1. Who we are
Phalanx Labs ("Phalanx", "we", "us") sells:
- practical documents for breaking a habit
- the Behavior Control System
- Assisted Implementation
Phalanx is the controller of the personal information described in this policy.
Questions and requests about your information go to manish.shetty@phalanxlabs.io. We reply within 7 days.
2. What we collect
| Information | When | Why |
|---|---|---|
| Name and email address | At checkout, including a checkout you start and do not finish | To deliver what you bought, send receipts, remind you about an unfinished order, and answer support requests |
| Payment details | At checkout | Collected and stored by our payment processor, including the card kept for a one-time offer you accept after your order. Phalanx never sees your full card number |
| What you write in your documents | In your portal, as you type | So your answers are saved and there when you come back |
| Your System records | As you use the System | To run the program: the lessons you finish, the tasks and habits you tick, your worksheets, your daily log entries and the 1 to 10 rating of each day, your phase reflections, and the habits you choose to track daily |
| Your implementation call booking | When you book the call | Your name, email and the time you chose, passed to us by our booking provider, so the specialist knows the call is booked |
| Videos you upload | Only if you choose to share one after Day 100 | Stored privately, and used only as the permission you chose allows (section 5) |
| Assisted Implementation messages and reports | If you buy Assisted Implementation | Your Signal messages to the specialist, specialist notes, alerts, and your weekly reports |
| Support messages | When you email us | To resolve your request |
| Site usage data | While you browse | Pages viewed, buttons clicked, device type, approximate location from IP, and referral source. Used to measure whether the site and our advertising work, and to fix problems |
The checkout never asks which habit you are working on. Your payment record shows only the product name and the price.
3. How we use it
- To deliver what you bought and let you come back to it.
- To run the System: which lesson opens when, what appears on your Today page, and your history.
- To take payment, send receipts and handle refunds.
- To answer support requests.
- To send you emails about what you bought, and about our other products. Every marketing email has an unsubscribe link, and unsubscribing does not affect anything you bought.
- To measure and improve the site and our advertising (section 7).
- To meet legal, accounting and fraud-prevention obligations.
We do not sell your personal information. We never share what you write or your System records with advertisers.
4. Automated checks and tools
Assisted Implementation monitoring. If you buy Assisted Implementation, automated checks read your System records every day to raise alerts for your specialist. They look for days with no activity, falling behind the program, a day rated 3 or lower in your daily log, and a week of ratings that averages under 5. They also scan what you write for a short list of phrases about self-harm and about severe physical reactions to stopping, so that a person reads it quickly. A person reviews every alert. None of these checks is a clinical assessment. They run only for Assisted Implementation participants.
Weekly reports. Your Assisted Implementation weekly report is drafted from your records by automated tools, which may include an AI model run by a service provider. A specialist reviews every report before it reaches you.
The service provider behind these tools processes your information only to produce the draft for us, under confidentiality terms. It is not permitted to use it to train its own products.
5. Who can see what you write
What you write in your documents and the System is seen only by the systems that run them and the people at Phalanx who need it to support you. For Assisted Implementation, that includes your specialist. Access inside Phalanx is limited to named people and logged.
Nothing you write is published, quoted or used in marketing without your separate permission. You give or refuse permission in two places.
Phase reflections. Each one has its own box asking whether we may quote it anonymously. Leaving it unticked has no effect on your program.
Videos. When you upload a video, you choose whether "Phalanx Labs may use this video as a testimonial or case study for the program, with my face blurred and my name hidden or shortened to an initial." Without that permission, the video is kept private and never used. With it, we use the video only in that anonymized form.
You can withdraw either permission for any future use by emailing us, and we will delete the video on request.
6. Service providers
We use a small number of providers to run the service. Each receives only what it needs for its job, and is bound by contract to keep it confidential and use it only for us.
- Payment processing and checkout: your name, email and payment details.
- Website hosting, the database and file storage: everything described in section 2, stored on access-controlled systems.
- Email delivery: your name, your email address, and the emails we send you.
- Call booking: your name, email and chosen time.
- Signal: the messages you and your specialist exchange, end-to-end encrypted by Signal.
