Privacy Notice
- The short version
- Who we are
- What we collect
- Why we use it, and our lawful basis
- Special category data
- Who else handles it
- Sending data outside the UK
- How long we keep it
- Your rights
- Children
- Security, and what we do not promise
- Cookies and similar technologies
- Automated decisions
- If you are in the United States
- Changes
We are Quixoverse Limited, a company registered in England and Wales (company number 14613073), 71–75 Shelton Street, Covent Garden, London WC2H 9JQ. Contact: [email protected].
This notice covers Quixoverse, Wonday and Youvment, and the Notes from HQ and Wonday mailing lists. One company, one notice - whichever of our products you use, this is how we handle your information. Lingobelle is a separate company with its own notice.
Version 1.0 · 9 October 2026
The short version
We are Quixoverse Limited. We collect what we need to run the thing you signed up for, and not much else. We never sell your data. We use a small number of well-known suppliers to make the apps work, and we name every one of them below. You can see what we hold, correct it, take it with you, or have it deleted, from inside the app. If you think we have got something wrong, tell us, and you can complain to the Information Commissioner's Office.
Two things worth knowing up front, because they are unusual:
- In Wonday, your Lockbox is never shared with anyone - not with people you are connected to, whatever your visibility setting, and not with us for any purpose beyond storing it so you can read it back.
- We do not check who anybody is. We do not verify identity or run background checks on the people you meet in our communities.
1. Who we are
Quixoverse Limited, registered in England and Wales, company number 14613073. We are the data controller for Quixoverse, Wonday, Youvment and our mailing lists.
- Contact: [email protected]
- Registered office: 71–75 Shelton Street, Covent Garden, London WC2H 9JQ
- We have not appointed a Data Protection Officer. Our core activity is not large-scale systematic monitoring or large-scale special-category processing, so we are not required to. We will reassess if that changes.
2. What we collect
In all three apps
| Account | Email address, password (stored as a hash - we never see it), display name, the date you joined |
| What you post | Anything you put in: text, photos, video, voice notes, comments, reactions, messages |
| Safety | Reports you make or that are made about you, blocks, and the record of what we decided and why |
| Payments | What you bought, when, and your subscription status. We never see your card details - the payment provider or the app store handles those |
| Technical | A push-notification token if you allow notifications, app version and device type, error reports, and your IP address at the point of sign-in, which we use for security and do not keep long-term |
Quixoverse only
Your submissions and the evidence you attach, repository links, screen recordings, which sessions you attended, recordings of live sessions you take part in, and your progress through the programme. Plus:
Quixo, the connector. Quixo runs inside your own Claude, which you provide and pay for. We do not
receive your conversations with it. Two things do reach us: requests for Vault material, which we log
for security and quota purposes; and entries written by the log_learning tool into the Community
Knowledge Bank - short notes about where people get stuck while building, so the programme improves.
Those entries carry no identifier - there is no field for who you are, only what you were trying to do
and what happened - so they are anonymous rather than pseudonymised. They are not supposed to contain your
business detail or your own members' data, and no tool exists that reads them back. We tell you this plainly rather than burying
it, because it happens automatically.
Wonday only
What you record about your past, present, future and what it means to you; your daily entries, your Wondays count and your streak; whether your account is public or private; who you follow and who you are connected to; whether you have turned on "reveal past"; and the image you choose, including one found through the optional stock-photo search.
A substantial amount of what you write in Wonday is never shared with anyone, and this is enforced by how the system is built rather than by policy - the parts that share things cannot reach any of it. That covers: the Lockbox; your private note on any reflection; your deep reflection (journal, message to tomorrow, evidence, old story, one thing, spark note); the Inner Critic Takedown, which never leaves your device; your streak freezes and rest periods; and who follows you and how many.
Following someone is one-way and silent - they are never told. Connecting is mutual and lets each of you see the other's direct messages, their big Why, and their private-born days from the date you connected onward, never before it.
When you delete your account, your identity and everything that was yours alone is erased, including the Lockbox. The other side of a conversation stays with the other person, attributed to "Former member".
Youvment only
Your daily posts - a video, a photo or a written note - which prompts you have completed, your completed count and longest run, and whether you chose to share a post into the Room.
Your posts are private by default. They sit in your own archive and nobody else sees them unless you deliberately share one. There is no feed of everybody's dailies, and cheer counts are private too. When you delete your account, your private posts are erased; anything you chose to share stays but is anonymised so it is no longer attributed to you.
The mailing lists
Your email address, the date and time you signed up, the page you signed up on, the exact consent wording shown to you and its version, the country worked out from your connection (we do not keep your IP address), which list you are on, and whether you open and click.
3. Why we use it, and our lawful basis
| What for | Basis |
|---|---|
| Running the service you signed up for, including your account, your content and your subscription | Contract |
| Keeping people safe: moderation, investigating reports, blocking, preventing fraud and abuse | Legitimate interests - our interest in a safe service, and every member's interest in not being harmed. We have weighed this against your privacy and think it is plainly justified |
| Making the products better, and fixing what breaks | Legitimate interests |
| Sending you the newsletters | Consent, which you can withdraw at any time |
| Sending you service messages - a reply, a session starting, a receipt, a password reset | Contract. These are not marketing and you cannot opt out of them while you hold an account |
| Meeting legal duties: illegal content, child-safety reporting, tax and accounting records, responding to lawful requests | Legal obligation |
We do not sell your data, and we do not use it to train machine-learning models.
