What happens to what you write

The short version

Your questionnaire answers and your written inventories are stored on our servers against your account, so they are still there when you sign in tomorrow or on another phone. Nobody reads those against your account. There is no staff view of them, no support lookup and no partner view. Two things are different, because both are addressed to us rather than to you: the note you leave when you rate a lesson, and anything you send through the feedback box. We read those, with your email address next to them. The one use beyond handing your writing back to you is academic research, where answers are counted across many accounts and never read as one person’s writing.

Everything below says the same thing at greater length, and adds the parts that a short version cannot carry honestly.

Who we are

P-Minus runs p-minus.com and the P-Minus mobile app, and decides how the personal data described here is used. That makes us the controller of it.

We are based in Pakistan, and the people who build and run P-Minus work from there. Most of you are not, which is why this page keeps naming British and European law. Those rules follow the user rather than the company, so they reach us because they cover you. Where we sit also decides where your writing ends up, and the section on who else handles it says what we do about that.

Write to [email protected] about anything on this page, including a request to see, correct or delete your data. Postal address: Karachi, Pakistan.

Who can use P-Minus

You must be 18 or over to use P-Minus or to join the waitlist. That is a condition of using it, not a suggestion.

We do not verify your age beyond asking, so this rests on what you tell us. If we learn that an account or a waitlist entry belongs to someone under 18, we delete it and everything attached to it. If you think a child is using P-Minus, write to [email protected] and we will act on it.

What we collect on this website

If you join the waitlist we store your email address, the date you joined, and the utm_source, utm_medium and utm_campaign values in the link that brought you here, when they are present. We keep those to know which campaign a signup came from.

After you join, the form offers three optional questions: your age, how long you have been struggling, and what you have tried before. Answering is optional and skipping costs you nothing. If you answer, we store the answers against the same waitlist row.

We also measure how the site is used, through PostHog on servers in the European Union, and through Vercel Analytics and Vercel Speed Insights. That covers page views, rough location from your IP address, browser and device type, and how quickly pages loaded.

PostHog also records browsing sessions on this site, which means the pages you moved through and where you clicked on them. It pools clicks, mouse movement and how far visitors scroll into heatmaps of each page. Every form input is masked before the recording leaves your browser, so a recording of the waitlist form shows that you typed into the email box and not what you typed. Your email address and your answers to the optional questions reach us through the form when you submit it, never through a recording.

What we collect in the app

To have an account at all, we store the email address you sign in with.

Then, as you use the program, we store what you put into it:

• Your answers to onboarding and questionnaire screens, and the segment they place you in.
• How you practise, which includes how often you pray and how central your faith is to how you live. Those answers decide which voice the program speaks in, and the law treats them as data about your religious beliefs.
• Your religion. It decides whether the program quotes the Qur'an and hadith or speaks in words any faith in one God can use, and like your practice it is data about your religious beliefs.
• Your date of birth, your sex, and whether you are married.
• Which country your phone is set to, as a two-letter code. We use it to know which countries the program is being used in.
• Which days you open the app, how many times, and how long it stays open on each of them.
• On Android, the link Google Play says you installed the app from, including any referral code in it. We use it to count which referral links brought people in and which of them went on to subscribe.
• The step inventories you write, in your own words.
• Which step you are on, when you entered it, and how you answered the gate to leave it.
• Daily tasks you mark done, lessons you have read, and the stars and notes you leave on them.
• Lapses you record, with the severity and the trigger you name.
• The gaze counter's two numbers for each day: the times you lowered your gaze and the times you did not.
• Acts you commit to, in your own words.
• Anything you send through the in-app feedback box, along with your platform, app version and language.

The app measures usage through PostHog. Session replay in the app masks every text input and every image before it leaves your phone, so the replay shows that you typed, not what you typed. PostHog also works out a rough location from your IP address, which reaches the level of a city or a region and never a street. We use it to know which countries the app is being used in. The app never asks your device for its location. It has no location permission, it reads no coordinates, and the country on your account is the region you picked in your phone’s own settings, not where you are standing.

The app does not read your screen, your browsing, or the content you look at outside it. There is no blocker and no device monitoring, and there never has been one on iOS.

Who can see your writing

Nobody reads your questionnaire answers or your inventories as yours. That is a structural claim, not a promise about good manners, so here is what it rests on. There is no staff screen that shows one account’s answers or inventories. There is no support lookup, which also means we cannot read your inventory back to you if you ask us what you wrote. And there is no partner or accountability view, so nothing you write is ever shown to a spouse, a friend or a mentor.

The exception is anything you address to us. The note you leave when you rate a lesson and the message you send through the in-app feedback box both land on a screen only we can open, where they sit beside the email address on the account, the username, the segment and the day you joined. Opening one of them shows everything else that account has sent us. We read them to fix what is broken and rewrite what is not landing, and there is no way to do that with the account stripped off, because half of what a report is worth is being able to write back. Waitlist entries and the optional answers beside them are read the same way. If you want to tell us something without your account attached, email [email protected] from an address you do not sign in with.

