Privacy Policy
Last updated: 1 October 2026
This Privacy Policy ("Policy") describes how we collect, use, and share your personal information, and how you can exercise your privacy rights.
SCOPE
This Policy applies to the Getahead platform, including our mobile applications, websites, software, and related services (collectively, the "Services"). Please also read our Terms of Service, which govern your use of the Services.
In this Policy, "Getahead", "we", "us" and "our" mean Get Ahead Mindset Ltd, a company registered in England and Wales (company number 11255446), registered office 102-108 Clerkenwell Road, London, England, EC1M 5SA.
Getahead acts as a data controller for the personal information described in this Policy. This means we determine how and why your personal information is processed.
We process your personal information in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018.
If you require this Policy in an alternative format, contact us at hello@getaheadmindset.com.
INFORMATION WE COLLECT
Information You Provide
Account Information. We collect information such as your name, email address, date of birth, and password.
Profile Information. We collect information you provide about yourself, such as your sport or activity, training goals, target events, and experience level.
Assessment Responses. We collect your answers to the Mental Edge baseline assessment and to any further dimension assessments you complete, covering areas such as identity, values, belief systems, self-talk style, and responses to pressure.
Coach Conversations. We collect the content of your conversations with the Getahead coach, whether typed or spoken. Where you use voice input, we process an audio recording and a transcript. Audio is discarded following transcription.
Support Information. We collect information you provide in connection with support requests, surveys, and other correspondence.
Information From Using the Services
Training Activity. We collect information about the workouts you start and complete, including level, duration, frequency, plan progress, and badges earned.
Performance Metrics. We generate metrics from your information, including your Mental Edge report, identified mental strengths and limiting patterns, your mental fitness score, and your weekly and monthly insight reports.
Usage Information. We collect information about how you use the Services, such as screens viewed, features used, session length, and notification interactions.
Device Information. We collect technical information from the device used to access the Services, including device type, operating system, app version, device identifiers, IP address, approximate location inferred from IP address, and crash logs.
Payment Information. If you purchase a subscription, we collect information about that purchase. We do not collect or store your payment card details. Payments are processed by PCI-compliant third-party providers.
Information From Other Sources
App Stores and Payment Providers. We receive subscription and transaction status from Apple, Google, and Stripe
Event and Coaching Partners. If you access the Services through a partner such as HYROX, Ultra X, or a coach, we may receive your name, email address, and access entitlement from that partner.
Anonymised and Aggregated Information
We create anonymised and aggregated information by removing identifying elements. Once anonymised, this information is no longer personal data and is not subject to this Policy. We use it to analyse and improve the Services.
SPECIAL CATEGORY INFORMATION
Information You Provide
Information concerning your mental wellbeing is special category data under Article 9 of the UK GDPR and is subject to additional protection. This includes your assessment responses and reports, check-in data, coach conversations, and mental fitness scores.
Legal basis. We collect information you provide about yourself, such as your sport or activity, training goals, target events, and experience level.
Withdrawing consent. You may withdraw your consent at any time by contacting us. Because the Services depend on this information, withdrawal means we can no longer provide them to you. Withdrawal does not affect processing carried out before you withdrew.
Restrictions. We do not sell this information. We do not use it for advertising or share it with advertising networks. We do not disclose it to third parties except as set out in How We Share Your Information.
HOW WE USE YOUR INFORMATION
To Provide the Services
Create and Manage Your Account. We collect information you provide about yourself, such as your sport or activity, training goals, target events, and experience level.
Generate Your Mental Edge Reports. We process your assessment responses to produce your report, including identified strengths and limiting patterns, and to calculate your mental fitness score.
Build and Adapt Your Training Plan. We process your assessment responses, training activity and check-in data to select, sequence and adjust the workouts and plans recommended to you.
Deliver Coach Conversations and Insights. We process your coach conversations and check-in data to generate coach responses and produce your weekly and monthly insight reports.
