Privacy Policy

Last updated: 14 August 2026

Who we are

Never Throw In The Towel (“NTITT”, “we”, “us”) provides a wellbeing platform to members, usually through their employer. For the personal data described here, NTITT is the data controller. You can contact us about privacy at privacy@ntitt.co.uk.

The data we collect

Account data: your name or display name, email address, the company you belong to, and your notification preferences. Wellbeing data you choose to enter: your morning and night routines, weekly and 30/90-day reviews, sleep score and day rating, self-reported steps, and anything you write in the community. Technical data: a session cookie so you stay signed in, and, if you turn them on, a push-notification subscription.

How we use it, and what your employer can see

Your wellbeing entries are private to you. Your employer never sees the content of your routines, reviews, scores or journals. They see only aggregate participation numbers across their whole staff— for example how many people completed a check-in — and never an individual's answers, and never a total that could identify one person. We use your data to provide the service, send the reminders you ask for, and keep the platform safe.

Lawful bases

We rely on contract (to provide the service you or your employer signed up for), your consent (for optional things like notifications, community participation and the podcast), and our legitimate interests (to keep the service secure and working). Health-adjacent information you enter is treated as special-category data and handled with additional care; where required we rely on your explicit consent.

Who we share it with

We use trusted processors to run the service: Supabase (database and authentication), Brevo (transactional email), Twilio (support SMS, where enabled) and Vimeo (video hosting). They act on our instructions under data-processing terms. We do not sell your data. We may disclose data where the law requires it.

International transfers

Where a processor stores or handles data outside the UK, we rely on appropriate safeguards such as UK adequacy regulations or standard contractual clauses. (To be confirmed against each processor's hosting region before launch.)

How long we keep it

We keep your data for as long as your account is active. If you delete your account, your personal data is erased. Aggregate, non-identifying statistics may be retained. (Specific retention periods to be set with legal.)

Your rights

Under UK GDPR you have the right to access, correct, delete, restrict, object to, and receive a portable copy of your personal data, and to withdraw consent at any time. You can export your data and delete your account yourself from Settings, or contact us at privacy@ntitt.co.uk. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

Cookies

We use a small number of strictly-necessary cookies to keep you signed in. We do not use third-party advertising or analytics trackers.

Children

The platform is intended for adults and is not directed at children under 16.

Changes

We may update this policy; we will post the new version here and update the date above.