Privacy notice
Last updated 25 October 2026.
This page explains what happens to your answers when you use What's Running You, the self-check built for Kristian Hill, and his second check, Where's your resistance?
Who is responsible for your answers
READY FOR ANYTHING FITNESS GROUP - FZCO (IFZA licence 53558, IFZA Business Park, Building A1, premises 53558-001, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates) decides why your answers are collected. You can reach them at kristian@rfacoaching.com.
Voyage Digital Ltd (Griva Digeni 51, Athineon Court, Office 202, Paphos 8047, Cyprus) builds and runs the check on their behalf, and processes your answers only for that purpose.
The second check: Where's your resistance?
The check "Where's your resistance?" has twelve questions and runs at kristianhill.unforged.me/resistance/. Kristian's company, named under "Who is responsible for your answers", decides why your answers are collected. Voyage Digital Ltd runs the check on its behalf.
Your answers stay on your phone while you take it. A check you haven't sent stays in your browser for up to 7 days. That way you can pick up where you left off. "Start again" clears it.
If you tick the first box and send, we store one row with:
- a reference code and the date
- your email, and your first name if you gave it
- both boxes, the version of their wording and when you sent
- your answers, and your 90 day goal if you wrote one
- your main and second rule, your load and your awareness level
- where you came from
We use it to email your report, the PDF and the video. When you send, Kristian and his team get a note with your name, email, answers, result and goal. A call can then start from there. If you tick the second box, you also get Kristian's emails.
The first box says, word for word:
"Save my answers and email my report." (version r2)
The (i) next to it adds: "We keep your answers, your 90 day goal, your email and your first name to send your report. Kristian and his team see them when you send, so a call can start from your result. You can ask us to delete all of it at any time."
The second box, which starts unticked, says:
"Also send me Kristian's emails. One click to leave." (version m3)
The link to your full report carries your answers as a short code, never your goal. Anyone who has the link can open that report.
Kit keeps your email, first name, result and the link to your report. It sends the report from Kristian's account. Resend sends it if Kit cannot be reached, or if you send again within ten minutes. The row sits in Supabase in Frankfurt, and a Google Sheet holds a copy.
If you choose "Accept all" in the cookie banner, PostHog gets these steps too. It also gets your rule, load band and awareness level, as listed under PostHog below. Separately we count how far people get and which result they reach. No name, no email, no cookie and no IP address go with that count.
We delete the row and its sheet copy 24 months after your last saved check. You can ask us to do it sooner. Its details then come off your record in Kit as well. If you have no other check saved, Kit unsubscribes you too.
What stays on your phone, and what we store
Your answers stay on your phone unless you choose to save your report. While you take the check, only two things leave your phone: the anonymous counts described below and under "Cookies and page analytics", and, only if you accepted cookies, the fuller page analytics described there.
Your unfinished check, and once it shows, your result, are kept in this browser's local storage (not a cookie) for 7 days under a versioned key, so a reload does not send you back to the start. What you reach for, and how much, is never kept there. Everything kept there is cleared when you save your report, when you tap Start again, or after 7 days.
If you tick the first box on the "Your full report" step, we store one row: a reference code, the date, the quiz version, your first name and email if you gave them, both consent boxes with their wording and the time you ticked them, the door you picked, the moment and follow-up you chose, your ten answers, your five plane scores, your overall load, your state, which plane read loudest, the report variant, whether a red flag showed, what you said you reach for and how much (only stored if you save), your role, how ten days away would go, your turnover band, what you have tried, how ready you are for something to change, where you came from, and the tracking parameters of the link you arrived on.
Some of these answers touch your sleep, energy and mood. We only store them once you have explicitly ticked the box that says so.
If you save, the link to your full report carries what you said you reach for, and how much, as a short code, so the report can show it back to you. That link is in your report email, and Kit keeps it with your email address (see "Kit, which sends the emails"). Anyone who has the link can open your report. What you reach for never goes into an email subject, a WhatsApp message or your retake link.
Separately, and with no name, no email and no answer attached, we count how far people get through the check, which door they pick, which kind of result they reach, and whether they save, download, book a call or tap WhatsApp. This uses no cookies and no stored device identifier, and we do not keep the IP address it came from.
Why we collect it
To show you your result, to email your report and a reminder in 30 days if you asked for that, to let you book a call with Kristian without retyping your name and email, and to see, in the aggregate, which parts of the check people find easy or hard to finish.
Our legal basis
Your health related answers (sleep, energy, mood and the rest) are stored only on your explicit consent, which the first tick box on the "Your full report" step records. You can withdraw that consent at any time by asking us to delete your row. A second, separate tick box covers whether you also want Kristian's ongoing emails, and you can leave that list with one click at any time.
The first box says, word for word:
"Save my sleep, energy and mood data, email my report." (version c4)
The (i) next to the privacy link under the button adds: "Saving keeps all your answers and sends one reminder in 30 days. If you book a call, your name and email are filled in for you. You can ask for all of it to be deleted at any time."
