Limitless Legal

Privacy Policy

Effective Date: 6 April 2026
Last Updated: 24 October 2026

Limitless (the “App”) is a self-development and wellbeing app published by Mirage Creative Ltd, a company registered in England and Wales (company number 17094199) (“we”, “us”, “our”). This Privacy Policy explains what information the App handles, how it is used, when it is shared, and what choices you have.

1. Scope

This policy applies to the Limitless mobile app and related feedback and support flows connected to the App.

2. Information the App Handles

2.1 Information you choose to create or provide in the App

Journal and reflection content, including free-writing, gratitude, positivity ratings, wins, and reflections
Routine and habit data, including progress, streaks, completed days, onboarding choices, and preferences
Voice content you record for affirmations or voice scripting
Images you choose for vision-board use or optional feedback screenshots
Settings such as wake time, bedtime, alarms, notification preferences, and pulse settings
Feedback you voluntarily submit, including issue descriptions, ideas, and optional screenshots
If you choose to join Circles or the Healing Hub Community: the display name you choose, circle names you write, posts and replies you write, messages you send in a circle’s group chat or directly to another member, reactions you add, wins you choose to share, and reports you make (see section 4.4)

2.2 Information handled automatically for app functionality

Local notification scheduling data
Device permission status for features such as microphone, photos, and notifications
Limited technical metadata needed by the Expo framework or your device OS to run app features

3. How Your Data Is Stored

3.1 Local on-device storage

Most App data is stored locally on your device, including journal content, gratitude entries, routine progress, streaks, settings, voice recordings, and cached AI feedback.

3.2 No mandatory user account

The current version of the App does not require you to create a user account to use core features.

If you choose to join Circles or the Healing Hub Community, the App creates a small, optional community account on our server. It does not use your email address or phone number. See section 4.4 for exactly what it holds and how to delete it.

4. When Data Leaves Your Device

4.1 ElevenLabs text-to-speech

When you use spoken guidance, affirmations, or similar voice features powered by ElevenLabs, the App may send the relevant text prompt to ElevenLabs for audio generation.

Purpose: text-to-speech generation
Policy: https://elevenlabs.io/privacy

4.2 OpenAI AI coach / reflection features

When you use AI-powered reflection or coaching features, the App may send relevant text you entered — such as journal content, gratitude content, wins, or reflection context — through our server to OpenAI to generate a response.

Purpose: AI-generated coaching or reflective feedback
Policy: https://openai.com/policies/privacy-policy

4.3 Feedback submissions

If you use the in-app feedback tool, your feedback message and any optional screenshot may be sent externally so the development team can review and action it. Based on the App’s current implementation, this may include delivery through Telegram and a task server endpoint used for internal development workflow.

4.4 Circles and the Healing Hub Community (optional)

Circles (small accountability groups) and the Healing Hub Community (a peer grief-support space) are optional. They stay switched off until you choose to join. When you join either one, the App creates a community account on our server, which is operated by Mirage Creative Ltd and hosted on Cloudflare (Cloudflare Workers and a Cloudflare D1 database).

Your community account holds only:

a random user ID
a random secret token that keeps the App signed in to the community (we store only a one-way SHA-256 hash of it, never the token itself)
the display name you choose (a first name or nickname, up to 24 characters)
whether you confirmed you are 16 or over
the date the account was created
when you last opened each circle (for unread counts)
only if you turn on circle notifications: your device’s push token and notification preferences (see “Circle notifications” below)

We do not collect your email address, phone number or contacts for the community account, and we hold a device identifier (a push token) only if you turn on circle notifications. To prevent abuse, we keep daily usage counters linked to your user ID, and sign-ups are rate-limited by IP address: your IP address is used to count sign-up attempts for the day and is stored as part of that daily counter, not in your profile.

Circles. A circle has up to 20 people, and you join one only by using an invite code that a member shares with you (codes expire after 7 days). Members of a circle can see each other’s display name, current streak and preset “cheer” messages, and the circle’s group chat: messages (up to 280 characters) that members send to the whole circle or to one member, with the conversation history. Members can react to messages, cheers and wins with ❤️ 🔥 💪 or 👏, and members can see who reacted. For each circle you choose how you take part, and you can switch at any time: in Champion mode the circle also sees which practices you completed today (shown as icons), and never your score; in Compete mode the circle also sees which practices you completed today (shown as icons), today’s Limitless Score (0–100) and your place on that day’s leaderboard. To create a weekly “last week’s wins” highlight (for example, “did 7 days straight” or “tried 3 new practices”), we keep your daily score, streak and practices on our server for 35 days; a highlight about a best score only ever appears for Compete members. Circle names are written by the person who creates the circle. Nothing else is shared — not your journal, health data, notes, or any other App content. If you leave a circle, sharing with that circle stops immediately.

