Draft — will be updated before public launch

Privacy Policy

Last updated October 10, 2026

This is a short, plain-language draft. It explains what Gauntly collects and why. A full policy will replace it before our public launch.

What we collect

  • Your email address, and your name and profile picture if you sign in with Google or GitHub.
  • The apps you add: their name and website address.
  • Results of the checks we run: pages visited, problems found and screenshots of those problems.
  • Launch Day Rehearsals: replay videos of our AI testers using your app and pictures of it on different screens.
  • If you connect code: we read it (read-only) to look for problems. We don't keep a copy of your code.
  • If you join the waitlist: your email and, if you tell us, what you build with.

How we use it

  • To sign you in and show you your own apps and reports.
  • To run the checks you ask for and keep a history of them.
  • If you turn on Guardian: to check your app every day and email you when something changes.
  • To email you about Gauntly. You can ask us to stop at any time.

We do not sell your data.

How long we keep it

  • Uploaded .zip files are deleted right after the review.
  • Screenshot and replay deletion is scheduled after 30 days; failed storage deletions are retried. Detailed Cheater/Hacker evidence and completed fixture recipes also expire after 30 days.
  • Everything else stays until you delete the app or your account.

Who can see it

Only you can see your apps, reports, videos and screenshots. A public badge or launch certificate is only visible if you turn it on. Certificates include environment, version and remaining problem counts. Public release receipts additionally share the frozen promise and evidence list, coverage limits, and any owner exception notes.

We use trusted service providers to run Gauntly: Supabase (database, sign-in and file storage), Anthropic (the AI behind our AI testers, Coach and code rule checks), Lemon Squeezy and PayMongo (hosted payment checkout), and an email service for Guardian alerts. Coach receives bounded app context and recent chat messages. Disposable account credentials are encrypted with a project-specific Vault key and available only to the test service. Do not put real customer data into staging fixtures.

Your choices

You can ask us at any time to delete an app, or your whole account and all its data. Email hello@gauntly.dev.