Burn Privacy Policy

Draft for legal review, not final. Version 2, updated 2026-10-12. Burn LLC, Colorado.

Who we are

Burn is run by Burn LLC, a Colorado company. This policy says what Burn collects, why, who handles it, how long it's kept and how to delete it. The Terms say how Burn works.

What we collect, and why

• Your phone number, stored encrypted: to text you.
• Your messages to Burn and Burn's messages to you, with when each was sent: to read what you said and answer it.
• What Burn takes from your messages: your goals and promises, your check-ins, the workouts and sessions you log, and short quotes in your own words: to hold you to what you said.
• Your time zone, guessed from your area code: to text you at sensible hours.
• The state you tell Burn you're in: to send the notices your state's law requires.
• Your crew, its name and your friend code, if you join friends: to show your crew your week.
• Which of Burn's texts carried a card, and visits to the join page from a card's code or a link with a source on it, counted with nothing about who visited: to see how people find Burn.
• Delivery details from LoopMessage, like whether a text was delivered or read and any error: to know a text reached you.
• Your agreement to these terms: your first text to Burn, your YES, when each was sent, and which version of the terms was in force: to show you agreed.
• Your Strava activities and access to your Strava account, if you connect it, stored encrypted: to count your workouts.
• Whether you paid, from Stripe, if you ever pay: a Stripe customer ID and your payment status.
• If you are someone's witness: your number, stored encrypted, and that you agreed: to text you about them.

We don't collect your contacts, your location or your payment card details. Burn doesn't ask about your health and doesn't try to work out your health from what you say.

What we don't do

We never sell your data, never use it for ads, and never give your messages to analytics or advertising companies.

Who else handles it

• LoopMessage delivers every message between you and Burn. They can read every message and keep it under their own policy.
• Supabase stores our database.
• Railway hosts Burn.
• Anthropic writes Burn's replies. Your messages and the parts of your record a reply needs are sent to Anthropic's AI model to write it. Your phone number is never sent. Anthropic deletes them within 30 days and doesn't use them to train its models, except that anything its automated systems flag as breaking its usage policy may be kept up to 2 years.
• Stripe handles payments, if you ever pay.
• Strava, only if you connect it.

What your crew sees

If you join friends on Burn, they see the name you pick, your count this week and your streak. They never see your number or your messages. Your cards show your friend code.

Reviews

Some exchanges are flagged for review, for example when Burn's safety checks stopped a reply, when a reply went wrong, or when you might be in crisis. A person at Burn reads the flagged messages to improve Burn. Flags are kept 60 days.

What you tell Burn about Burn is kept as feedback: a rating or one word when Burn asks how it's doing, a complaint like too many texts, and a word on why if you stop. A person at Burn reads it to improve Burn. Feedback is kept 60 days.

How long we keep it

• The raw text of your messages: 30 days.
• Short quotes in your own words: 90 days.
• Flagged exchanges and feedback: 60 days.
• Queued copies of messages waiting to be handled: up to 14 days, encrypted.
• A card you ask for: held in memory at a private link for LoopMessage to fetch, and gone once fetched or after 15 minutes, whichever is first. It is never written to disk.
• Your record (your goals in your own words, what you logged, Burn's messages to you, your crew, your state and your agreement to these terms): until you delete your data.
• If you text Burn and never reply YES: your first message for the raw-text period above, and a scrambled form of your number (a one-way hash) with when Burn asked, so Burn doesn't ask again, for 90 days or until you text delete my data.
• Backups are kept for up to 7 days, so deleted data is fully gone within 7 days.

LoopMessage, Anthropic, Stripe and Strava keep their own copies under their own policies.

Your rights

Text delete my data, then DELETE to confirm, and Burn deletes your account right away and texts you that it's done: your messages, your record, your agreement to these terms, your flags, your feedback, your crew membership, your witness links and your Strava connection. A record of your agreement stays, as below. Or email us with your number: Burn texts that number to confirm, and once you reply, it's deleted the same way, within 30 days of your request.

To see or get a copy of what Burn has on you, or to correct it, email help@textburn.app with your number. We confirm it's you by text before we send anything. You can also correct your goals by texting Burn. Text stop to stop all messages and start to come back.

What stays after you delete: if you texted stop, a scrambled form of your number (a one-way hash) so we keep honoring it; a record that an account was deleted and when, and counts like how many people stopped, with nothing that identifies you; and your DELETE message, not linked to you, for up to the raw-text period above.

For 4 years after you delete, a record of your agreement: the scrambled form of your number, which versions of the terms Burn asked you to agree to and the exact text of each ask, when Burn asked, when you replied YES, when Burn told you about the terms, when you texted stop if you did, and when you deleted. No messages, goals or anything else. Then it's deleted.

Security

Your phone number, the raw text of your messages and your Strava access are encrypted. Your data travels over encrypted connections. The rest of your record is in our database, which only Burn can reach. If your data is ever exposed in a breach, we'll text you.

Adults only

Burn is for adults only. If we learn someone under 18 is using it, Burn stops texting them and deletes their data, keeping only a count that it happened.

Consumer health data (Washington and Nevada)

Your workout goals and the sessions you log may count as consumer health data under Washington's My Health My Data Act and Nevada's law. We collect them only to run Burn for you as this policy says, and never sell them, share them for ads, or give them to analytics companies. You can see, get a copy of and delete them as described above.

If you tell Burn you're sick or hurt, it keeps your words like any other message, so it doesn't roast you for it. If a message of yours reads like a crisis, Burn keeps when it happened, to hold its own texts for 7 days, and counts that it happened, with nothing that identifies you.

Changes

When this policy changes in what we do with your data, Burn texts you once, the next time it replies to you, with the link, and asks you to reply YES. Until you do, nothing about Burn changes for you.

Contact

Questions or requests: help@textburn.app.