Privacy policy

THE MIND TO LEAD PTY LTD, trading as Georgie Hubbard, ABN 64 640 281 563, operates this website and its services from Queensland, Australia. We are responsible for the personal information covered by this policy and act as its controller where that term applies.

This policy covers enquiries, newsletters, free tools, purchases, coaching, courses, the member platform, Georgie mobile app and community. For privacy questions and requests, email support@georgiehubbard.com. Membership, coaching and AI tools are for adults aged 18 and over. If you believe a child has supplied information, contact us so we can investigate and remove it where appropriate.

What we collect depends on the features you use:

• Identity, account and contact details, including your name, email, phone, location, profile image and LinkedIn address.
• Applications, booking answers, employment history, resumes, qualifications, target roles, salary answers, career circumstances, assessments and workbook responses.
• AI conversations, saved facts used for personalisation, writing samples, generated drafts, uploaded documents and images, voice recordings, transcripts and feedback.
• Community posts, direct messages and attachments, along with community activity, course progress and use of our tools and wellness content.
• Purchase, payment status, access and billing records. Website payments use Stripe. In-app purchases use Apple. We receive Apple product and transaction references, dates and subscription status, linked to your account through a random account token. We do not receive or store your full card number.
• Technical information such as device and browser details, IP addresses, website activity, errors, referring pages and campaign details.
• Mobile notification tokens, permission choices, notification preferences, delivery receipts and app version details. Community reports include the reported content and moderation decisions; block lists control who can contact you.

You can leave optional fields blank. Without information needed for a particular service, we may be unable to provide that service.

We receive information from you, your use of the website, payment and account providers, booking services and authorised purchasers. Information about professional contacts may come from member uploads, LinkedIn exports or public sources used by search tools. Only upload information you are entitled to share. Remove unnecessary employer, client, referee and colleague details.

We use information to answer enquiries, deliver requested reports, manage accounts and purchases, provide coaching and tools, personalise content, track progress, operate the community, resolve problems and meet recordkeeping obligations. We also use relevant records to prevent abuse, protect accounts, investigate complaints and establish or defend legal claims.

Health conditions, injuries or other sensitive information may appear in something you choose to share. Contact us before sending sensitive details so we can discuss appropriate handling, including additional safeguards and specific consent where required.

Where UK or European data protection law applies, our grounds depend on the purpose:

• Contract: providing services you request and taking steps at your request before a purchase.
• Legal obligation: necessary tax, accounting, consumer protection and other legal requirements.
• Legitimate interests: proportionate account security, fraud prevention, troubleshooting, service improvement and handling legal claims, after considering your interests and rights.
• Consent: marketing, non-essential tracking and sensitive information where consent is required. Any additional condition required for health or other special-category data must also be satisfied.

Where consent is required, it must be given separately. Reading this policy or using the website does not provide that consent. You can withdraw it through the relevant control or by contacting us. Withdrawal does not affect earlier lawful use. We will explain if it prevents us from providing a feature.

AI features send relevant inputs to specialist providers to produce the output you request. Depending on the feature, this can include resume text, workbook context, chat messages, images, recordings or transcripts. Tools may combine saved material across your account, remember career facts, analyse writing style or measure speech patterns. These are coaching aids, not hiring decisions made for an employer. Ask us about an inaccurate result or saved fact.

We use member material to provide these services. This does not authorise us to publish it or use it for unrelated AI training. How providers retain information or use it for training depends on their terms and the settings for the service.

In the mobile app, AI assistance sends messages, selected attachments and transcripts to Anthropic. Depending on the feature, this also includes relevant saved name and career details, workbook and assessment answers, wins, role descriptions, professional contacts and notes, target markets, languages, conversation history, speech measurements and transcript sentiment. Anthropic produces replies, drafts and coaching feedback, and chat can save career facts for later replies. Chat also sends your message and details of a selected lesson to Voyage AI to find relevant course material.