Sharing a win. You can choose to share a win with a circle: a practice you completed today, your current streak, or — only if you chose Compete mode in that circle — today’s Limitless Score, plus an optional short note (up to 140 characters). Only what you pick is shared. Win notes go through the same moderation as circle messages.

Circle messages. Circle messages appear in the circle straight away, and any member can report one. A copy of each message (and each win note), with your display name and the name of the circle, is sent to our moderators through Telegram so they can remove anything that breaks the community guidelines; depending on our moderation settings, messages may instead be checked by a moderator before they appear. Messages and win notes that mention self-harm or suicide are always held for a moderator to review before anyone else sees them, and the App shows you crisis helplines straight away. Messages, cheers, shared wins and reactions to them stay in the circle’s chat history for 90 days and are then deleted from our server automatically.

Direct messages. You can send a private message (up to 280 characters), a cheer or a win directly to another member of a circle you share. A direct message is visible only to the two of you. You can message someone only while you share at least one circle and neither of you has blocked the other; if you no longer share a circle, the conversation stays readable but closed. Direct messages are not copied to our moderators, with two exceptions: a message that mentions self-harm or suicide is held and sent to a moderator so someone can check in (and the App shows you crisis helplines straight away), and a message you report is sent to our moderators (that one message only, with the sender’s display name). You can block the sender at any time. Direct messages and reactions to them are deleted from our server automatically after 90 days, and straight away when either person deletes their community account.

Circle notifications. Circle push notifications are optional and stay off until you allow them when your phone asks for permission. To deliver them, we store your device’s push token (a device identifier issued by Apple or Google via Expo), the platform (iOS or Android), whether circle notifications are on, and your preferences for that device (messages, reactions to your messages, wins, direct messages). Notifications are sent through Expo’s push notification service (Expo / 650 Industries), which passes them to Apple Push Notification service or Firebase Cloud Messaging. A notification contains the sender’s display name, the circle name (for circle messages) and the first 80 characters of a message or direct message (no message text for anything held for review). We also store when you last opened each circle and each direct-message conversation, to show unread counts and to group notifications so a busy chat doesn’t buzz constantly. You can turn notifications off at any time in Circles (“Circle notifications”) or in your phone’s Settings. A token that Apple or Google reports as no longer valid is switched off, and your tokens are deleted when you delete your community account.

Healing Hub Community. The Community is for people aged 16 and over, and you must agree to the community guidelines before using it. You can write posts and replies (up to 1,000 characters each) and “send love” to posts. Your posts and replies are shown to other Community members with your display name.

Moderation. Every post and reply is checked by a moderator before anyone else can see it. To do this, the text of your post or reply, your display name, and an internal ID are sent to our moderators (Mirage Creative Ltd staff) through Telegram, where they approve or reject it. Reports you make, including the reason you give, are also sent to moderators through Telegram. If a post mentions self-harm or suicide, it is flagged as high priority for moderators and the App shows you crisis helplines straight away. Moderators can hide or remove content and ban accounts that break the guidelines.

Reporting and blocking. You can report posts, replies, circle messages, direct messages and circle members, and you can block other users. A post or reply that receives 3 reports is hidden automatically until a moderator reviews it. A circle message you report is hidden for you straight away, and a message reported by 2 members of a circle is hidden for everyone. A direct message you report is hidden for you straight away, and only that message is sent to our moderators. You can also send us a report from Settings → Support → Report a concern; we receive what you write and your community account number (if you have one), nothing else.

Sensitive information. Grief posts can reveal information about your health, emotional wellbeing, or a bereavement. This is treated as special category data under UK GDPR. You decide whether to share it: posting it in the Community is your choice to make it visible to other Community members, and we process it only to run, moderate, and keep the Community safe. Please do not share anything you are not comfortable with other members seeing, and do not share private information about other people.

Deleting your data. You can delete any of your own posts, replies, circle messages and direct messages at any time in the App. You can delete your whole community account in the App (Your Circles, at the bottom of the Limitless Score screen, or the Healing Hub Community screen → “Delete my community account”). This immediately and permanently removes your account, display name, stats, circle memberships, cheers, circle messages, direct messages and shared wins sent and received (including messages sent to you, in both directions of a direct-message conversation), reactions, push tokens and notification settings, when you last opened each circle, posts, replies (including replies to your posts), likes, reports, and blocks from our server. Moderation messages already delivered to moderators in Telegram may remain in the moderators’ Telegram chat; we keep these no longer than needed for safety and moderation, and we will delete them on request.

