Privacy
last updated · 27 August 2026
Fumbleproof is a texting practice app. This page explains what it stores, what it deliberately does not, and how to get any of it back or deleted. It is written to be read, not to be survived.
Your practice conversations are never stored — not by us, not by anyone. The app keeps the score, not the words. They never leave your phone at all, unless you are a founding member with live replies switched on, in which case the last few messages go to our server and on to Anthropic to write her answer, and are discarded straight after. If you make an account we store your email and your session results; you can export or delete all of it yourself, from inside the app, at any time.
The commercial terms — what founding buys, what "lifetime" means, the refund, the fair-use cap — live on one page: the agreement. There is no third document.
Who is responsible
Fumbleproof is a service of EFO Commerce, a sole trader (eenmanszaak) registered in the Netherlands, which is the data controller for everything described here.
| EFO Commerce Ruysdaelhof 11 2251 JJ Voorschoten The Netherlands |
Chamber of Commerce (KvK): 89053338 VAT (BTW): NL004690417B41 Contact: support@fumbleproof.com A real person reads that address. |
What the app stores
If you just practise (no account)
Nothing leaves your phone except anonymous counts. Your session history, your training week, your drill results and your settings live in your browser's local storage on that device only. Clearing the site's data erases them permanently — there is no copy anywhere else.
If you create an account
| What | Why |
|---|---|
| Your email address | It is the entire login — we use a one-time link instead of passwords, so there is no password to store or leak. |
| Session results: which practice partner, the outcome, the grade, the number of messages, and the interest curve the engine calculated | So your log and progress follow you to another device. |
| A list of one-way fingerprints of lines she has already used on you | So she does not repeat herself in your next session. These cannot be turned back into text. |
| Your purchase record, if you buy anything | To know what you paid for. The card itself never touches us — see Stripe below. |
The messages you type in a practice session, and the replies she gives, are never written to any database. Not ours, not anyone's. The scoring and the coaching you see on the replay screen are worked out on your device. What reaches our servers and stays there is the outcome and the numbers — never the conversation.
Whether they are transmitted at all depends on one thing, and we would rather be exact than reassuring:
- Practising for free, or signed out: nothing leaves your phone. The whole simulation runs in your browser.
- Founding member with live replies on, during the conversation: to write her answer, the last 14 messages of that one conversation go to our server and on to Anthropic. They are used to produce the reply and then dropped — not logged, not saved, not used to train anything of ours.
- Founding member with live replies on, after the conversation: the deeper read at the bottom of your replay is written by Claude too, and to write it the whole of that finished session goes the same way — both sides, up to about 29 messages, along with the grade, her final interest, and the list of what the engine scored you down for. Same terms: used to write the read, then dropped. Turn live replies off and this stops with it.
The "never stored" half is a property of how the app is built, not a promise about how carefully we behave — there is no code path that writes a conversation anywhere. The transmitting half is a choice you can reverse: email support@fumbleproof.com and we put you back on the offline partner, at no cost and with nothing else taken away.
If you buy founding access
Payment runs entirely through Stripe. They collect your name, email, billing address and card details; we never see or hold the card. In the Fumbleproof database we store only a record that a payment happened, its Stripe reference, and the amount — enough to give you what you paid for and to refund you.
One thing we would rather tell you than have you discover: the Stripe account Fumbleproof bills through is shared with the operator's other business, and that account forwards payment events — including your name, email and billing address — to a Google Cloud function belonging to that business, in the United States. Nothing about your training is in that data, only the purchase. It is a leftover of sharing one payment account, it is being separated, and until it is, it is listed in the table below like every other processor.
Analytics, and what we do about your privacy in it
We measure whether the app works: how many people open it, start a session, finish one, or hit an error. Those events carry the event name and a few properties — never the content of any message.
- Without your consent, these are stored as pure counts with no identifier attached at all — we can see "twelve sessions started today" and nothing about who.
- With your consent, a random identifier generated in your browser is attached, so we can tell whether the same person came back. It is not linked to your name or email, and it disappears when you clear the site's data.
- Microsoft Clarity records anonymised session replays so we can see where the interface confuses people. Every surface that can contain your words — the chat thread, the coach's quotes, your email address — is masked before recording, so they are not captured.
