
  • To send essential transactional emails (contract).
  • To improve the product through anonymised analytics (legitimate interest).
  • To comply with legal obligations (e.g. accounting).

4. Who we share it with

We share personal data only with trusted processors that help us run the service:

  • Stripe, Inc. — payment processing, invoicing, tax calculation.
  • Supabase, Inc. — database & authentication hosting (where your account, conversations and saved lines are stored).
  • Lovable AI Gateway (Lovable Labs) — routes every AI request from Charm to the model provider; all chat and screenshot requests pass through this gateway before reaching Google.
  • Google (Gemini) — AI inference for chat and screenshot coaching.
  • PostHog Inc. — product analytics.
  • ElevenLabs Inc. — voice synthesis and real-time voice conversation (when you use voice features).
  • Lovable Cloud — application hosting.
  • Cloudflare, Inc. — content delivery, edge runtime and security/DDoS protection for requests to Charm.

In short, the full path of a coaching message is: your device → Cloudflare → Lovable Cloud / Lovable AI Gateway → Google (Gemini) or ElevenLabs, with conversation history stored in Supabase and anonymised usage events in PostHog.

We do not sell your personal data.

4a. Information about other people

If you upload a screenshot of a conversation, it may include personal data about someone who has not agreed to it. Please remove or blur names, handles and photos first. We process such content only to produce your coaching reply, we do not build profiles of third parties, and uploaded images are discarded after the reply is generated. If someone believes their data was shared with us, they can email support@trycharmcoach.com and we will delete it.

5. International transfers

Some of these processors are based in the United States. Where required by GDPR we rely on Standard Contractual Clauses to safeguard transfers.

6. How long we keep it

We keep account data while your account is active. After deletion, we erase personal data within 30 days except where law requires us to keep it longer (e.g. tax records — up to 7 years).

7. Your rights

You have the right to access, correct, delete, export, restrict, or object to processing of your personal data, and to withdraw consent at any time. Email support@trycharmcoach.com and we'll respond within 30 days. EU/UK users may also lodge a complaint with their local data-protection authority.

8. Security

We use encryption in transit (HTTPS) and at rest, scoped database access (row-level security), and regular access reviews. No system is perfectly secure — please use a strong, unique password.

9. Children

Charm is for adults only (18+). We do not knowingly collect data from minors.

10. Changes

We'll announce material changes in-app or by email. The "effective" date above always reflects the current version.