Our database refuses client reads outright. Every read and write goes through a server function that checks who you are first, and each of those functions only ever returns your own rows.

The exception is the small number of engineers in Pakistan who operate the database, who could technically query it, as at any company. We are working on a written access rule and an access log so that this is checkable rather than merely stated. Until that exists, treat this paragraph as the honest limit of the promise above.

Research

We count answers across accounts for academic research. A study might report how many people in a segment answered a question a given way, or whether a step is where people stop. Your writing is never read as one person’s writing, never published, and never quoted.

There is no separate consent screen for this and no opt-out toggle. Using P-Minus means your answers can be counted in that way, and this page is where we say so. The one place we ask for a specific research consent is the screening questionnaire in the app, which asks about that questionnaire alone and nothing else.

This is not a diagnosis

Nothing P-Minus shows you is a medical or psychological diagnosis, and no score here says you have a disorder. The questionnaires place you in a starting point for the program. If you are struggling in a way that needs professional help, please see a professional. We are not one.

The questionnaire picks that starting point automatically, with no person reading your answers, and it decides which version of the program you get. That is the only decision we make about you by machine. It has no legal effect on you and nothing else about your life turns on it.

Why we are allowed to process this

If you are in the UK or the European Economic Area, the law wants us to name a legal basis for each use.

• Running your account and giving you the program is performance of our contract with you.
• Holding your email address on the waitlist, and our product analytics, rest on our legitimate interest in knowing whether the product works and where people leave. You can object to that, and we will stop.
• An answer to the optional waitlist questions says something about your sex life, so the law holds it to the same higher bar as your writing in the app. We store those answers on your explicit consent, which is why they are optional, why skipping them costs you nothing, and why we treat sending them as the consent itself. Ask us and we will delete the answers and leave you on the waitlist.
• What you write about pornography use is data about your sex life, which the law treats as a special category and holds to a higher bar. We process it on your explicit consent, given when you start the program, and you can withdraw it at any time by deleting your account or writing to us.
• Counting answers across accounts for research rests on scientific research in the public interest, with the safeguard that nothing leaves as one person’s writing.

Who else handles it

We use these companies to run the service. None of them may use your data for their own ends.

• Supabase, for the database, sign-in and server functions.
• Vercel, for hosting this website and its analytics.
• PostHog, for product analytics, on servers in the European Union for this website.
• Amazon Web Services and Hostinger, for the emails we send you.

Some of them process data outside the UK and the EEA. Where they do, the transfer runs on the standard contractual clauses those companies publish.

So do we. Your data reaches Pakistan, because that is where we are, and neither the UK nor the European Commission has ruled that Pakistani law protects it to their standard. Nothing about the country carries that protection, so it has to come from the contracts that bind us to handle your writing the way this page describes. We would rather write that down than leave you to work out where a Pakistani company keeps a British user’s inventory.

We do not sell your data. We do not share it with advertisers.

How long we keep it

Your account data stays until you delete your account. Deleting an account deletes your inventories, your answers, your lapses, your ratings and your feedback with it, because every one of those rows is tied to your account and goes when it does. Two records stay, with your account taken off them: each payment, because a payment has to stay answerable in a refund dispute or a tax return, and the referral link you installed from, so the referral is still counted. Counts already included in a research aggregate cannot be pulled back out, because by then they are numbers with no account attached.

Waitlist entries stay until we launch and have contacted you, or until you ask us to remove yours. Analytics data follows each provider’s own retention period.

Ask from the profile screen in the app. The steps are written out at p-minus.com/delete-account, and if you cannot get into the app at all, email [email protected] instead. A person carries it out, usually within a few days, and you can withdraw the request until then.

There is a second option, and we would rather you took it. Instead of deleting, we can remove your email address and your username and lock the account so nobody can sign back into it, and leave the answers and the writing where they are with nobody attached to them. What stays is the only record anyone has of what this looks like from the inside, and it is what the program is built out of. Choosing it costs you the account and keeps the part that helps the next person. We do not ask you to justify either choice.

Your rights

You can ask us for a copy of your data, ask us to correct it, ask us to delete it, ask us to restrict what we do with it, ask for it in a portable format, or object to a use that rests on legitimate interests. Where we rely on your consent you can withdraw it at any time, and withdrawing it does not make what we did before you withdrew it unlawful. If you are in California, you can also ask what we collect and ask us not to sell or share it, which is easy for us because we do neither.

Email [email protected]. We reply within 30 days, and we will tell you if a request is complex enough to need longer.

If we handle a request badly, you can complain to a data protection authority. In the UK that is the Information Commissioner’s Office. In the EEA it is the authority for the country you live in. Pakistan has no regulator of that kind, because its data protection bill has sat in draft since 2018 and is still not law, so a user in Pakistan has the email address above and nothing standing behind it. Better to know that than to assume otherwise.

Cookies

This site sets a cookie to keep you signed in, and our analytics providers set their own to tell one visit from the next. There is nothing here for advertising.

When this page changes

If we change what we do with your data, we change this page and move the date at the top. If the change is a significant one, and we have your email, we will email you about it rather than expecting you to check.