11:59 Privacy Policy
- Effective: September 25, 2026
- Operator: CoinFluence LLC, a Virginia limited liability company
- Contact: support@eleven-fiftynine.app
- Terms: https://eleven-fiftynine.app/terms
The short version
- We collect what you type into 11:59: your goal, deadline and amount, and the photos and notes you send as proof. We also keep a random ID for your phone, its time zone, and a short record of what you did in the app. No email, no password.
- We use it to run your goal: take and refund your payment, check your proof, remind you, and record the result.
- Stripe takes your payment. Apple handles sign-in and push. With your permission, Anthropic's AI reads your proof photos and goal. It can approve your goal or propose that it was not met; a person at 11:59 confirms every "not met" result before 11:59 keeps money. Your group sees your name and status, never your photos.
- Proof photos are deleted 90 days after your goal closes. Most of the written record of the decision is deleted after 2 years. Payment records are kept while your account exists and for 7 years after.
- Delete your account in the app: Menu, then Account, then Delete account.
- We never sell your information. No ads, no tracking, no analytics kits.
Who we are
11:59 is operated by CoinFluence LLC, a Virginia limited liability company: the party you make your agreement with, the merchant that takes and refunds your payment, and the controller of the information described here. The App Store lists Rohan Anand as the seller for now.
What we collect
| What | From | Why |
|---|---|---|
| A random installation ID and a random sign-in key | The app creates them on your phone and keeps them in its keychain. We store only a hash of the key. | To know which goals are yours without an account |
| Your goal, deadline, how you will prove it, the amount, and that you signed. You sign by drawing on the screen; the drawing stays on your phone and we record only "Signed by hand". | You | To run and settle your goal. Frozen once signed, except the deadline, which you can move once in the first 15 minutes or ask a person to move. |
| Your phone's time zone | The app | Deadlines and reminders |
| Apple's identifier for you and an encrypted Apple sign-in token (optional) | Sign in with Apple | To find your goals on another phone |
| Payment records | Stripe (see Payment) | To refund the same payment, and as a tax and dispute record |
| Proof photos or screenshots, and any note you add | You | To decide your goal |
| Your answer to "Let AI check my proof", and when you gave it | You | To know whether we may send your proof |
| The AI's reading of your images and its score, decisions, reasons, your messages, appeals and requests | The review process, and you | The record of how your goal was decided |
| A confirmer's name, and their answer, the name they confirm and their note | You, and the confirmer | To decide a goal someone confirms |
| The name you give when you join a group, and your status. A group's creator is shown as "The creator". | You | So your group can see how each member is doing |
| Coaching data: your plan, the steps you type, progress notes, rest days, settings, supporters and the names you give | You, and any supporter you invite | The optional coaching |
| Push token, notification permission, reminder preferences, quiet hours | Your phone | Reminders and notices |
| Usage events: which screens you open and how you got there, reminders scheduled, skipped or opened, notices shown, results viewed, coaching activity such as steps started and whether a reminder helped, and an optional written reflection | The app | To see whether 11:59 works, and to prove a notice reached you |
Your goal is whatever you type. If you put health, relationship or other private details in it, they travel with the goal everywhere this page describes.
We do not collect your GPS location, contacts, camera, microphone or advertising identifiers. Photos come through the iOS photo picker, so the app never reads your photo library, and location and camera details are removed on your phone before upload. We ask Apple for neither your name nor your email. Your "I'm 18 or older" answer stays on your phone. 11:59 has no passwords, and it emails you only to answer email you send us.
Payment
Payment happens on a page hosted by Stripe that opens in your browser. We send Stripe the amount, internal reference numbers, and the item name "11:59 goal stake". We do not send your goal, your name or your email. Stripe collects your card details and anything you type on its page under Stripe's own privacy policy (stripe.com/privacy), and uses payment information for its own purposes, such as preventing fraud. We never see your card number. Payments are in test mode, so no card is charged, until 11:59 says otherwise in the app.
Stripe sends our server messages about each payment, refund and dispute. We keep only the parts we need: IDs, amounts, currency, status, reason codes, type and dates. Your name, email, address and card details are removed before a message is stored. We create no customer profile at Stripe and cannot delete Stripe's own records.
The AI reading of your proof
Before you first send proof, 11:59 asks whether it may send your photos and the words of your goal to Anthropic, an AI company in the United States. If you say no, or do not answer, nothing is sent and a person reads your proof. Saying no changes nothing about your goal, your deadline or your money; a person may take longer. You can change your answer at any time in Account ("Let AI check my proof"); turning it off stops the next send.
If you say yes, we send Anthropic your images and the wording of your goal and its checks, which can include your deadline, in a request to api.anthropic.com, sent again if it fails. We do not send your name, your notes or any account identifier. Anything visible in your images is sent, including other people and any names in them. Anthropic returns a short description of each image and what it read, such as the course, the score, the date and short quotes of text, with a confidence score. It is told not to name people, but it can quote a name printed in an image. We keep that reading as part of the decision record after the photos are deleted.
