Privacy Policy
I AM GR8 mobile app and the Iamgr8 Academy website
REACTIV8 THE NATION LIMITED · Company No. 07768924
Last updated: 9 October 2026 · Version 3.1
1. Who we are
This Privacy Policy explains how REACTIV8 THE NATION LIMITED ("we", "us") collects, uses, shares and protects your personal data.
| Registered name | REACTIV8 THE NATION LIMITED |
| Company number | 07768924 |
| Registered address | 2 Manor Farm Court, Old Wolverton Road, Old Wolverton, Milton Keynes, MK12 5NN, United Kingdom |
| Website | iamgr8.co.uk |
| Data requests and enquiries | iamgr8support@reactiv8.org.uk |
We are the data controller under the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018.
2. What this policy covers
- The I AM GR8 mobile app for iOS and Android ("the app"), available in the United Kingdom.
- The Iamgr8 Academy website at iamgr8.co.uk ("the website"), including courses bought there.
- The GR8 Life Audit on the web, which you can take before you have an account.
- Parents and guardians we contact about a child's account.
- Anyone who contacts us by email or through a form.
Please read it with our Terms & Conditions.
3. The short version
- We collect what is needed to run your account, your learning and your subscription. A contact number and a profile photo are optional.
- We do not sell your data, show you adverts, or track you across other companies' apps and websites.
- MAC, the accountability coach in the app, is an AI. Its replies are written by Claude, made by Anthropic. Nothing is sent to Anthropic until you allow it in the app, and you can turn it off at any time. Under 16, a parent or guardian must agree first.
- Your app data is stored in Germany. Some of the companies that help us run the service process data in the United States.
- The app is for people aged 7 and over.
- You can delete your account, and everything in it, from inside the app.
4. The data we collect
4.1 In the app
Your account
- First name, last name, email address and password. Your password is stored only in a protected (hashed) form that we cannot read.
- Your date of birth, so that we can apply the right protections for your age (see section 8).
- The type of account you chose (individual, business or educational establishment) and, if you joined with an organisation code, the organisation you belong to.
- A referral or campaign code, if you entered one.
- Whether you ticked the box to receive marketing emails, and when (never offered under 16).
- Your time zone, so that your day and your streak follow your own clock.
Optional details
- A contact number and its country.
- A profile photo. The app asks for access to your photo library only when you choose a photo, and only the photo you pick is uploaded.
Your GR8 Life Audit
- Your answers and the scores worked out from them across Mindset, Money, Network and Health, your focus stat and your GR8 Score.
Your learning
- The missions you open, how far you have watched each film, your quiz attempts, answers and results, your GR8 Points, streak, badges, and the days you opened the app.
Things you write
- Goals you set for a mission and whether you have achieved them.
- Ratings and comments you give when you finish a level.
- Your conversations with MAC: what you type and what MAC replies.
Your plan
- Whether you are on GR8 Free or GR8 Plus, which subscription you hold, when it started, when it renews or ends, its price and currency, and which store it was bought through. We never receive your card or bank details; payment is taken by Apple or Google.
Your device
- An identifier that lets us send push notifications to your device, if you allow notifications, together with basic device information such as model, operating system and app version, and a record of the notifications we have sent you.
- Technical logs created when the app talks to our servers, including your IP address and the time of each request.
Parental consent (accounts of people under 16)
- If you are under 16 and want to use MAC, the email address of the parent or guardian you give us, the date we asked them, any reminders we sent, and whether and when they gave or withdrew permission.
What the app does not collect
Your precise location, your contacts, your camera or microphone, your browsing history, or an advertising identifier. The app contains no advertising and no third-party analytics or tracking software.
4.2 The GR8 Life Audit on the web
If you take the Life Audit on our website before creating an account, we collect your email address, your contact number, your answers and scores, whether you agreed to hear from us, and any campaign details in the link you followed. We email you your result. If you later create an account in the app with the same email address and confirm it, your result is carried over so you do not have to take the audit twice.
4.3 When you contact us
The content of your message, your contact details and our reply.
5. MAC and artificial intelligence
MAC ("My Accountability Coach") answers your questions using Claude, an artificial intelligence model made by Anthropic, PBC, a company based in the United States.
Permission comes first. Before you can talk to MAC, the app tells you what will be sent to Anthropic and asks for your permission. If you are under 16, MAC stays switched off until a parent or guardian agrees: you give us their email address in the app, we send them a link explaining what MAC does with your information, and MAC switches on only if they agree.
Once permission is given, the following is sent to Anthropic each time you send MAC a message:
- what you type, and the earlier messages in the same conversation;
- your first name, focus stat, GR8 Score and Life Audit band, GR8 Points, streak and plan;
- the teaching material of the mission you are asking about, and guidance notes written by our team.
Your email address, contact number, date of birth and password are never sent.
Anthropic acts as our processor. It uses this information to write MAC's reply and, under its commercial terms with us, does not use it to train its models. It may keep it for a limited period for safety and abuse monitoring.
You can withdraw permission at any time in the app under You → Settings → MAC's AI replies, and a parent or guardian can withdraw it by emailing us. MAC will then ask again before your next conversation (or, under 16, wait for a parent or guardian again).
