Privacy Policy

Who we are

The data controller for the information described here is Walford & Keetch Ltd, a company registered in England and Wales (company number 17463048), trading as Countermoves. Contact us about anything on this page at [email protected].

What we collect, and how

• Screenshots you choose to upload to Counter or Review. You pick them in Apple's photo picker; the app receives only the images you select and never browses the rest of your library.
• What is in those screenshots: the messages, and any names and profile photos on screen, including the other person's. See other people's messages.
• What you type in Practice, and the replies. The other side of a Practice chat is an AI character, not a real person.
• The replies, reviews and grades we produce from the above.
• Your progress: XP, rating, rank, streak, Practice chats played, lessons finished, and the kinds of mistakes your Practice chats show. The app sends these as you use it.
• A display name, only if you choose one. It does not need to be your real name.
• Your age group (16-17, 18-20, 21-24 or 25+), which you pick during setup. We never ask for your date of birth.
• A random identifier the app makes on your phone the first time you open it, sent with every request. It is not derived from your phone, your Apple ID or anything about you.
• Your IP address, which any server necessarily sees with each request. We do not store it: see how long we keep it.
• Your subscription status, from Apple through RevenueCat. Apple handles payment; we never see your card details.
• Anything you email us, with the address you send it from.

What we do not collect

We do not collect your contacts, your location, your browsing history, your health data, your financial information or your date of birth. We do not use advertising or attribution SDKs and we do not track you across other apps or websites. Reminders are scheduled on your phone, so we hold no push notification token.

What we use it for

• To give you the app: Counter's replies, Practice chats and their reviews, Review's grades, lessons, your progress, and your subscription.
• To choose your next Practice opponent, from the kinds of mistakes your Practice chats show.
• The league board: if you choose a display name, it is shown to other players in your own age group, with your XP, rating, number of Practice chats and tier. Your age group is used to seat you with your own age group and to decide which features you can use, and for nothing else.
• To stop abuse and keep costs bounded: the random identifier and a one-way code made from your IP address count daily limits and make sure the one free Counter is used once per install.
• To answer you when you email us.

We never sell your data, never use it for advertising, and never use your screenshots, conversations or Practice messages to train AI models.

Anthropic, our AI provider

Counter, Review and Practice are powered by Claude, an AI made by Anthropic, PBC (United States).

• What is sent to Anthropic: each screenshot you upload to Counter or Review, with everything visible in it; the text read from those screenshots; and, in Practice, every message you type, the conversation so far, and the whole chat again at the end to write your review.
• What is never sent to Anthropic: your display name, your random identifier, your age group, your IP address or anything else from your phone.
• Your permission comes first. Before anything is sent, the app shows a screen that names Anthropic, lists what is sent and asks Allow or Don't allow. Nothing is sent unless you tap Allow. If you don't allow it, Openings, Learn and Stats keep working, and the app asks again only when you next try Counter, Review or Practice.
• Withdrawing it: in the app, open Stats, tap the cog (top right) and switch off Send to Anthropic's AI. From then on nothing more is sent until you allow it again. Withdrawing cannot recall what was already sent; that copy is deleted on Anthropic's schedule below.
• What Anthropic does with it: it processes it only to send back your result, on our instructions. Its commercial terms bar it from training its models on what we send. It deletes it within 30 days, except that it may keep it for up to 2 years (and its safety scores for up to 7) if its automated safety systems flag it, or longer where the law requires.

Who else processes it

• Anthropic (United States): the AI, as described above.
• Fly.io: hosts our server, in London. Everything sent to us passes through it, and your progress and Practice chats are stored on a disk it operates.
• RevenueCat (United States): manages subscriptions. It receives the random identifier and your purchase records, never your screenshots or chats.
• Expo (United States): delivers app updates. It receives a random install token, your iOS version and the app version, and no content.
• Cloudflare: runs this website and forwards email sent to our addresses.
• Google: the email inbox where messages you send us arrive.
• Apple: handles payment and subscriptions as its own controller, under its own privacy policy.

Each of these companies processes your data only to provide its service to us, under written terms that require it to keep your data confidential and secure and to protect it at least as well as this policy does. Where data goes to the United States, we rely on the safeguards in those terms.

How long we keep it

• Counter screenshots: held in our server's memory, never written to disk, and deleted within 30 minutes. If you ask for more replies, the same image may be sent to Anthropic again within that time.
• Review screenshots: not kept once they have been read. The graded result is held in our server's memory, never written to disk, until the server restarts, and the app keeps your last 20 reviews on your phone until you delete the app.
• Practice chats and their reviews: 12 months from when the chat started.
• Your progress, display name, age group and random identifier: 12 months after you last use the app.
• The record that an install has had its free Counter: the random identifier, kept while the free Counter is offered so it can be used once per install.
• Your IP address: held in memory for about a minute for rate limits, and otherwise only as a one-way code that cannot be turned back into an address, reset daily.
• Backups: encrypted daily snapshots of our server's disk, kept for 5 days.
• Anthropic's copy: 30 days, with the exceptions above.
• Email: until your question is answered, and no longer than 12 months.

Deleting your data, and your other rights

Countermoves has no sign-in, so your data is filed under the random identifier. To delete it from the app, open Stats, tap the cog and tap Delete my data: your progress, Practice chats and reviews are deleted from our server and from your phone straight away. Your display name stays reserved, with nothing attached to it, until 12 months after you last used the app. To have that removed too, or to ask us instead, use Contact support in the same place, which fills in your identifier, or email [email protected]; we do it within 30 days. What we cannot delete: copies Anthropic still holds on its schedule above, Apple's and RevenueCat's purchase records, the free-Counter record, and backups until they expire after 5 days. Deleting the app removes what is on your phone.

You can also ask for a copy of what we hold, or ask us to correct it. If you are unhappy with how we have handled your data you can complain to the UK Information Commissioner at ico.org.uk.

Age

Countermoves is rated 16+ and is not intended for anyone younger. Practice is for adults only. If we learn that we hold information from someone under 16, we delete it.

AI-generated people

Every person pictured in the app is AI-generated, and every Practice character is an AI. No real person reads or replies to your Practice chats.

A word about other people's messages

A screenshot of a conversation contains someone else's words, and sometimes their name and photo. They are sent to Anthropic with the rest of the screenshot, used only to produce your reply or your review, and kept only as described above. We never publish them or show them to anyone else. Crop out anything you would rather not send, and please do not upload conversations you would not be comfortable having read back to you.

Changes

If this policy changes we will update the date at the top of this page, and tell you in the app if the change is significant.