Privacy.

Tom, who runs The Bond, is responsible for the information it keeps (the “data controller”). You can reach him through whoever started your team: ask him to pass your message on.

The Bond supports Pilgrim Bandits but is run separately from them. Money you give goes to them on their own page, and their privacy notice covers that.

• Your first name, and the first names of the friends you add or issue a bond to.
• Your team: its name, who started it, who issued whose bond, and when you joined.
• Your challenge, your starting point, the number you log each month, and the line you write if you write one.
• When you first opened your link or invite, so the person who sent it knows you’re in.

We don’t ask for your email, phone number, address, date of birth or payment details. If you check “How does this compare?”, your age and whether you’re a man or a woman stay on your phone: they’re never sent to us.

Some challenges say something about your health, such as physio sessions, a wheelchair push or seated strength. The law treats that with extra care. We keep it only because you choose that challenge, and only to run The Bond. You can change your challenge at any time, or ask us to delete it.

To run The Bond for you and your team: your card, your team’s page, your months logged and your coin. That’s our legitimate interest in providing what you signed up for; for anything about your health, it’s your consent, given when you pick the challenge. We don’t use it for anything else, sell it, or use it for advertising.

• Your team sees your name, your challenge, whether you’ve logged it, and your line. Never your numbers.
• Pilgrim Bandits see the names of people whose challenge coin is due, and their team, so the coin can be sent.
• Our providers keep it running: Supabase stores it in London, and Vercel runs the site in London. Neither may use it for anything else.

A few small cookies make the site work: one keeps your phone signed in, one holds a request to join while you wait for a bond, and one remembers that you’ve seen your card. No tracking or advertising cookies, and no analytics.

We keep it while your team is going. You can ask to see what we hold about you, to correct it, or to have it deleted, and we’ll do it within a month. If you’re unhappy with how we’ve handled it, you can complain to the Information Commissioner’s Office at ico.org.uk.