Privacy Policy
We built a coach that works from your real work, so being straight with you about data matters more here than almost anywhere else. This explains what we hold, why, and how to get it back or get rid of it.
Last updated: 15 August 2026
Who we are
The AI Skills Company provides a personal AI work coach. The AI Skills Company is a service operated by Michael Roy Barry, based in Stonehaven, Scotland. For UK data protection law we are the data controller for the information described here. For any privacy question or request, email hello@theaiskillscompany.com or use our contact page.
What we collect
- Account details — your email address, your name if you give it, and how you signed in.
- Your work profile — role, industry, tools, responsibilities and the tasks you tell your coach about.
- Coaching activity — your conversations with the coach, lessons started and finished, saved workflows, and progress scores.
- Membership details — your plan, status and renewal date. Card details are handled by Stripe and never reach our servers.
- Basic technical data — the minimum needed to keep the service running and to stop abuse.
Files and examples you upload
When you show your coach a real example — an email, a screenshot, a PDF or a spreadsheet — it is read for that piece of coaching and is not deliberately stored afterwards. What we do keep is the coaching that came out of it: the method, the workflow and the feedback. If you choose to save a workflow, we keep what you saved.
Please do not upload information that is confidential to your employer, or personal information about other people, unless you are authorised to share it.
AI-generated guidance
Your coaching is produced by an AI model. It can be wrong, out of date or incomplete. You should check anything important before you act on it, and never treat it as legal, financial, medical or other professional advice.
Why we are allowed to use it
We use your data to provide the coaching you have paid for (performance of a contract), to keep the service secure and working (legitimate interests), and to meet our legal and tax obligations. We do not send marketing emails. We do not sell your data, and we do not use your work content to advertise to you.
Who we share it with
Only the suppliers that make the product work. Each one acts on our instructions:
- Lovable — Hosts the website and the application's server code, and provides the AI gateway that our server uses to reach the AI model.
- Supabase — Provides the database and the sign-in system: your account, work profile, coaching history, saved workflows and progress are stored here.
- Stripe — Takes and manages membership payments, and runs the billing page where you can update your card or cancel. Card details go to Stripe directly and never reach us.
- The AI model provider reached through the Lovable AI gateway — Generates the coaching, lesson feedback and workflow suggestions from the text and examples you send to your coach.
Some of these providers, or their own infrastructure suppliers, may process data outside the UK. Where that happens, it takes place under the transfer safeguards those providers put in place. We do not claim that every provider keeps all data inside the UK. If you want the current details for a specific provider, ask us and we will tell you what we know.
How long we keep it
Your account data stays for as long as your account exists. When you delete your account, your coaching data and work profile are removed and your sign-in is closed. We keep only the limited billing records we are legally required to hold for accounting and fraud prevention, with your personal details removed from them where we can.
Your rights
You can ask for a copy of your data, correct it, delete it, or object to how we use it. Both a data export and account deletion are built into your account page, so you do not have to email anyone — though you can if you prefer. You can also complain to the Information Commissioner's Office (ico.org.uk) if you think we have got something wrong.
Security
Access to your data is restricted to your own account by database-level rules, payments are handled by Stripe, and our AI calls are made from our server so no keys are exposed in your browser. No system is perfect, and we hold no security certifications; we design for the smallest possible amount of stored personal work content.
