Last updated: 2 August 2026
1. Who we are
Solo & Fearless (the "Service") is operated by Zorg by Blue, a sole proprietorship (eenmanszaak) registered with the Dutch Chamber of Commerce (KvK) under number 85507636, based in the Netherlands ("Solo & Fearless", "we", "us", "our").
For the purposes of the EU General Data Protection Regulation (GDPR), Zorg by Blue is the data controller for personal data processed through the Service.
You can contact us at any time about this policy or your personal data at hello@soloandfearless.com.
2. Scope
This policy describes how we collect, use, store, share and protect personal data when you visit soloandfearless.com, create an account, use the members area and community, take our courses, use The Fearless Ones Program, or otherwise interact with Solo & Fearless.
3. Personal data we collect
We collect a deliberately small amount of personal data:
- Account data. Your email address, a display name that you choose, and, if you sign up with an email and password, an encrypted (hashed) password. If you sign in with Google, we receive your email and basic name information from Google instead of a password. Authentication is handled by our provider (see Section 7).
- Profile data. A profile photo, if you choose to upload one. You may also choose to add a dream destination to your profile. These are optional.
- Subscription data. Your plan (Fearless One, Booked & Bold or The Fearless Life), your subscription status, the date your paid access runs until, and the customer and subscription identifiers created by our payment provider. Your card details are collected and stored by Stripe on its own pages; we never see or store your card number.
- Content you create in the Service. Your community posts, comments, likes and reviews; your course progress; and the information you enter into The Fearless Ones Program, which forms your Trip File. This is described in Sections 4 and 5.
- Feedback you send us. If you use the feedback button, we store your message, whether you marked it a problem or an idea, and any picture you attach.
We do not collect your phone number, your postal address, your date of birth, or any advertising data. We run no analytics of any kind, and we do not build a profile of you for marketing. Our hosting providers process technical request information such as IP address and browser type in order to serve the site and keep it secure, as described in Section 7.
4. Your community content
The posts, comments, likes and reviews you create in the community are stored on our servers (Supabase) and are visible to other signed-in members of the community. Your display name, your profile photo, and your online status (whether you have been active recently) are visible to other members. Your email address is never shown to other members.
Photos you attach to a community post are stored in our image storage and load from an unlisted web address. Videos you upload are stored and streamed by our video provider (see Section 7). If you add a GIF, we store only a link to it; the GIF itself is served by GIPHY.
Please treat anything you post in the community as visible to the whole community. Do not post personal data you would not want other members to see.
5. Your Trip File and course content
The information you enter into The Fearless Ones Program, your basics, your trips and your deadlines, is stored in your account on our database and is private to you. No other member can read your Trip File.
So that the program works without an internet connection while you are travelling, a copy of your Trip File is also kept in your own browser on the device you use. This lets the "Something happened" help and your plan work when you have no signal, and it syncs back to your account when you are online again.
One thing to be aware of: because that copy stays in the browser, signing out does not erase it. On a shared or family computer, your Trip File contents can remain in that browser after you log out. If you use the Service on a device that is not yours, clear the browser data afterwards.
Course progress is stored in your account. Almost nothing you type into a course interactive is saved anywhere: the single exception is the destination you enter early in Traveling as Ebony, which is stored so that a later lesson can show it back to you. Every other interactive holds your answers only while the page is open and forgets them when you leave.
6. How we use your personal data
We process your personal data for the following purposes, under the following legal bases (GDPR Article 6):
- To provide the Service. Creating and managing your account, running the courses, community and program you use, and storing your Trip File and progress. Legal basis: performance of a contract.
- To take payments. Processing subscriptions, upgrades, downgrades and cancellations via Stripe. Legal basis: performance of a contract, and legal obligation (tax and accounting records).
- To communicate with you. Sending essential transactional emails such as sign-up confirmation, magic-link and password reset, and billing notices, and responding to feedback or support you send us. Legal basis: performance of a contract, and our legitimate interest in responding to enquiries.
- To keep the community and Service safe. Moderating the community, acting on reports, and preventing abuse or fraud. Legal basis: our legitimate interest in protecting members and the Service, and legal obligation.