Send Nudges and Training Notifications. We process your profile, assessment responses and activity to determine which notifications to send and when.
Process Your Subscription. We process account and transaction information to manage payments, renewals and cancellations.
To Provide AI Features
We use artificial intelligence, including large language models, to deliver certain features ("AI Features"). AI Features include generating your Mental Edge reports, calculating and updating your mental fitness score, recommending and adapting your training plan, generating coach responses, and identifying themes and sentiment in your check-ins and coach conversations.
Our workout library and the training methodology underlying it were developed by qualified sport and performance psychologists using established psychological approaches. AI determines which content you receive and when; it does not generate the underlying methodology.
To provide AI Features, we transmit relevant content to Anthropic and OpenAI, which process it as our service providers under contract and may use it only to provide the service to us.
We do not use AI Features to make decisions producing legal or similarly significant effects. You may request an explanation of, or human review of, any report, score or recommendation by contacting us
To Assist You With a Request
We use your information to respond to support requests and correspondence. Depending on the request, this may require us to access your account.
To Analyse and Improve the Services
We use usage and device information, and anonymised or aggregated information, to measure engagement, diagnose faults, develop new features, and improve existing ones.
To Send Marketing and Promotions
Where you have consented, we use your name and email address to send you information about the Services, offers and new features. You may withdraw this consent at any time.
To Protect You, Others, and the Services
We use information to maintain security, authenticate users, detect and prevent fraud, misuse and unauthorised access, and enforce our Terms. We may suspend or terminate accounts as a result. We may also process information where we consider it necessary to prevent death or serious harm.
To Manage Legal and Regulatory Obligations
We use information to comply with applicable law and to respond to requests from courts, regulators, law enforcement and other authorities, and to establish, exercise or defend legal claims.
HOW WE USE SHARE INFORMATION
We do not sell your personal information, and we do not share it with third parties for their own advertising purposes.
Service Providers. We share information with third parties that support the operation of the Services. These providers may access only the information required to perform their function, act on our instructions, and are contractually required to protect it.
Category & Purpose:
-
Hosting and data storage - Digital Ocean
-
AI Features - LLM: Claude, Speech to Text: OpenAI, Text to Speech: Inworld
-
Web subscription payments - Stripe
-
In-app subscription payments - Apple, Google
-
Product analytics - Native analytics provided by Anythink
-
Notifications and email - Handled by Anythink, delivered by Firebase and SendGrid
-
Diagnostics and crash reporting - Firebase Crashlytic
Professional Advisers. We may share information with our legal, accounting and insurance advisers where necessary.
Corporate Transactions. If we are involved in a merger, acquisition, financing, reorganisation, insolvency or sale of assets, we may transfer your information as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.
Legal Requirements and Prevention of Harm. We may disclose information where we determine it is required by law or reasonably necessary to comply with legal process; to enforce our Terms; to detect or prevent fraud or misuse; to protect our rights or property; or to prevent death or serious harm.
YOUR PRIVACY RIGHTS & CHOICES
Subject to certain limitations and exceptions, you have the following rights:
Access and Portability. You may request access to the personal information we hold about you, and request a copy in a structured, machine-readable format. Where feasible, we can transmit it to another provider.
Rectify or Correct. You may request correction of inaccurate personal information.
Restrict or Delete. You may request restriction of processing, or deletion of your personal information. You can delete much of your information, and your account, within the app.
Object. You may object to processing carried out on the basis of our legitimate interests, and to processing for direct marketing at any time.
Revoke Consent. Where we rely on your consent, you may withdraw it at any time. Withdrawal does not affect processing carried out before withdrawal.
Automated Decision-Making. As described under To Provide AI Features, we use automated processing to analyse your information. We do not use it for decisions producing legal or similarly significant effects. You may request human review of any automated output.
Non-Discrimination. We will not treat you detrimentally for exercising these rights.
To exercise any of these rights, contact hello@getaheadmindset.com. We will respond within one month. We may need to verify your identity before acting.
