How Electus LLC collects, uses, stores and protects the information you trust us with.
Last updated: 6 August 2026Electus is a performance app. It builds you a personalised sequence to run before, during and after the moments that matter.
This policy explains what we collect, where it goes, and what you can do about it. It describes what the app actually does today, not what we might do later — if that changes, this page changes with it.
Contact: support@electusperformance.com
When you set up: your first name, the domain you perform in, your subcategory, your role, and your experience level. You choose all of these; none is verified.
When you build a loop: what you're preparing for, your goal for it, what's getting in your way, where you'll be, and how you're feeling. Some of these are free text you type yourself.
Your preferences: your answers to the nine rapid-fire questions, your interests, your music preference, and your thumbs up and down on individual steps.
When you close a loop: whether you achieved your goal, a rating, which factors held or cost you, when it happened, and any written reflection you add.
If you join the community: a username you choose, and anything you post or comment.
If you join the beta list: your email address.
A random device identifier. When you first open the app it generates something like u-mc3k2j-8f2a91b3. It contains no personal information and isn't linked to your phone, your advertising ID, or any account. It stays the same until you erase your data.
Your city. Only when generating a loop, and only if you grant location permission. See section 5.
Crash reports. See section 6.
We don't collect your contacts, your photos, your microphone, your health data, your precise location, your advertising identifier, or your browsing outside the app. We don't use cookies or tracking pixels. There is no advertising SDK and no third-party analytics SDK in the app.
Most of it. The following is stored only on your device, in the app's own storage, and is never sent to our servers:
If you delete the app, this is gone. We can't recover it and neither can you.
One caveat you should know: this storage is not encrypted by the app. It's protected by your phone's own security — your passcode, Face ID, and iOS's app sandboxing. Anyone with your unlocked phone could reach it.
Four companies receive data from Electus. No one else does.
This is the significant one. To generate a loop, we send Anthropic's Claude API the things you typed: what you're preparing for, your goal, what's blocking you, your environment, your mood, your interests, your role and domain, and your first name if you gave one. We also send your preference history so the sequence is tuned to you.
We send this because it's how your loop gets written. Without it, we could only give you generic advice.
Anthropic processes this to return a result. Their handling of it is governed by our commercial agreement with them and by their own policies, which you can read at anthropic.com/privacy. We can't delete data from their systems on your behalf — we can only stop sending more.
When a loop includes a video, we ask YouTube's API for one. The search query is built from your role or domain, the first four words of what you're preparing for, and the word "performance."
Be aware: if you type a company or person's name in the first few words of your performance moment, it will be in that query. If that matters to you, put the name later in the sentence.
We send a city name and a two-letter country code, so the loop can account for the weather. Nothing else. Never your coordinates.
See section 6.
If you allow it, the app reads your approximate location once per hour at most, and only while generating a loop.
Your coordinates never leave your phone. They're converted on the device into a city name and a country code, and only those are sent — to fetch the weather.
We don't store your coordinates, we don't track your movement, we don't request background location, and we never ask where you are when the app isn't open.
If you decline, the app works normally.
We use Sentry to find out when the app breaks. It's off entirely during development and only active in released builds.
Before a crash report is sent, the app strips out: your name, your username, your email, your goals, your performance moments, your reflections, your written notes, your preference vector, and generated loop content. Your IP address is deleted rather than merely masked. Session replay and performance monitoring are both disabled, because they can capture what's on screen.
What's in a crash report: the error and where in the code it happened, your device model, your OS version, the app version, and your random device identifier.
One honest limitation: the scrubbing works by removing known fields. If an error message itself happened to contain something you typed, it could get through. We've tried to prevent this and can't promise we've caught every case.
We use Supabase, hosted in the United States. The app never talks to it directly — everything goes through our own servers first.
What's there:
| What | Contains |
|---|---|
| Beta signups | Your email, domain, role, level |
| Community handle | Your chosen username |
| Community posts and comments | What you posted, your display name or "Anonymous" |
| Shared loops | Loop content, mode, domain, rating |
| Loop feedback | Coded identifiers and numbers only — no free text, no names |
| Closed loops | Domain, outcome, rating, factor codes, date — no written reflections |
| Rate limits | Your identifier and a request count |
The important thing to understand: all of these use the same random identifier. On their own, they identify no one. But your email is stored against that same identifier — so if you gave us your email, everything else becomes linkable to you.
We call this pseudonymous rather than anonymous, deliberately. Data with an identifier removed can sometimes still be traced to a person, especially if their combination of role, domain and dates is unusual. We'd rather tell you that than claim a level of anonymity we can't guarantee.
To build your loops — your inputs and preferences shape what you get.
To make the app better — we look at patterns across many users. Which approaches work for which kinds of performer, where people get stuck, what to build next. This is aggregated and de-identified: we're looking at cohorts, not at you.
To run the service — rate limiting, crash fixing, support.
We don't use your information for advertising, sell it, share it with data brokers, or use it to make automated decisions with legal or similarly significant effects.
We do not sell your personal information. Not your name, your email, or anything you write. Not now, and this isn't a promise we intend to revisit.
We don't share your personal information with third parties for their own marketing.
Two things we do reserve:
Aggregate insight. We may publish or commercially use patterns derived from many users — for example, "performers in this field improve most on this dimension." This is derived from the whole, describes no individual, and could not be used to identify you.
Business transfer. If Electus LLC is acquired, merges, or sells substantially all its assets, information may transfer as part of that business. If it happens, we'll tell you before it takes effect and give you the chance to delete your data first. Any acquirer is bound by this policy until they give you notice of a change.
The hamburger menu has "Erase all my data." It removes everything stored on the device and gives the app a new random identifier — so nothing on your phone points at anything you've already sent.
Email support@electusperformance.com and we'll delete your rows.
Do this before erasing your device data, because we need your current identifier to find them and erasing replaces it.
What gets deleted: your email and beta signup, your community username and profile, your posts, comments, reactions and shared loops.
What we keep by default: the coded feedback and closed-loop records described in section 7 — these carry no name and no free text, and they're what makes the app work for everyone. If you'd rather they went too, say so and we'll delete them.
What we can't delete: anything already sent to Anthropic. Their retention is governed by our agreement with them, not by us.
We'll confirm when it's done. We aim to complete requests within 30 days.
We keep server data while you're using Electus and for a reasonable period after, unless you ask us to delete it. Rate-limiting records expire within days. Crash reports are retained by Sentry on their own schedule, typically 90 days.
We'll delete or de-identify data we no longer need.
Depending on where you live, you may have the right to:
To do any of it, email support@electusperformance.com. We won't charge you and we won't make the app worse for you because you asked.
If you're in the EEA or UK: we rely on your consent for location and for optional features, and on our legitimate interest in running and improving a service you've chosen to use. Data is processed in the United States. You have the right to complain to your local supervisory authority.
If you're in California: we don't sell or share personal information as those terms are defined by the CCPA, and we don't offer financial incentives for your data.
Electus is not for children under 13, or under 16 in the EEA and UK. We don't knowingly collect their information. If you believe a child has given us theirs, email us and we'll delete it.
Data on our servers is encrypted in transit and at rest by our hosting providers. Access is limited to what's needed to run the service. The identifier that links your records is random and holds no personal information.
We can't promise perfect security — nobody honestly can. If a breach affects your information, we'll tell you as required by law.
If we change this policy we'll update the date at the top. For anything that materially changes what we collect or what we do with it, we'll tell you in the app before it takes effect.
Electus LLC
support@electusperformance.com
If you want your data deleted, put "Data deletion" in the subject line.