Last updated 7 October 2026
Short version: we collect what your report needs and nothing spare, and we never sell any of it.
When you do the audit. Your answers — what you wrote about your skills, work, home, community and background. They are what your report is built from. Your name, your email, your country, and whether you are an adult or 16–17, so we can make your report, send it, and show the right regional price.
The report is written by AI. When you finish the questions, your answers go to Anthropic, the company whose model writes your report. They use them only to produce it, on our instructions — Anthropic’s terms say they do not train their models on it. Anthropic deletes them within 30 days in the normal course, and can keep them longer only in limited cases — if something is flagged under their usage policy, or where the law requires it. We keep your answers and your report so you can come back to them; ask us to delete either and we will.
When you pay. Your email, your name if you gave it, and the order details. Not your card — card details are typed on Stripe’s own page and never touch this site. We are told the payment succeeded and nothing more.
If you ask for a birthday note. Only the day and the month — never the year — and the date you gave permission. It is optional, adults only, and you can stop it at any time.
Server logs. Our host keeps standard access logs for a short period. We do not mine them.
A parent or guardian has to be with you to use the audit — they are the person who is present, and the email we hold is theirs. We never email anyone under 18 directly. In the language of the law, we hold your information on our legitimate interest in providing the service your parent asked for, together with your own consent for anything you choose to tell us. The information is yours as well as theirs: you can ask what we hold, correct it, or have it deleted, and you can do that yourself. The birthday note is offered to adults only. We do not knowingly serve anyone under sixteen.
We save your progress through the audit in your own browser so you don’t lose it — that is strictly necessary, it stays with you, and it is not tracking. The only optional cookies are the Meta advertising pixel, set only after you click “Accept.” That is the only reason there is a banner. Clear the choice in your browser to change your mind.
Each is used for the one job named, and some are based in the United States, so some data is processed there under the safeguards those providers offer.
The law asks us to say what entitles us to keep your information. In plain terms:
Order records are kept for as long as tax law requires — typically six years. Your report and answers are kept while they are useful to you and for a reasonable period after; ask us and we will delete them sooner. A birthday opt-in is kept until you withdraw it. When you ask us to delete your data, we remove it across our systems — your orders, your report, your answers and your birthday record.
You can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Email hello@untappedyou.com and we will act within 30 days. Every email we send carries a one-click unsubscribe; using it stops those emails immediately. If you think we have got something wrong and not put it right, you can complain to the Information Commissioner’s Office at ico.org.uk.
Untapped You is operated by Holtra Limited, registered in England and Wales, company number 16788978, registered office 128 City Road, London EC1V 2NX. Questions to hello@untappedyou.com. A real person reads them.
If this page changes, the date at the top changes with it. What you are reading is what applies.