We use Anthropic's standard commercial terms with no special agreement. Anthropic says it does not train on your images by default and deletes them within 30 days. If its safety systems flag a request, it may keep it for up to 2 years, and its safety scores for up to 7 years, or longer if the law requires. We do not use Anthropic's file storage.
Decisions software makes
Without a person, software:
- approves your goal when the AI's score is 0.75 or higher (out of 1), no agreed check failed, and nothing looks edited, contradictory, unreadable, late or aimed at the reviewer; the refund then starts;
- proposes "not met" when the score is 0.25 or lower and the checks did not pass, unless one detail is missing, in which case it asks you; a person then reads anything you send and decides;
- asks you for a clearer image or a missing detail, at most twice;
- records whether your proof arrived by its "Send proof by" date;
- refunds or keeps your money when you cancel: all of it back within 15 minutes of paying, before you send anything; after that, cancelling means 11:59 keeps it;
- applies a deadline change you make yourself in the first 15 minutes;
- cancels your goal with nobody at fault and refunds everything if waiting on us adds up to 14 days, or if your payment went through but the goal could not start.
Everything else goes to a person: every image still unclear after two requests, every appeal, every message, and every "not met" result. The AI can approve your goal, but only a person can make "not met" final. The one time software keeps your money is a cancel after the free 15 minutes, above. Nothing automated ever charges you a second time. You can ask a person to look at any of these by writing to support.
Who sees your information
Companies we work with. We share your information only with the companies below, only for the reasons listed, and only with companies whose terms protect it at least as well as this policy does.
| Company | What it gets |
|---|---|
| Stripe | Your payment (see Payment) |
| Apple | Sign in with Apple: that your Apple account is the same one as last time. Push: your device token, the notice text and our internal reference numbers. Notices never include your goal. |
| Anthropic | Your proof images and goal wording, only with your permission |
| DigitalOcean | Hosts our server and stores whole-server backups, in the United States |
| Namecheap | Forwards email you send to support to our mailbox |
| Stores the email you send to support and our replies, including any copy of your data you ask for, in the Gmail mailbox it is forwarded to |
Our server is in the United States. Stripe, Apple, Anthropic and Google may process your information in other countries under their own terms.
People at 11:59. A person we authorize reviews proof in a sign-in-only web console. They see your goal, amount, deadlines, images, notes, messages, appeals, requests for more time, what the AI found, your confirmer's name, answer and note, and whether your money is being returned or kept. Every sign-in, decision and image view is recorded with the reviewer's identity. Reviewers do not see your installation ID, your card or Stripe's records.
Your group. Everyone in a group sees each member's display name, whether and when they signed, and their status: in progress, proof with us, approved, not met, proposed not met, cancelled or unresolved. Because everyone signs for the same amount, members can tell you paid it, and they can tell whether you sent proof and how it ended. They never see your photos, notes or payment details. Anyone with the code can join and see the same list. Joining lists you as "Not signed yet" until you sign, and you stay listed even if you cancel. The invite page shows the group's goal, deadline and amount to anyone with the link.
Confirmers. If you name someone to confirm you did it, you share the link yourself; we do not contact them. The page shows them your goal, the deadline and any change to it, not your name. We keep their answer, the name they confirm and their note with your goal. You see their answer and note; a person at 11:59 sees all of it.
Supporters. A supporter you invite to your coaching is an 11:59 user. Anyone with your invite code sees the name you give and, if you shared it, your goal, before accepting. A supporter sees that name, your goal only if you share it, your progress (steps, streaks, last active day) and whether you finished. Never your proof, money, notes or result.
Nobody else. We do not sell personal information, share it for advertising, or use analytics, crash-reporting or advertising kits. Apart from Apple's own services, the only server the app talks to is ours.
Notifications
Push notifications never name your goal, amount or result. A notice about your goal says only that there is an update and to open 11:59; a reminder says only that a deadline, proof or response is coming up. The alerts the app schedules on your phone say the same. Reminders name your goal on the lock screen only if you turn on goal details in Coaching. We record when you first open a goal, or Messages, while 11:59 proposes that goal was not met, because that can give you more time to respond (Terms, section 6).
Coaching
Coaching (plans, steps, reminders, supporters) is on by default. You can decline the plan, set coaching to "No reminders, just the app", or leave notifications off. Plans are built by fixed rules on our server; your goal text is not sent to any AI for coaching. The feature can test different versions of coaching, including leaving part of it out; none is running now, and none changes your money, deadline or rules. Coaching data stays until you delete your account.
