Privacy Policy

This Privacy Policy explains how we collect, use, share, and protect information across the MAUNi and U-ACT recovery coaching ecosystem, including MAUNi - London Recovery Coaching and every site on the mauniuact.com family of domains (for example dcc.mauniuact.com, chatgpt.mauniuact.com, claude.mauniuact.com, grok.mauniuact.com, meta.mauniuact.com), londonrecoverycoaching.com, and any partner or white-label portal we operate on the same platform (together, the “Services”).

The Services are operated by David Collins Coaching, together with Ubuntu Academy Coaching & Training CIC (a UK community interest company, Company No. 15189272) and MAUNi GGZ B.V. (Siriusdreef 17-27, 2132 WT Hoofddorp, the Netherlands), who work together as the MAUNi ecosystem (“MAUNi,” “we,” “us”). If you need to know which entity is responsible for a particular service or contract, email us and we will confirm.

This is a working policy describing what the Services actually do today. It is not a substitute for independent legal advice, and because we operate across the UK, the Netherlands/EU, and South Africa, local law may give you additional rights beyond what is described here.

1. Information we collect

Account and profile information

When you create an account we collect your name, email address, and the role you sign up as (for example student, coach, case manager, or partner organisation staff). If you complete phone-based two-factor verification, we also store your phone number and a verification status.

Signing in with a third-party account

You can sign in using Google, Apple, Facebook, LinkedIn, Microsoft, or X instead of creating a password. When you do, the provider shares basic profile information with us — typically your name, email address, and profile photo, and for LinkedIn, your professional headline and organisation. We use this only to create and authenticate your MAUNi account. We do not post to your social accounts, and we do not use Facebook Login data for advertising or share it with data brokers.

WhatsApp

If you start or continue onboarding on WhatsApp, we (through our messaging provider, Twilio) receive your WhatsApp phone number and the messages you send us, so we can respond, verify your identity, and link your WhatsApp conversation to your MAUNi account once you consent to that.

Conversations with our AI assistants

Pages such as MAUNi GPT, Claude, and Grok let you ask questions that are answered using our approved knowledge base. The questions and answers in these conversations are processed to generate a response and may be logged to improve answer quality and safety. Please do not enter names, addresses, medical records, or other identifiable personal or safeguarding information into these chats.

Recovery-related content you choose to share

Signed-in features such as journal entries, reflections, goals, mood check-ins, and container assessments let you record information about your own recovery journey. This is sensitive information you choose to provide, used to support your own coaching and learning experience, and visible to you and, where a coaching or case-management relationship exists, the professional working with you.

Training, learning, and professional records

We keep records of course enrolment, lesson progress, live class attendance, CPD reflections, supervision notes, and — for MAUNi Certified professionals — assessment evidence and certification status.

Technical and usage data

Like most web platforms, we automatically collect device and browser information, IP address, pages visited, and similar log data, generated by our hosting provider (Vercel) and database provider (Supabase) as part of operating the Services securely.

2. How we use your information

• To create and secure your account, and verify your identity where required.
• To provide coaching, training, referral, and AI-assisted support features.
• To connect you with the right human coach, case manager, or support pathway.
• To communicate with you about your account, classes, or support requests.
• To maintain the safety, security, and integrity of the Services.
• To understand how the Services are used so we can improve them.
• To meet legal, regulatory, and certification-body obligations (for example CLERO and ISO/IEC 17024 record-keeping for MAUNi Certified).

We do not sell your personal information.

3. Who we share information with

We share information with service providers who help us run the Services, under agreements that limit their use of your data to providing that service:

• Supabase — our database, authentication, and file storage provider.
• Vercel — our hosting provider.
• Twilio — our WhatsApp and SMS messaging provider.
• OpenAI, Anthropic, and xAI — the AI providers behind our GPT, Claude, and Grok-branded assistants, used to generate responses to your questions.
• Google, Meta (Facebook), LinkedIn, and Microsoft — only if you choose to sign in using one of their accounts, or where we use Google Workspace tools (such as Drive or Calendar) to support training content and scheduling.
• Zoom — for live class hosting and, where recorded and approved, training content.

We may also share information where required by law, to protect someone’s safety, or with your consent — for example, sharing relevant information with a human coach or case manager you have asked to support you.

4. International data transfers

Our database is hosted in the EU (Ireland), and our hosting provider operates a global network with some processing in the United States. Where information is transferred outside the UK, EU, or South Africa, we rely on our providers’ standard contractual safeguards.

5. Data retention

We keep account and service data for as long as your account is active, and for a reasonable period afterward to meet legal, safeguarding, or certification-record obligations. You can ask us to delete your data at any time — see our Data Deletion page.

6. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or receive a copy of your personal information, and to object to certain processing. To exercise any of these rights, email david@uact.org.za. If you are not satisfied with our response, you have the right to complain to your local data protection authority (for example the UK Information Commissioner’s Office, the Dutch Autoriteit Persoonsgegevens, or South Africa’s Information Regulator).

7. Children

The Services are intended for people aged 16 and over. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us and we will remove it.

8. Security

We use industry-standard measures — including encrypted connections, access controls, and role-based permissions — to protect your information. No system is completely secure, and we encourage you not to share sensitive personal or medical information through chat features.

9. Not a crisis or emergency service

The Services, including our AI assistants, are not a substitute for emergency, medical, clinical, or crisis support. If you or someone else is in danger, please contact your local emergency services immediately.

10. Changes to this policy

We may update this policy as the Services evolve. We will change the “last updated” date above whenever we do, and significant changes will be highlighted on our Services.

11. Contact us

Questions about this policy or your data can be sent to david@uact.org.za.