Privacy Policy

Overview

Northway ("we," "our," or "us") provides an AI-assisted executive coaching application. This Privacy Policy explains what information we collect when you use the Northway mobile or web application, how we use that information, with whom we share it, and the choices you have. By using Northway, you agree to the practices described here.

Information We Collect

Account information

When you register, we collect your email address and the password you choose. We may also collect display name and profile preferences you optionally provide.

Coaching content

The messages, prompts, and audio you submit during a coaching session, along with the AI responses generated, are processed and stored to provide session history and continuity. Voice input, when used, is transcribed to text and stored alongside your written messages.

Usage and device information

We collect technical information automatically: device type, operating system version, app version, language, and basic interaction events (e.g., feature usage, errors). We do not collect device identifiers for advertising and we do not use third-party analytics SDKs that track you across other apps or websites.

Payment information

If you subscribe to a paid tier, payments are processed by our payment provider (Stripe). We do not store full payment card details on our servers; we receive only a tokenized identifier and the subscription status.

How We Use Your Information

• To provide the coaching experience and generate AI responses to your inputs.
• To maintain your session history so you can resume conversations.
• To authenticate you and keep your account secure.
• To process subscriptions, billing, and customer support.
• To monitor reliability, fix bugs, and improve product quality.
• To comply with legal obligations and enforce our terms.

We do not sell your personal information. We do not use your coaching content to train third-party AI models on your behalf without your explicit consent.

AI Processing and Third-Party AI Providers

Northway generates responses using large language models. Your prompts and conversation context are transmitted to one or more AI service providers (which may include OpenAI, Anthropic, or similar providers) so a response can be produced. These providers process your content under their own data-handling commitments and, where available, we use API endpoints that are configured to not retain your inputs for training purposes.

You should not include in coaching messages any information you would not be comfortable transmitting to a third-party AI service (e.g., government-issued ID numbers, full payment cards, regulated health data, or trade secrets you are contractually prohibited from sharing).

How We Share Information

• Service providers who help us operate the app: cloud hosting, database hosting, AI inference, payment processing, email delivery, and error monitoring. They receive only what is necessary to perform their function and are bound by data-protection agreements.
• Legal and safety: We may disclose information when required by law, valid legal process, or to protect rights, property, or safety.
• Business transfers: If we merge, are acquired, or sell assets, your information may be transferred as part of that transaction. We will notify you of any change in control.

Data Retention

We retain account information for as long as your account is active. Coaching session content is retained so you can review past conversations; you may delete individual sessions or your entire account at any time, after which the corresponding content is removed from active systems within 30 days. Backup copies are purged on a rolling basis (typically within 90 days). We may retain limited records longer where required for legal, tax, or fraud-prevention purposes.

Your Rights

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise any of these rights, contact us at the address below. We will respond within the time period required by applicable law.

Children's Privacy

Northway is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, please contact us and we will delete it.

Security

We use industry-standard safeguards including encryption in transit (TLS), encryption of sensitive credentials at rest, and role-based access controls. No system is perfectly secure; we cannot guarantee absolute security but we work to protect your information using commercially reasonable measures.

International Data Transfers

Our service providers may process information in countries other than your own. Where required, we use appropriate transfer mechanisms such as Standard Contractual Clauses.

Changes to This Policy

We may update this policy from time to time. Material changes will be communicated through the app or by email before they take effect. The "Last updated" date at the top of this page reflects the most recent revision.

Contact

Questions, requests, or complaints about this policy can be sent to: