Privacy Policy

The controller is The Institute of Applied Psychophysiology, trading as STAND DOWN Recovery, based in the United Kingdom. Privacy enquiries and rights requests can be sent to comms@instituteofappliedpsychophysiology.com.

Please put “privacy request” in the subject line and tell us which right you want to exercise. We may ask for proportionate information to verify your identity and locate the relevant records.

Account data. Clerk provides authentication. We receive the Clerk user identifier, primary email address and, where available, first name needed to recognise and authorise you. Clerk separately processes the information you give it during sign-in. See Clerk’s privacy policy.

Purchase and entitlement data. Stripe collects checkout and payment-card details. We receive and store your email address, account identifier, product and consent version, amount and currency, payment status and dates, access expiry, and Stripe checkout, payment and event identifiers. We don’t receive or store your full card number. See Stripe’s privacy policy.

Device, security and listening data. The service stores your chosen device name, generated device identifier, registration and revocation dates, passkey credential identifier, public key, counter and supported transport information. Short-lived authentication challenges, hashed unlock tokens and playback authorisations are also recorded. We do not receive the fingerprint, face scan or device PIN used by your device. We store the programme session, playback position, completion status and update time so progress can be restored.

Service records. Application logs record a request identifier, request method, path without its query string, response status, and operational errors. Ask Chuck connection failures are logged as a reason and upstream status, not as conversation text. Infrastructure providers may also process ordinary connection and security information needed to deliver the service.

To suggest a checkout currency, our server may send your public IP address to ipapi.co, an external IP-location provider, and request only an approximate country code. We don’t send your email, account details, listening history or payment details. The provider receives the IP address and processes it under its own privacy policy.

We don’t persist or log the IP address for this lookup. A process-salted digest and country result are cached only in server memory for up to ten minutes to reduce repeated requests. Approximate location can be wrong, particularly with VPNs or proxies; it doesn’t establish your identity, permissions or eligibility. You can always choose another offered currency. If location or exchange rates are unavailable, we show pounds sterling. An explicit currency choice skips the location lookup.

We use this limited processing in our legitimate interest in making prices understandable to visitors. Your chosen currency is saved in this browser’s local storage so it can be reused on your next visit.

Ask Chuck is an optional, separately hosted embedded conversation service. When a signed-in user opens it, we send the service a pseudonymous Clerk user identifier, the requesting site origin and the “stand-down” audience in exchange for a short-lived access grant. We don’t send your email address or first name in that request.

Questions and conversation content entered in the frame go directly to the Ask Chuck service and aren’t stored in STAND DOWN’s programme-progress tables or application logs. That content may reveal information about your health. Review any privacy information and choices shown in the Ask Chuck frame before submitting it, and don’t include payment-card details, another person’s information or information you don’t want that service to process. Ask Chuck isn’t an emergency service, diagnosis or medical treatment.

STAND DOWN stores its server-generated playback-device identifier under stand_down_device_id in local storage. It’s necessary to match the browser to the one registered playback device. Clerk uses cookies or similar storage needed to create and maintain your authenticated session. Stripe and Ask Chuck may use their own necessary storage when you visit their checkout or embedded service.

We haven’t added advertising cookies or an audience-analytics service to the current STAND DOWN app. Necessary storage is used to provide the service you request, secure accounts and prevent misuse; disabling it may stop sign-in, device registration, checkout or playback from working.

We process account, purchase, entitlement, device and progress data because it’s necessary to take steps at your request and perform our contract with you: creating access, taking and fulfilling payment, providing the personal licence, registering a playback device, streaming recordings, saving progress and opening Ask Chuck when you request it.

We rely on our legitimate interests to secure the service and recordings, diagnose faults, prevent fraud and account sharing, maintain limited operational logs and establish, exercise or defend legal claims. We limit this processing to what is reasonably necessary and consider its effect on users. We process transaction and related records where necessary to meet legal, tax, accounting and consumer-law obligations. Where the law requires consent for a particular activity, we’ll ask for it separately; you may withdraw it without affecting earlier lawful processing.

We disclose only the information needed for the relevant service to: Clerk for authentication; Stripe for checkout, payment and payment-event processing; Replit for application hosting and managed infrastructure (see Replit’s privacy policy); Google Cloud Storage for private programme-audio object storage (see Google Cloud’s privacy notice); and the Ask Chuck service for the identifier, grant context and messages described above when you choose to open it.

We may also disclose information to professional advisers, courts, regulators, law enforcement or other parties where necessary to comply with law or establish, exercise or defend legal rights. This notice doesn’t remove any legal duty to disclose information where one applies.

Some providers may process information in the United States or other countries outside the United Kingdom. The protection used depends on the provider, destination and processing involved. Where UK law requires a transfer mechanism, the transfer must be covered by an applicable adequacy regulation or appropriate safeguards, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with supplementary measures where appropriate.

Provider information is available in Clerk’s data processing addendum, Stripe’s data processing agreement, Stripe’s data transfers addendum and Replit’s data processing agreement. These links describe provider-level arrangements; they’re not a guarantee that every provider, destination or transfer uses the same mechanism.

We ask only for account and payment details needed to provide access and do not store full card details or biometric data. Ask Chuck receives a pseudonymous account identifier rather than your email or name. Logs omit query strings, authentication headers and cookies, and aren’t intended to contain conversation text.

How long account, entitlement, device and progress records are kept is determined by the period needed to provide and secure your access and any continuing need to resolve disputes, enforce rights or meet legal obligations. Purchase and payment retention is determined by applicable tax, accounting and consumer-law requirements. Security and operational record retention is determined by their usefulness for investigation and service integrity.

Authentication challenges, unlock tokens and playback authorisations have short technical expiry times that prevent later use. Expiry doesn’t by itself mean immediate database deletion, and the service doesn’t claim an automated deletion schedule. Provider-controlled records, including Clerk, Stripe and Ask Chuck records, follow the relevant provider and controller retention arrangements. Personal data is deleted or anonymised when it is no longer needed and deletion action is taken, unless law or a live dispute requires it to be retained.

Subject to the conditions and exemptions in UK data protection law, you may ask for access to your personal data, correction, erasure, restriction of processing, data portability, or object to processing based on legitimate interests. You may withdraw consent where consent is the basis used. You also have rights relating to decisions based solely on automated processing that produce legal or similarly significant effects; STAND DOWN doesn’t use such automated decision-making in the current service.

Email comms@instituteofappliedpsychophysiology.com to make a request. There’s normally no fee, although the law permits one in limited circumstances. You can read more in the ICO’s guide to your data protection rights.

If you’re unhappy with our response, you may complain to the UK Information Commissioner’s Office. The ICO explains how to make a data protection complaint. We’d welcome the opportunity to address your concern first, but contacting us doesn’t limit your right to complain to the ICO.