The second box, which starts unticked, says:
"Also send me Kristian's emails. One click to leave." (version m3)
Where your answers live
Your saved row sits in Supabase, hosted in Frankfurt, Germany. Kit sends the report and reminder emails (details below); if Kit cannot be reached when you save, Resend sends the report instead. Netlify hosts the check itself. Kristian's contact list is a Google Sheet. If you book the Expansion call, Calendly holds the booking, and it never receives your score, state, plane or answers, only your name and email if you saved. If you tap the WhatsApp button, WhatsApp carries whatever the message says at the moment you send it, and you can edit it first. Kit, Resend, Netlify, Google and Calendly are based in the United States, so your details can be processed there as well.
Kit, which sends the emails
Kit, Inc. (kit.com, formerly ConvertKit, United States) is Kristian's email service. It works for him as a processor: it sends your report email, the one reminder 30 days later and, only if you ticked the second box, Kristian's own emails.
When you save, Kit receives your first name if you gave it, your email address, your score out of 100 and the name of your state, the links to your report, your PDF and your retake, the date of your retake, your reference code, and on a retake your previous score. The links carry your answers inside them, so the page can rebuild your report when you open one. Kit also records whether you ticked the second box. Nothing else from your answers goes to Kit.
Kit stores this in the United States. Kit's data processing agreement covers that transfer under the EU-U.S. Data Privacy Framework and its UK Extension, and, where the law asks for more, under the EU standard contractual clauses with the UK addendum.
When your answers are deleted, 24 months after your last run or sooner if you ask, we also take the diagnostic details off your record in Kit and unsubscribe you there. Kit keeps your email address until it is deleted by hand, which we do on request at the address below.
How long we keep it
We keep your saved row while you keep retaking the check, and delete it 24 months after your last run, or sooner if you ask.
Cookies and page analytics
Apart from the check itself, this page can measure how it is used, with PostHog. PostHog, Inc. (United States) runs it for Voyage Digital Ltd on PostHog's EU cloud, so the data is processed on servers in the European Union.
Without your consent PostHog runs without cookies: nothing is stored on or read from your device. It counts the pages you open, how long you stay, how far you scroll and where you click, without the text you clicked, plus your device, browser and approximate region. To tell visits apart, PostHog's server forms a hash from your IP address, browser details and a secret salt that changes every day; your IP address itself is not stored. None of your answers, scores or results are part of this. The legal basis is our legitimate interest in knowing how the page is used (Art. 6(1)(f) UK GDPR and GDPR). You can object at any time by writing to us.
If you choose "Accept all" in the cookie banner, PostHog stores a cookie and a few entries in your browser and also receives:
- the pages you open, when you leave them, how far down you scrolled, and how long you spend on each screen of the check, the result and the report
- which screen of the check is showing, when you go back, and, if you leave before the end, the last screen you saw
- your answers as short codes, for example a question id and an option id such as M1 and M1_2, never the wording of an answer
- your score out of 100, your state (holding steady, building or running you), your band, your loudest plane, the way in you chose, and whether the safety note showed
- in "Where's your resistance?": your main and second rule, your load band, your awareness level, and which part of the check you reached
- whether you opened the email form, sent it and whether the email went out, and whether you opened the report from the email, downloaded the PDF, opened, booked or closed the call booking, tapped WhatsApp or opened the video
- where your link came from (its utm fields, for example instagram or bio), your device, your browser and your approximate region
- where you click, to draw heatmaps, and which part of the page you clicked, without its text or the address it links to
PostHog never receives your name, email or phone number, the reference of your run, the text of any answer or anything you type, or the link to your report and its code: we remove everything after the # from each address before it is sent. Nothing records your screen. We do not identify you in PostHog, and PostHog does not link these events to your saved report.
The legal basis is your consent: Art. 6(1)(a) UK GDPR and GDPR and, because answers about stress and health can be health data, Art. 9(2)(a). For storing data on your device it is regulation 6 of PECR and § 25 TDDDG (formerly TTDSG). You can withdraw your consent at any time with the button below. From then on only the cookieless counting described above continues, and the PostHog cookie and local storage entries are removed.
How long PostHog keeps these events is set in our PostHog project. We keep them for no longer than 12 months.
The anonymous count described under "What stays on your phone, and what we store" runs either way, without cookies. The cookie banner's own notice
Kristian's video on your report
Your full report shows one of Kristian's YouTube videos. Until you tap play, you only see a still picture that comes from this site, and nothing is sent to YouTube or Google.
When you tap play, the video loads from youtube-nocookie.com, YouTube's privacy-enhanced mode. From that moment YouTube, a Google service, receives your IP address and the name of this site, and it can store cookies or similar data in your browser while the video plays. Google can process this in the United States. YouTube never receives your score, your answers, your name or your email.
If you would rather not load YouTube here, the PDF of your report has a plain link to the same video, and it only opens when you choose to follow it.
Your rights
You can ask to see what we hold about you, correct it, have it deleted, or withdraw your consent, at any time, by emailing kristian@rfacoaching.com. If you are not satisfied with our answer, you can complain to your local data protection authority, for example the UK Information Commissioner's Office if you are in the UK.