4. Special category data
We do not ask for information about your health, beliefs, sexuality, politics or anything else in that category. But Wonday invites you to write about your own life, and what you write may reveal some of it - by its content, not because we asked.
Where that happens, we treat it on the basis that you have made it public if you choose to publish it, and on the basis of your explicit consent where you keep it private and ask us to store it. We have assessed this and recorded the assessment internally. We do not analyse what you write to infer anything about you, and we do not use it for advertising - we do not advertise.
5. Who else handles it
Every one of these is contractually bound to act only on our instructions.
| Who | What they do | Which apps |
|---|---|---|
| Supabase | Database, accounts and file storage | All |
| Cloudflare | Hosting, the sign-up store, video (Stream) and file storage (R2) | All |
| Expo | Delivering push notifications | All |
| Resend | Sending service email | All |
| Stripe | Payments taken on the web | Quixoverse, Youvment |
| RevenueCat | Managing subscriptions bought in an app store | Wonday |
| Apple, Google | App distribution, and payments made inside their stores. They are the merchant for those, under their own terms | All |
| Zoom | Live sessions and their recordings | Quixoverse, Youvment |
| Kit | Sending the newsletters | Mailing lists |
| Pexels | The optional stock-photo search. Your search words go to Pexels; your account does not | Wonday |
| Anthropic | Provides Claude, which is what Quixo runs inside. Your relationship with Anthropic is your own - you provide that account and their terms apply to it | Quixoverse |
We also share information where the law requires it - with regulators, law enforcement or a court - and with professional advisers where we need advice. If our business is ever sold or reorganised, your data may transfer with it, and your rights go with it unchanged.
6. Sending data outside the UK
Most of our suppliers are based in the United States, so your data is processed there.
- Where a supplier is certified under the UK Extension to the EU–US Data Privacy Framework, we rely on that. Cloudflare is certified (since 28 September 2023).
- Where it is not, we rely on the UK's approved transfer terms - the International Data Transfer Agreement, or the UK Addendum to the standard contractual clauses - and we carry out and record a transfer risk assessment. Kit falls into this category: its Framework certification lapsed on 31 July 2026, and its data processing agreement carries the UK Addendum.
- We check every supplier's status once a year, because certification has to be renewed and can lapse. Kit is why we check.
7. How long we keep it
| Your account and content | While your account is open. When you delete it, we delete your content and your personal details |
| Where deletion is limited | Two exceptions, and we would rather say so than pretend. Safety records are kept - a report and what we decided about it survives an account closing, with identifiers stripped, because otherwise we would be destroying the record of what someone did. And where the law requires us to preserve something, particularly anything involving a child, we preserve it for as long as we must |
| Messages in a shared conversation | Where a conversation has two people in it, deleting your account does not erase the other person's copy of what was said to them |
| Payment and tax records | Six years, because we have to |
| Newsletter | While you are subscribed. When you unsubscribe we delete your details and keep only your email on a do-not-send list, so we never email you again by mistake |
| Founding-group interest | Until the group is formed and you have heard back, and in any event no more than 12 months, unless you ask to stay on the list |
8. Your rights
You can ask us to: show you what we hold; correct it; delete it; restrict or object to how we use it; give you a copy to take elsewhere; and withdraw consent where consent is the basis. Where we rely on legitimate interests, you can object and we will stop unless we have a compelling reason not to, which we will explain.
Most of this you can do yourself, from inside the app - that is deliberate, and faster than asking us. Account deletion is in the app. Otherwise email [email protected] and we will reply within one month.
Complaints. Tell us first if you can. You can also complain to the Information Commissioner's Office at ico.org.uk, or to your own country's data protection authority if you are in the EU.
9. Children
Our services are for adults, 18 and over. We do not knowingly collect anything from a child. If we discover a child has an account we will close it and delete the data, and where the law requires us to report something we will. If you believe a child is using our service, tell us.
10. Security, and what we do not promise
We use encryption in transit, access controls, hosted infrastructure from established providers, and we keep the number of people who can see your data small. No service can promise to be unbreachable, and we are not going to. If a breach happens that puts you at risk, we will tell you and the ICO within the time the law allows.
11. Cookies and similar technologies
Our websites use only what is needed to make them work - sign-in and security. There are no advertising or tracking cookies and no advertising pixels. If that ever changes we will ask your consent first, with declining as easy as accepting.
12. Automated decisions
We do not make decisions about you by automated means alone that have a legal or similarly significant effect. Some safety tools flag content automatically, but a person decides what happens, and you can challenge any decision we make about your content or your account.
13. If you are in the United States
Depending on your state, you may have the right to know what we collect, to have it deleted, to correct it, to a copy, and not to be discriminated against for asking. We do not sell personal information and we do not share it for cross-context behavioural advertising, so there is nothing for you to opt out of there. Use the same contact address.
14. Changes
If we change this notice in a way that matters to you, we will tell you in the app or by email before it takes effect. We keep previous versions and will send you one on request.
Quixoverse Limited · registered in England and Wales · company number 14613073 · 71–75 Shelton Street, Covent Garden, London WC2H 9JQ · contact [email protected] · version 1.0 · last updated 9 October 2026