Your conversations are stored in your account so that you can return to them. Archiving a conversation hides it from your list; it is removed when you delete your account. Authorised members of our team may review conversations to keep MAC accurate and safe.
MAC is an automated system and can make mistakes. It does not make decisions about you, and it is not a substitute for professional medical, psychological, legal or financial advice.
6. Sensitive information
Some Life Audit questions ask, in general terms, about your health habits and wellbeing, and you may choose to tell MAC about your health. Information about health is special category data under UK GDPR. We use it only to give you your results and coaching, and only with your explicit consent, which you give by ticking a box on the Life Audit's first screen before any question (the audit cannot start without it). We record when you agreed. You can withdraw it at any time by asking us to delete the information or by deleting your account. Please do not share sensitive information about other people with MAC.
7. How we use your data and our lawful bases
| What we do | Lawful basis |
|---|---|
| Create and manage your account; verify your email; reset your password | Performance of a contract |
| Use your date of birth to apply age protections | Legal obligation and legitimate interests (protecting children) |
| Provide missions, quizzes, goals, points, streaks, badges and your Life Audit result | Performance of a contract |
| Process health information from the Life Audit or that you tell MAC | Explicit consent |
| Manage your subscription and show the correct plan | Performance of a contract |
| Send service emails (verification codes, password resets, invitations from your organisation, your web Life Audit result) | Performance of a contract |
| Send your messages and coaching details to our AI provider so MAC can reply | Consent (under 16, the consent of a parent or guardian) |
| Email a parent or guardian to ask for permission for MAC, and send up to two reminders | Legitimate interests (protecting children) |
| Send push notifications (streak and goal reminders, announcements) | Consent, through your device settings |
| Send marketing emails | Consent (never asked for under 16) |
| Keep the service secure, prevent misuse, keep a record of administrative actions | Legitimate interests |
| Review feedback, quiz results and conversations to improve our content | Legitimate interests |
| Website analytics | Consent, through the cookie banner |
| Meet legal, tax and accounting obligations | Legal obligation |
8. Children and young people
The app may be used by children and young people, and we take our responsibilities for their data seriously. We follow the UK GDPR and the Information Commissioner's Age Appropriate Design Code (the Children's Code).
- The app is for people aged 7 and over. We ask for a date of birth at registration and do not accept anyone under 7.
- Under 16. MAC, which sends messages to an AI provider, stays off until a parent or guardian agrees by email, as described in section 5. If no one responds, we send up to two reminders (after 3 and 7 days). The rest of the account carries on as normal; MAC simply stays off until a parent or guardian agrees. Marketing is never offered to anyone under 16.
- Under 18. We ask that young people have a parent or guardian's agreement to use the app. Subscriptions must be bought by, or with the permission of, the adult who pays the bill.
- Schools and other educational establishments may arrange accounts for their pupils and students. Where they do, the establishment is responsible for having the authority and any parental consent it needs.
- Protections for everyone, whatever their age: no advertising, no sale of data, no tracking across other apps or websites, no public profiles and no messaging between users. MAC's use of AI is off until it is allowed, and marketing is off unless it is asked for.
- Parents' rights. A parent or guardian may ask to see, correct or delete their child's data, or withdraw consent, at any time by writing to iamgr8support@reactiv8.org.uk, and can delete the account in the app.
If we learn that a child under 7 has an account, we will delete it.
9. Who we share your data with
We do not sell your personal data. We share it only with the following companies, which act on our instructions, and only as far as each needs it.
| Provider | What it does for us | Where |
|---|---|---|
| Supabase | Stores your app account, learning data, conversations and profile photo; handles sign-in | Germany (EU) |
| Vercel | Runs the servers the app talks to | United States |
| Anthropic | Writes MAC's replies (only with permission) | United States |
| Cloudflare | Stores and delivers mission films; sees your IP address when you play one | Global network |
| OneSignal | Delivers push notifications | United States |
| RevenueCat | Tells us the status of your subscription | United States |
| Apple and Google | Distribute the app, take payment for subscriptions, deliver push notifications | United States |
| Resend | Sends service emails, including emails to parents and guardians | United States |
| New Zenler | Runs the website and its courses | United States |
| Stripe | Takes card payments on the website | United States and EU |
| Google Analytics | Website usage statistics (with your consent) | United States |
If you joined through a business or educational establishment, we record that you are a member of it. We do not share your individual results, conversations or goals with that organisation. If that ever changes, we will tell you first.
We may also disclose personal data where the law requires it, or as part of a merger or sale of our business, in which case the recipient must continue to protect it.
10. Where your data is stored and international transfers
Your app account and everything in it is stored in Germany. The United Kingdom recognises the European Union as providing adequate protection for personal data.
Some of the providers above process data in the United States. Where personal data is transferred to a country without an adequacy decision, we rely on appropriate safeguards, such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or the UK–US Data Bridge where the provider is certified. You can ask us for details at iamgr8support@reactiv8.org.uk.