CHILDREN'S PRIVACY
The Services are not intended for, nor directed to, individuals under 18 years of age, and we do not knowingly collect personal information from anyone under 18.
If you believe someone under 18 has provided us with personal information, contact hello@getaheadmindset.com and we will delete it
IMPORTANT INFORMATION ABOUT THE SERVICES
The Services are not a medical or healthcare service. Getahead provides mental performance training for sport and fitness. Nothing in the Services constitutes a diagnosis, treatment, or a substitute for advice from a qualified health professional.
The Getahead coach is an automated system. It is built on established sport and performance psychology and developed with qualified psychologists. It is not a person, not a therapist, and cannot provide crisis support.
Risk of harm. Where information you provide indicates a risk of death or serious harm to you or another person, we may act on it, including by surfacing crisis support resources and, in serious cases, contacting emergency services.
If you require urgent support: call 999.
ADDITIONAL IMPORTANT PRIVACY INFORMATION
How We Protect Information
We maintain administrative, technical and physical safeguards designed to protect personal information against unauthorised access, disclosure, alteration and loss. These include encryption in transit and at rest, access controls, secure authentication, periodic security testing, and staff training.
No system can be guaranteed secure. If you believe your account has been accessed without authorisation, contact hello@getaheadmindset.com.
Where a personal data breach is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay, and will report to the Information Commissioner's Office within 72 hours where required.
Retention of Information
We retain personal information for as long as necessary to provide the Services and to meet our legal obligations. In determining retention periods we consider the amount, nature and sensitivity of the information, the purposes for which it is processed, whether those purposes can be achieved by other means, and applicable legal requirements.
-
Account and profile - Duration of account, then deleted within 7 days
-
Assessment responses, reports and scores - Duration of account, then deleted or anonymised within 7 days
-
Coach conversations and check-in data - 90 days, or until deleted by you
-
Training activity - Duration of account, then anonymised
-
Payment and transaction records - 7 years (UK tax law)
-
Support correspondence - 2 years
-
Anonymised information - Retained indefinitely; not personal data
Once deleted, information cannot be reinstated.
Legal Bases
We rely on the following legal bases to process your personal information:
Contract. Where processing is necessary to perform our contract with you, or to take steps at your request before entering into one. This covers account creation and management, generating your reports and plan, delivering coach conversations and insights, and processing your subscription.
Consent. Where you have given us permission for a specific purpose. This covers special category information (see above), marketing communications, push notifications, and non-essential cookies. You may withdraw consent at any time.
Legitimate Interests. Where we process information in ways you would reasonably expect and which do not unfairly affect your rights. This covers analytics and service improvement, security, fraud prevention, and enforcement of our Terms. You may request our assessment of these interests.
Legal Obligation. Where processing is required by law, including retention of financial records.
Vital Interests. Where processing is necessary to protect someone's life, as described under Important Information About the Services.
Cross-Border Data Transfers
We predominantly process your information in the United Kingdom and the European Economic Area. Some service providers listed above process information outside those regions, including in the United States.
Where we transfer personal information internationally, we use appropriate safeguards, including the UK International Data Transfer Agreement or the EU Standard Contractual Clauses with the UK Addendum. You may request copies of the safeguards applied.
Supervisory Authority
Our supervisory authority is the Information Commissioner's Office. You have the right to lodge a complaint with the ICO, although we ask that you contact us first so we can attempt to resolve the matter.
Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF 0303 123 1113 · ico.org.uk/make-a-complaint
ICO registration number: ZB435675
PRIVACY POLICY UPDATES
We may modify this Policy at any time. If we make changes, we will post the revised Policy with its effective date. Where changes are material - in particular to how we process special category information - we will provide advance notice by email or in-app, and will obtain fresh consent where required.
CONTACT US
General: hello@getaheadmindset.com
Get Ahead Mindset Ltd, 102-108 Clerkenwell Road, London, England, EC1M 5SA.