- The Meta and TikTok pixels tell us whether an ad led to somebody actually using this. They run on the marketing page and, since the app became the thing the ads point at, inside the app as well. They report exactly two moments: the first time you open a chat, and the first time you finish a session. Never what you typed, never who she was, never your grade.
- One of those two reports is also sent from our server, not from your browser, carrying your IP address, your browser's user-agent string, and Meta's own advertising cookies if your browser has them. The honest reason: ad blockers stop the browser version for a large share of people, and without this we cannot tell which ads work. Your email address, your name and your account are never included, and this stops with everything else if you decline analytics.
Cookies and consent
If you are in the EU or EEA we ask before loading any of the tools above, and nothing is set until you say yes. Decline and the site works exactly the same — you simply become an anonymous number in a counter. Outside the EU they load by default, and you can opt out by clearing this site's data. Everything strictly needed to run the app (your login session, your settings) is not optional and is not used for tracking.
Who else touches your data
| Who | What for | Where |
|---|---|---|
| Supabase | Database and login | EU (Ireland) |
| Cloudflare | Website hosting and email forwarding | Global edge network |
| Stripe | Payments | US / EU |
| Google Cloud | Receives payment events from the shared Stripe account — see “Paying” above | US |
| Resend | Sends your login email (via Supabase) | EU (Ireland) |
| Anthropic | Writes her replies, and writes the deeper read of a finished session — founding members only, see “About the AI” | US |
| Formspree | The waitlist form on the marketing page | US |
| Microsoft Clarity | Anonymised interface analytics | US |
| Meta, TikTok | Advertising measurement — marketing page and app; Meta also receives one server-sent copy, see “What we never store” | US |
Transfers outside the EU rest on the European Commission's standard contractual clauses, which these providers offer as part of their terms. We sell your data to nobody, ever, and we do not share it beyond what is listed here.
About the AI
If you are not a founding member, no AI provider receives anything. Your practice partner is a scoring engine and pre-written lines running entirely on your device, and nothing you type in a conversation leaves it.
If you are a founding member, Claude does two jobs and each one sends something. Writing her next reply sends the character you are practising against, how interested she currently is, and the last 14 messages of that one conversation. Writing the deeper read under your replay sends that finished session in full — both sides, up to about 29 messages — together with the grade, her final interest, and the engine's list of what it scored you down for.
In both cases your email address, your name and your account ID are never included, so Anthropic receives the conversation without receiving you. We do not store the transcript on our servers; it is sent, answered, and gone. Both stop together: switch off live replies and neither happens.
We do keep one row per live reply — your account ID and a timestamp, nothing else — because that is how the per-hour and per-day limits that stop the feature being abused are counted. Those rows are deleted with your account.
You can have the non-AI version at any time by asking us at support@fumbleproof.com, and it costs you nothing — the written partner is the same one everyone else practises against.
How long we keep it
- Your account and session results: until you delete them. Deleting your account removes them immediately.
- Payment records: our own record of what you bought is deleted with your account. The invoice itself is held by Stripe for seven years because Dutch tax law requires it — that copy is not ours to erase, and a deletion request cannot reach it.
- Analytics events: purged after twelve months.
- Waitlist emails: until you unsubscribe or ask us to remove you.
Your rights
Under the GDPR you can ask for a copy of your data, correct it, delete it, restrict how we use it, or object to it. Two of those are one tap, no email required:
- Export — the You tab in the app hands you everything we hold, as a file.
- Delete — the You tab erases your account and everything attached to it. It is immediate and it is not reversible.
For anything else, email support@fumbleproof.com and you will get an answer within thirty days, usually the same day. If we get it wrong, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.
Why we are allowed to hold it
- Your account and session results — to provide the service you asked for (contract).
- Purchases — contract, plus the legal obligation to keep tax records.
- Analytics and advertising tools — your consent in the EU/EEA; our legitimate interest in knowing whether the product works elsewhere.
- Anonymous counts — not personal data, so no basis is needed.
Adults only
Fumbleproof is for people aged 18 and over, and the app asks before you start. It is not directed at children and we do not knowingly hold data from anyone under 18. If you believe we do, email us and it will be deleted.
Changes
If this policy changes in a way that affects what we do with your data, we will change the date at the top and tell anyone with an account by email before it takes effect.