How long we keep it
| What | How long |
|---|---|
| Proof photos and screenshots | Deleted from our server 90 days after your goal closes, by a daily job. The period is frozen into each goal when you sign. Anything still open on your goal, such as an appeal, a dispute, an unread message or an unsettled payment, delays deletion until it is cleared. |
| Decision records: the AI's reading, checks, decisions and reasons, your explanations, messages and appeals, requests for more time, and your confirmer's answer and note | Deleted 2 years after your goal closes, by the same daily job. What stays: the goal and its signed terms, the outcome code, the image's hash, the name you gave your confirmer, any deadline change we granted with the reason you typed and our reply, and the payment record. |
| Payment records | While your account exists. After you delete your account, a stripped record of each payment (Stripe IDs, amounts, refunds, disputes, dates and outcome codes; no goal, signature or account ID) is kept for 7 years after the last money movement, for tax and dispute records. |
| Goals, coaching data, usage events, notification records | Until you delete your account |
| Server log | Our app logs errors. An entry can include internal IDs and error details, never your IP address. Logs are rotated daily and deleted after 14 days. |
| Backups | We back up the database and proof files once a day on the same server and delete each backup after 30 days. DigitalOcean also backs up the whole server, including those backups, and keeps its copies for about another month, so a copy can exist for up to about 60 days. Deleted data stays in a backup until that backup is deleted. If we restore one of our own backups, we first delete again every account deleted after it was taken. |
Deleting your account
Open Menu, then Account, and choose Delete account. You need no Apple account, payment or support request. It removes your goals, proof, decisions, coaching data, notifications and your identity on our server, and your sign-in key stops working. It cannot be undone. If you used Sign in with Apple, the app asks you to sign in again first, then we tell Apple to disconnect the app.
If a paid goal is still open, or any money is unsettled, we save your request, stop new payments, and finish the deletion by ourselves once that goal is settled and any refund owed to you has been sent. If the app is still on your phone, it tells you the account is gone the next time you open it.
What survives deletion:
- A record that this account was deleted and when, with no goal, no proof and no name.
- The payment record described above, for 7 years.
- A group you created keeps its goal, deadline and amount for the other members, and its invite page keeps showing them. Your name and membership are removed, though other members' saved copies of the member list can still show your display name.
- Stripe's own records, and the stripped Stripe messages about your charges, refunds and disputes, with no set end date.
- If we invited you by email during the pilot, that invitation record keeps the address.
- Copies in backups, for up to about 60 days.
Deleting the app is not deleting your account. Your sign-in key stays in your phone's keychain, and reinstalling reconnects you to the same goals. Delete your account first.
Age
You must be 18 or older to put money on a goal. The app asks you to confirm this before your first payment and keeps your answer on your phone. 11:59 is not directed to children under 13, and we do not knowingly collect their information. If you think someone under 18 has put money on a goal, email support.
Your rights
Wherever you live, you can email support@eleven-fiftynine.app to get a copy of what we hold about you, delete it, ask what we did with it, or complain. Include your support code (Menu, then Account; the app's Contact support button adds it for you) and tell us your goal and roughly when you made it, so we can find your account and know it is yours. A copy comes as one file: your goals, terms, proof details but not the photos, decisions, payments and messages. We reply within two business days. Deleting is also in the app. Correcting is limited: a signed goal is frozen by design, except its deadline.
Some state privacy laws apply only to much larger companies, so they may not apply to us. We honor the requests above for everyone anyway. We do not sell personal information and do not share it for targeted advertising, so there is nothing to opt out of there. The decisions listed under "Decisions software makes" are the only automated decisions about your result or your money. You can decline the AI reading, and you can ask a person to look at any of them.
If you were named as a confirmer and want your name or note removed, email support and tell us the goal. We blank your name and note wherever they appear; your yes or no answer stays with the goal. A supporter can leave in the app, and the person they support can remove them.
Security
Traffic between the app and our server is HTTPS only, and the app refuses redirects. There are no passwords; your sign-in key is a random value stored hashed on our server. The Apple token we hold is encrypted. Proof files are stored with restricted permissions. Most other data, including goal text and push tokens, is stored unencrypted in the server's database, behind the server's access controls; our backups are stored the same way. Deleted rows are overwritten in the database, not just marked deleted; old copies can stay in its write log until it is reused, and in backups until they are deleted. Our server also runs other services we operate. Only people we authorize can sign in to it. If a breach affects your information, we will tell you as the law requires.
Our website
The pages of eleven-fiftynine.app have no accounts, no cookies for visitors and no analytics, and our web server keeps no log of visits: not to those pages, and not to the app's own paths on the same address (the payment return, invite, confirmer and review pages, and the app's API). The review page, used only by our reviewers, sets two sign-in cookies. Stripe's payment page uses Stripe's own cookies to prevent fraud. We do not track you across other apps or websites, and no one else can do so through 11:59, so our app and website do nothing different when your browser sends a Do Not Track signal.
Changes
We will post changes here and update the date above. A goal already under way keeps the proof retention period it was made under.
Contact
CoinFluence LLC, Virginia support@eleven-fiftynine.app