- The automated tools described in section 4.
- Advertising and analytics platforms: the site usage and purchase events described in section 7.
Some providers are located outside your country, including in the United States. Where the law requires it, we rely on standard contractual clauses or an equivalent safeguard for those transfers.
7. Cookies and advertising measurement
The site uses cookies and similar technologies for two purposes. The first is to keep the site working, for example remembering where you arrived from during your visit. The second is to measure advertising, including the Meta Pixel and comparable tools. These tools record events such as a page view, a click on a purchase button or a completed order.
Advertising measurement is on for every visitor in every location. There is no popup, no banner and no opt-out control on this site, and it runs whether or not your browser sends a Global Privacy Control signal.
Each event carries what happened, the order's value, and the browser and click identifiers these tools set.
When you buy, the purchase event also carries four details that help the advertising platform match the purchase to the ad you saw:
- your email address, hashed
- the customer ID we gave you, hashed
- your IP address
- your browser details
Hashed means converted into a fixed code before it is sent, so the address itself is not sent. The platform compares the code with its own records to find a match.
No event ever carries what you write, your System records, your documents, the habit you are working on, or what you bought beyond the order's value.
You can stop these tools from loading with your browser's own settings or a content blocker. Doing so does not affect your ability to buy or to receive what you bought.
8. How long we keep it
- Your documents and your System records: while you have access, and up to 24 months after your access ends, so you can come back and we can answer questions and honor guarantees. You can ask us to delete them sooner.
- Assisted Implementation notes, alerts and reports: up to 24 months after your program ends.
- Videos: kept privately while you have access, and deleted when you ask. A video with permission to use it is also deleted when you withdraw that permission.
- Purchase and payment records: as long as tax and accounting law requires, usually 7 years.
- Details from an unfinished checkout: used for reminders about that order for a few days, and kept only as long as a normal marketing contact.
- Your IP address and browser details from checkout: until the purchase event in section 7 is sent, and never more than 7 days.
- Support emails: up to 24 months after the request is closed.
- Site usage data: in aggregated form. Identifiable analytics data is kept no longer than 26 months.
9. How we protect it
Data is encrypted in transit. What you write is stored on access-controlled systems, never on shared or personal devices. Access is limited to named people and logged. Your portal opens with a private link, so keep that link to yourself. No system is perfectly secure. If a breach ever affects your information, we will tell you and the relevant authority as the law requires.
10. Your rights
Wherever you live, you can ask us to:
- Send you a copy of the personal information we hold about you, including what you have written.
- Correct information that is wrong.
- Delete what you have written, your records, your videos or your account information. We keep only what the law requires, such as the payment record.
- Stop sending you marketing email.
- Explain how we use your information, or object to a particular use.
Email manish.shetty@phalanxlabs.io from the address you used at checkout. We may ask you to confirm your identity before releasing or deleting anything. We respond within 30 days, and there is no charge.
The EEA, the UK and Switzerland. Our legal bases for processing are:
- performance of the contract with you: providing what you bought
- our legitimate interests: running, securing, improving and advertising the service, including the measurement in section 7, and emails about our products that are similar to ones you bought or were buying
- consent: using your reflections or videos in our marketing
- legal obligation: tax and accounting records
You also have the right to complain to your local data protection authority.
California. The rights above cover your rights to know, correct, delete and opt out under the CCPA. We do not sell personal information. We share the site usage and purchase events described in section 7, including the hashed and technical details sent with a purchase, with advertising platforms for measurement. That sharing has no opt-out on this site.
11. Age
Our products are for adults. We do not knowingly collect information from anyone under 18. If you believe a minor has used our products, email us and we will delete their information.
12. Not medical care
Our products ask about habits and the situations around them. What you write is used only to provide what you bought. Nothing we hold is a medical record, a diagnosis or treatment. We do not share what you write with any clinician, employer or insurer.
13. Changes
If we change this policy in a way that affects how we handle what you write, we will email the address on your purchase before the change takes effect. Other changes are posted here with a new date.
Contact: Phalanx Labs, manish.shetty@phalanxlabs.io. See also the Terms of Service and the Refund Policy.