Voice entry sends audio to Groq or OpenAI. Interview practice uses AssemblyAI or Groq for transcription and available speech measurements, then Anthropic for coaching. Proof Bank can also use a previously submitted AssemblyAI transcript and its sentiment and speech measurements when creating coaching feedback. You choose whether to allow these mobile uses before a new request is processed.

Mobile Settings has separate controls for AI assistance and audio transcription. Declining leaves lessons, community and manual entries available. Switching a permission off stops new requests from the app; work already submitted may finish. These app controls do not change requests you separately make on the website or erase existing records.

Optional AI connections let you choose which saved information Claude or ChatGPT can read. You can stop future access at any time, but this cannot erase copies already received by the external service. Its own terms and privacy settings also apply.

Coaches can see your course progress and the career situation you select in your Day Zero assessment. Other written workbook answers are not displayed in the ordinary coach dashboard.

Authorised staff and service providers may access information where needed for support, maintenance, security or legal requests.

If an employer pays, we provide the billing and licence information needed to administer that purchase. Payment does not give the employer access to your workbook answers, coaching content or progress. Any additional disclosure requires a separate lawful basis and appropriate notice or permission.

Community posts are shared with the relevant channel audience and administrators. Direct messages are intended for their participants. We use access controls for member content, but confidentiality also depends on participants respecting the community rules. Do not forward another member's material without permission. We cannot guarantee that recipients will never copy it, or that links or copies previously shared will disappear.

You can report a message and block a member from the message actions in the app. Authorised moderators can review reported content and attachments to investigate and respond. Blocking hides that member's messages from you and prevents direct contact; it does not erase copies already received.

Coaching calls may be recorded for the relevant cohort to watch during its promised access period. A recording can include your image, voice, displayed name and contributions. We do not reuse identifiable contributions in marketing or future cohorts without separate permission.

You can keep your camera and microphone off and contact us about asking a question privately. Tell us before a session if you do not want to appear in a recording. We will discuss available options and any effect on participation.

We use specialist service providers to run the website and deliver our services. Each receives information relevant to its role:

• Website hosting and storage: account records, saved member content, uploaded files and technical information needed to operate the platform.
• Accounts and payments: identity and sign-in details for account access; billing and transaction details for checkout and payment administration, including through Stripe and Apple. Apple purchase verification, restoration and subscription updates use transaction references and an account token.
• Email, forms and bookings: contact details, relevant submissions and message activity to deliver emails, answer enquiries and arrange calls.
• AI, search and transcription: relevant prompts, documents, recordings and transcripts to produce requested drafts, coaching feedback, search results and speech analysis, as explained above.
• Security and service operation: device, usage and error information to protect and troubleshoot the platform, plus request details needed to complete tasks such as processing a recording.
• Calls and media: participant details and contributions for calls and recordings through Zoom; device and viewing information for video and audio delivery. Embedded media may also send information to its provider when loaded or used.

Contact us for the providers relevant to a particular service or your information. We may also disclose necessary information to professional advisers, insurers or authorities where required or permitted by law.

Our primary platform database is hosted in Sydney, Australia. Providers supporting AI, transcription, email, payments, calls and other services may hold, process or access relevant information outside Australia, including in the United States and other locations used by their service partners. The database location does not mean all information stays in Australia. Contact us for the locations relevant to a particular service.

Where UK or European transfer rules apply, an overseas transfer needs a permitted mechanism, such as an adequacy decision or appropriate contractual safeguards. Contact us for details or a copy of the safeguards relevant to your information.

We may keep contact records to send requested reports, receipts, account notices and programme messages, even if you have not subscribed to marketing. Promotional email requires consent or another basis permitted by the applicable marketing rules. Requesting a report alone does not give us permission to send ongoing promotions.

Use the unsubscribe link in a marketing email or contact us to stop it. Necessary service messages may continue while you use the service.