Purpose: running Circles and the Healing Hub Community, keeping them safe, and delivering circle notifications
Policies: https://www.cloudflare.com/privacypolicy/ · https://telegram.org/privacy · https://expo.dev/privacy

4.5 Expo push notifications (Circles, optional)

If you turn on circle notifications, they are delivered through Expo’s push notification service (Expo / 650 Industries), which passes them to Apple Push Notification service or Firebase Cloud Messaging. Expo receives your device’s push token and the notification content (sender’s display name, circle name and up to 80 characters of a message). See “Circle notifications” in section 4.4.

Purpose: delivering push notifications
Policy: https://expo.dev/privacy

5. What We Do Not Intend to Collect for Advertising

We do not intend to use the App for third-party advertising, ad-tech profiling, selling personal data, cross-app tracking, or data brokerage.

6. How We Use Information

Provide journaling, routines, reminders, habit tracking, and progress features
Generate spoken guidance and affirmations
Generate AI-based reflection or coaching responses when requested
Allow you to record and replay personal voice content
Send reminders and local notifications you configure
Run Circles and the Healing Hub Community if you choose to join, including moderation, reports, and blocking
Receive and review product feedback
Improve the App and fix bugs
Protect the security, integrity, and operation of the App

7. Legal Bases for UK/EU Users

If UK GDPR or EU GDPR applies, our legal bases may include performance of a contract, legitimate interests, and consent for optional features and permissions.

For Circles and the Healing Hub Community, we rely on performance of a contract (providing the feature you asked to join) and legitimate interests (moderation, preventing abuse, and keeping members safe). Where a Community post reveals special category data, such as information about your health or a bereavement, we rely on your explicit consent when you choose to post it and on the fact that you have chosen to make it public to the Community. You can withdraw by deleting the post or your community account at any time.

8. Data Sharing

We do not sell your personal information. We may share limited data only with service providers that power features you choose to use, feedback-processing tools or channels, where required by law, or to protect users and the integrity of the App.

If you join Circles or the Healing Hub Community, the information described in section 4.4 is shared with the other members who can see it (your circle, or Community members), hosted by Cloudflare, and sent to our moderators through Telegram for moderation.

9. Data Retention

Locally stored App data remains on your device until you delete it, clear app storage, or uninstall the App
Voice recordings stored locally remain until deleted by you or removed with the App
Feedback submissions may be retained internally for product support, debugging, and record-keeping as reasonably necessary
Third-party processed content is subject to the retention practices of the relevant provider
Community account data (Circles and Healing Hub Community) is kept while your community account exists, and is deleted immediately and permanently when you delete your community account in the App; circle messages, cheers, shared wins and their reactions are deleted automatically 90 days after they are sent; push tokens are deleted when you delete your community account, and a token Apple or Google reports as no longer valid is switched off
Posts and replies you delete are removed from our server straight away
We may delete community accounts that have been inactive for 24 months
Moderation messages in Telegram are kept no longer than needed for safety and moderation, and deleted on request

10. Your Choices and Rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or port personal data, and to withdraw consent for optional processing. You can also disable notifications, deny permissions, avoid optional AI or voice features, and delete local App data through your device.

If you use Circles or the Healing Hub Community, you can leave a circle, delete any of your own posts, replies or circle messages, turn off circle notifications, and delete your whole community account at any time in the App (Your Circles, at the bottom of the Limitless Score screen, or the Healing Hub Community screen → “Delete my community account”). You do not need to contact us to do this.

11. Children’s Privacy

The App is not intended for children under 13. If you believe a child under 13 has provided personal information through the App, please contact us.

The Healing Hub Community is for people aged 16 and over. You must confirm you are 16 or over before using it. If we learn that a Community member is under 16, we will remove their access and delete their Community content.

12. Security

We use reasonable steps to protect information handled by the App, but no storage or transmission method is completely secure. You are also responsible for keeping your device secure.

13. International Processing

If you use features powered by third-party providers, relevant data may be processed outside your home country, including outside the UK or EEA. This includes Cloudflare, which hosts our community server, Telegram, which we use for moderation, and Expo, which delivers circle push notifications.

14. Health and Wellbeing Content

Limitless provides self-development content including guided breathwork, journaling prompts, affirmations, cold-water practice guidance, and reflection exercises. This content is for general wellbeing purposes only. It is not medical advice. It is not a substitute for diagnosis, treatment, or care from a qualified healthcare professional. You are responsible for using these practices safely and for stopping any practice that does not feel right for your body.

15. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the Last Updated date and, where appropriate, provide notice through the App or related channels.

16. Contact

Mirage Creative Ltd
Company number: 17094199 (registered in England and Wales)
Email: [email protected]
Website: https://becominglimitless.app/