- To comply with the law. Responding to lawful requests from regulators, courts and authorities. Legal basis: legal obligation.
7. Service providers
We use a small number of third-party providers to operate Solo & Fearless. Each receives only the data it needs and is bound to protect it:
- Supabase (database, authentication and storage hosting): your email, your encrypted password or Google sign-in identity, your profile, your subscription metadata, your community content, your course progress, and your Trip File. Our primary database is hosted in the European Union (Ireland).
- Vercel (members area hosting): processes the requests to and from the members area, including IP address and browser type, as our hosting provider.
- GitHub Pages (public website hosting): processes requests to the public site, including IP address, as the host of soloandfearless.com.
- Stripe (payments): your email, your user ID and your chosen plan, plus the name and card details you enter directly on Stripe's own secure checkout and billing pages. Stripe holds your card data; we never receive it.
- Bunny Stream (video): when a course or community video loads, your IP address and browser type are sent to Bunny so it can stream the video. Videos you upload are stored by Bunny.
- GIPHY (GIF search): if you search for a GIF, your search runs from your browser directly to GIPHY, which receives your search words, IP address and browser type. GIPHY also serves any GIF shown in a post. This is GIPHY's processing under its own policy.
- Resend (transactional email): the recipient email address and the content of essential account emails, so they can be delivered.
- Frankfurter (exchange rates): used by the program to convert currencies for comparison. This call is made from our server and sends no personal data; only two currency codes are exchanged.
- Google (only if you choose "Sign in with Google"): a standard sign-in identity exchange.
We do not sell your personal data, and we do not share it for advertising.
8. International data transfers
Our primary database (Supabase) is hosted in the European Union. Some of our other service providers operate infrastructure outside the European Economic Area, including in the United States. Where personal data is transferred outside the EEA, we rely on appropriate safeguards under the GDPR, such as the European Commission's Standard Contractual Clauses, and, where applicable, the recipient's certification under the EU-US Data Privacy Framework.
9. Retention
We keep your personal data only as long as we need it:
- Active accounts. We keep your account data, profile, community content, course progress and Trip File for as long as your account is open.
- Account deletion. When you delete your account, we delete your personal data within 30 days, except where we are required by law to keep certain records longer. Note that the copy of your Trip File held in your own browser is under your control; clear your browser data to remove it.
- Billing records. Invoices and payment records are retained for at least seven years to meet Dutch tax and accounting obligations.
- Backups. Data may persist briefly in encrypted backups after deletion before those backups roll over.
10. Your rights
Under the GDPR, you have the right to:
- access a copy of the personal data we hold about you;
- have us correct personal data we hold about you that is inaccurate or incomplete;
- delete your data ("the right to be forgotten");
- restrict or object to certain processing;
- receive a portable copy of the data you provided to us;
- withdraw any consent you gave us, at any time, without affecting processing done before withdrawal.
To exercise any of these rights, email hello@soloandfearless.com. We will respond within the time limits required by law. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).
11. Cookies and browser storage
We keep cookies and storage to the minimum needed to run the Service. Our full Cookie Policy is available at soloandfearless.com/cookies. In short:
- We set two strictly necessary cookies: one to keep you signed in, and one short-lived cookie that remembers which page you were heading to when you were asked to log in. The Service cannot function without the sign-in cookie.
- The program stores a small amount of data in your own browser so it works offline, as described in Section 5.
- We use no advertising or tracking cookies, and no analytics.
- Some embedded third-party content, such as the video player, may set its own cookies when it loads.
12. Security
We take reasonable technical and organisational measures to protect personal data, including encryption in transit (HTTPS/TLS), encryption of stored data at rest, hashed passwords, row-level security in our database so members can only reach their own private data, and restricted access to privileged credentials. No system is perfectly secure, and we cannot guarantee absolute security.
13. Children
The Service is intended for adults and is not directed at children. You must be at least 16 years old to create an account, as set out in our Terms of Service. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.
14. Changes to this policy
We may update this policy from time to time. If we make material changes, we will notify you by email or through the Service before they take effect. Continued use of the Service after a change takes effect means you accept the updated policy.
15. Contact us
Questions, requests or complaints about this policy or your data can be sent to hello@soloandfearless.com.