After account deletion, we may retain your email address and a minimal opt-out record to prevent later imports or provider events from adding you back to marketing. Other contact profile details and delivery history are removed.

Cookies and browser storage support sign-in, security, preferences and draft recovery. To understand how people find us, we may store referring pages and campaign details in your browser for a rolling 30-day period and link them to a later submission. Browser controls can remove stored information, although this may sign you out or remove unsaved work.

We use error, performance and interaction information to troubleshoot problems. Where enabled, session replay reconstructs parts of a visit and may capture visible content, even with text masking.

Non-essential storage or tracking requires consent where applicable law requires it. External media and booking services may use their own cookies.

Phone alerts are optional. If enabled, Expo and Apple or Google receive the device notification token and the information needed to deliver the alert. You can choose alert categories, previews and quiet hours in the app, or turn alerts off in your device settings. Preview text may appear on your lock screen.

The app stores sign-in credentials securely and keeps some drafts, practice recordings and progress on your device to recover from interrupted connections. Signing out clears the app's private draft caches. Deleting the app removes its local storage; it does not delete your platform account or server records.

We retain information for the service, access and support promised, and for necessary legal, security and recordkeeping purposes. We delete or de-identify it when it is no longer reasonably needed, subject to legal requirements. Our retention review targets are:

• Inactive enquiries and unsuccessful applications: after 12 months without meaningful contact.
• Member files and tool records: after 12 months following the end of all relevant access and promised support.
• Raw practice audio: after 12 weeks; a saved transcript or feedback may remain useful for longer.
• Cohort recordings: when the promised recording access ends.
• Financial and transaction records: generally seven years, or another period required by law.
• Unsubscribe records: the minimum information needed to continue respecting the request.

These are review targets, not automatic deletion dates. Earlier rights requests and legal duties still apply. We assess whether shared messages remain needed by other participants. Removing a message from view may not immediately erase its stored record.

Backups may retain restricted copies until their normal rotation. Security measures include account authentication and access controls. No system is completely secure. We assess suspected breaches and notify affected people and regulators where required.

Email support@georgiehubbard.com to request access, correction or deletion, or to ask about our handling of your information. We may need proportionate identity verification to protect your account. Account closure, deleting an item and unsubscribing are different actions; tell us which records you want addressed.

To request full account deletion in the mobile app, open Settings, then Delete my account. You do not need to email us to start. The app shows your request and target completion date, normally within 14 days. Deletion removes your account and associated personal content, subject to necessary financial, legal and minimal suppression records. We review linked provider records and billing before marking the request complete. Backups expire through their normal rotation. See the confirmation screen for the effect on access and existing payment obligations.

Deleting your Georgie account does not cancel an Apple subscription. Manage it through your Apple account; the deletion screen provides a link. Deletion remains available whether or not you cancel. We retain minimal purchase references, with the platform account link removed, to prevent a deleted account's purchase being reassigned and to meet financial recordkeeping needs.

Where UK or European law applies, rights can also include restriction, portability, objection to processing based on legitimate interests, withdrawal of consent and protection against qualifying solely automated decisions. You can object to direct marketing at any time. Rights depend on the circumstances and applicable exceptions.

We respond to applicable UK and European rights requests without undue delay and normally within one calendar month. Where the law permits an extension, we explain why within that first month. Requests are normally free. Elsewhere, we respond within a reasonable period and any applicable legal deadline. If we cannot grant a request, we explain the reason and complaint options.

Send privacy concerns to support@georgiehubbard.com, describing what happened and the outcome you seek. We will investigate and aim to respond within 30 days, with updates if more time is needed.

You may raise a complaint with the relevant authority: the Office of the Australian Information Commissioner where it has jurisdiction, the UK Information Commissioner's Office, or your relevant European supervisory authority. Any applicable complaint procedures and statutory rights remain available.

We update this policy when our practices or requirements change. We publish the revised date and provide additional notice of material changes where required. An update does not retrospectively create consent for a new use.