Archimedes (“we”, “us”) is an AI coaching service: a short intake call, personal one-week plans, and short coaching lessons by phone or WhatsApp. This policy explains what we collect, why, who processes it for us, how long we keep it and how to have it deleted. Questions or requests: a@futureprompt.com.
Who we are (data controller)
Archimedes is operated by MGD ADVISORY LTD (company no. 17298622), 77 Purves Road, London, United Kingdom, NW10 5TD. MGD ADVISORY LTD is the data controller for personal data processed through Archimedes. Contact: a@futureprompt.com.
1. What we collect
- Account details: your name, email address and, if you sign in with Google, your Google account email and basic profile.
- Phone / WhatsApp number: so we can call or message you for the lessons you book.
- Coaching content: what you tell Archimedes in calls and messages (recordings, transcripts and the plans and summaries created from them).
- Bookings: the lesson times you choose and the calendar invites we send.
- Google Calendar free/busy (optional, only if you grant it): see section 3.
- Payments: handled by Stripe. We receive your subscription status, not your full card number.
- Technical data: basic logs (e.g. IP address, request times, errors) kept by our hosting provider for security and reliability.
2. How we use it
- To run your intake call, build your personal plans and deliver lessons.
- To schedule, call, text and remind you about lessons you booked, and to move or cancel them when you ask.
- To send service emails (confirmations, invites, lesson notes). We do not send marketing without your consent.
- To keep the service secure and working, and to meet legal obligations.
Legal bases (UK/EU GDPR): performance of our contract with you, your consent (Google Calendar access, call recording notices, optional messages), and our legitimate interest in running a secure service. We do not sell your personal data.
3. Google Calendar (calendar.freebusy) and Google user data
If you choose to connect Google Calendar, we request only the https://www.googleapis.com/auth/calendar.freebusy scope. This lets us see when you are busy or free — not the titles, descriptions, attendees or locations of your events. We use it only to suggest lesson times that do not clash with your calendar, when you book, move or reschedule a lesson (including when you ask Archimedes to do it during a call or chat).
We store a Google refresh token so we can check free/busy when you book or move a lesson. The refresh token is encrypted at rest with AES-256-GCM and is never shown to other users. Free/busy results are used at the moment of scheduling and are not stored beyond what is needed to create your booking. Lesson invites are sent from our own calendar to your email address; we do not write to your calendar.
Limited Use. Archimedes’ use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular: we use Google user data only to provide the scheduling feature described above; we do not transfer it to others except as necessary to provide that feature, to comply with law, or as part of a merger or acquisition with notice to you; we do not use it for advertising, and we do not sell it; we do not use it to train generalised AI or machine-learning models; and no human reads it unless you ask us to (for example for support), it is needed for security or legal reasons, or it has been aggregated and anonymised.
You can disconnect at any time in your Google Account permissions or by emailing us; we then delete the stored token.
4. Calls, WhatsApp, recordings and transcripts
Coaching calls and chats are recorded and transcribed so Archimedes can coach you, remember your progress and create your plans and lesson notes. You are told this at the start of the service; if you do not want to be recorded, please do not use the calls. Our providers for this are:
- ElevenLabs: the AI voice and chat agent; processes audio, messages, recordings and transcripts.
- Twilio: telephone calls to and from our UK phone line.
- Meta (WhatsApp Business Platform): WhatsApp calls and messages, including call-permission requests and reminders. WhatsApp’s own terms and privacy policy also apply to your use of WhatsApp.
- Anthropic: AI model used to turn your intake transcript into personal plans.
You can ask us not to call you on WhatsApp (or decline the permission request in WhatsApp) and we will use a normal phone call instead, and you can ask us (by WhatsApp reply or email) to stop sending messages at any time.
5. Other service providers
- Vercel: hosting and file/data storage.
- Google: sign-in and calendar invites.
- Stripe: payments.
- Resend: email delivery.
These providers process data on our behalf under their own data-protection terms. Some are based outside the UK/EEA (mainly the USA); where so, transfers rely on appropriate safeguards such as the UK International Data Transfer Addendum / EU Standard Contractual Clauses or adequacy decisions.
6. Storage, security and retention
- Data is stored with our hosting provider and accessed only by the service and, when needed, the founder for support.
- Connections use HTTPS. Google refresh tokens are encrypted with AES-256-GCM. Internal tool and scheduler endpoints require secret keys.
- We keep your account, plans, bookings and transcripts while your account is active and for up to 12 months after your last activity, then delete or anonymise them, unless we must keep something longer by law (e.g. payment records for tax).
- Recordings and transcripts held by our voice providers are deleted in line with those providers’ retention settings and when you ask us to delete your data.
7. Deletion and your rights
You can ask us to access, correct, export or delete your data, or object to or restrict its use, by emailing a@futureprompt.com from the address on your account. We will delete your account data, stored Google token, bookings, transcripts and recordings (including asking our providers to delete their copies) within 30 days, and confirm when done. You can also complain to the UK Information Commissioner’s Office (ico.org.uk) or your local data-protection authority.
8. Children
Archimedes is not intended for anyone under 18 and we do not knowingly collect their data.
9. Changes
We will update this page when our practices change and, for significant changes, tell you by email.
Terms of service · a@futureprompt.com
Archimedes is operated by MGD ADVISORY LTD (company no. 17298622), 77 Purves Road, London, United Kingdom, NW10 5TD.