11. How long we keep your data
| Data | How long |
|---|---|
| App account, date of birth, Life Audit results, learning progress, goals, feedback, MAC conversations, profile photo | Until you delete your account or ask us to delete it |
| Parental consent records for an account | Until the account is deleted |
| Subscription records held in your app account | Until you delete your account. Apple, Google and RevenueCat keep their own records under their own policies |
| Life Audit taken on the web without creating an account | Until you ask us to delete it or withdraw your consent to hear from us |
| Website purchase and transaction records | 7 years, as required for tax and accounting |
| Support emails | 3 years from our last contact |
| Server logs | Up to 12 months |
| Records of administrative actions (for example, that an account was deleted) | Kept without your personal details |
When you delete your app account, your data is removed from our live systems straight away. Copies in routine backups are overwritten within 30 days.
12. Your rights
Under UK GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased;
- restrict or object to our use of your data, including for direct marketing;
- receive your data in a portable, machine-readable format;
- withdraw consent at any time, where we rely on consent;
- not be subject to decisions made solely by automated means that significantly affect you. We do not make such decisions.
To use any of these rights, write to iamgr8support@reactiv8.org.uk. We will reply within one calendar month.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Controls inside the app
- Edit your name, contact number and photo: You → Edit profile
- Turn MAC's use of AI on or off: You → Settings → MAC's AI replies
- Turn notifications on or off: You → Settings → Notifications, or in your device settings
- Manage your subscription: You → Subscription
- Delete your account: You → Delete my account
13. Deleting your account
In the app: open the You tab, scroll to the bottom, tap Delete my account and confirm. It happens straight away.
By email: write to iamgr8support@reactiv8.org.uk from the email address on your account, with the subject "Delete my I AM GR8 account". We delete the account within 30 days and reply to confirm. A parent or guardian can ask on behalf of a child. Instructions are also at admin.iamgr8.co.uk/delete-account.
What happens:
- Your profile, date of birth, Life Audit results, mission progress, quiz results, GR8 Points, streak, badges, goals, feedback, MAC conversations, parental consent records and profile photo are permanently deleted. This cannot be undone.
- We keep a single record that an account was deleted, containing no personal details.
- Deleting your account does not cancel a subscription. If you have GR8 Plus, cancel it first in your App Store or Google Play subscription settings, or you will continue to be charged.
14. Cookies and analytics
The app does not use cookies and contains no analytics or advertising software.
The website uses cookies and similar technologies:
| Type | Purpose | Can you refuse? |
|---|---|---|
| Strictly necessary | Keeping you signed in and the site working | No |
| Functional | Remembering your preferences | Yes |
| Analytics (Google Analytics) | Understanding how the website is used | Yes |
| Marketing | Showing relevant communications to adults | Yes |
You can manage your choices through the cookie notice on the website or your browser settings. See our Cookie Policy for details.
15. Marketing
We send marketing emails only if you have agreed to receive them: by ticking the box when you create your account in the app (it is never ticked for you, and you can create an account without it), when taking the Life Audit on the web, or by signing up to our newsletter. We record when you agreed. We never ask anyone under 16 for marketing consent. Every marketing email includes a way to unsubscribe, and you can also write to iamgr8support@reactiv8.org.uk.
Service messages, such as verification codes and password resets, are not marketing and are sent whenever they are needed.
16. App Store and Google Play privacy summary
For the I AM GR8 app:
| Data | Collected | Used for | Used to track you |
|---|---|---|---|
| Name and email address | Yes | Your account | No |
| Date of birth | Yes | Age protections | No |
| Phone number | Optional | Your account | No |
| Photo | Optional | Your profile picture | No |
| Messages to MAC, goals, feedback | Yes | App features; sent to our AI provider with permission | No |
| Life Audit answers and scores (including health habits) | Yes | App features | No |
| Learning progress and app activity | Yes | App features | No |
| Purchase history (subscription status) | Yes | Managing your plan | No |
| User ID and device push identifier | Yes | Signing in; notifications | No |
| Parent or guardian's email (under 16, if given) | Yes | Asking permission for MAC | No |
| Payment card details | No | — | — |
| Location, contacts, browsing history, advertising ID | No | — | — |
All data is encrypted in transit. You can ask for your data to be deleted, in the app or by email.
17. Security
We protect your data with measures that include:
- encryption of data in transit and at rest;
- access rules in the database so that each person can read only their own records;
- sign-in tokens kept in your device's secure storage;
- mission films delivered through links that expire;
- access for our staff limited by role, with a record kept of administrative actions.
No system is completely secure. If a breach is likely to put your rights at risk, we will tell you and the relevant regulator as the law requires.
18. Links to other services
The app and website link to other services, such as the App Store and Google Play for managing subscriptions. We are not responsible for their privacy practices and encourage you to read their policies.
19. Changes to this policy
We may update this policy. If a change is significant, we will tell you by email or in the app before it takes effect. The date at the top shows when it was last revised.
20. Contact us
REACTIV8 THE NATION LIMITED 2 Manor Farm Court, Old Wolverton Road, Old Wolverton, Milton Keynes, MK12 5NN, United Kingdom
Email: iamgr8support@reactiv8.org.uk
© 2026 REACTIV8 THE NATION LIMITED. Company No. 07768924. All rights reserved.