Privacy Policy

Draft. Attorney review recommended.

Last updated October 20, 2026.

1. Who we are

Signed on Purpose ("Signed", "we", "us") is a modeling-education membership. The seller, and the party responsible for your personal information (the "controller"), is Signed on Purpose, operated by Garang Majok. KONTINU INC runs the website and technology for Signed on our behalf.

Contact: hello@signedchallenge.com
Mail: 17350 State Hwy 249 Ste 220, Houston TX 77064

This policy covers signedchallenge.com and its pages, our checkout, our emails, the members' area and the community.

2. What we collect

When you buy:

• The buyer's name and email address.
• When the Terms and this Privacy Policy were accepted.
• Whether you chose to get marketing emails. This is a separate, optional choice.
• Your optional answer to "Where did you find us?".

From Stripe, our payment processor:

• Your plan, price, any discount, billing status and renewal date, plus your Stripe customer, checkout and subscription IDs.
• The billing details Stripe returns to us, such as name, email and billing country or postal code. We never receive or store your full card number or security code.

When you sign in to the members' area: your email address and a sign-in record, so we can send you a one-time sign-in link and keep you signed in (section 9). Sign-in links are sent in your purchase email and whenever you request one through the sign-in form. Each link works once and expires after a short time; the exact time is shown in the email or on the page.

Automatically, when you visit:

• The campaign tags on the link you used (for example utm_source, utm_medium and utm_campaign), so we know which links bring people to Signed.
• The country your connection comes from, as reported by our host (Cloudflare). We store it with your checkout record.
• Standard technical data our host processes to deliver and protect the site, such as IP address and browser type.
• Analytics data from Google Analytics 4 (section 4).

If you're in Premium: the records we keep of your Premium sessions, including whether a session has taken place, and the introductions made for you.

In the community:

• Questions and comments you choose to post.
• Please share only what you're comfortable with.

If you're moving from Skool:

• From member data, we move only the member list: name, email, membership tier and join date.
• We do NOT move members' posts, comments or direct messages.
• Garang's own content moves: the course, the resource vault, and the text of his own posts. Member replies, member names and member photos are removed from his posts before they move. Portfolio Review posts are not moved at all.

We don't collect government IDs, card numbers or sensitive information such as health data, and we ask you not to send them.

3. How we use it, and why

We don't sell your personal information. We don't share it for cross-context behavioral advertising, and we don't use it to make automated decisions that have legal effects on you.

4. Who helps us (service providers)

We share personal information only with providers that help us run Signed, and only as much as they need:

• Cloudflare: hosting on Cloudflare Workers (our site and members' area run on a Cloudflare Worker), the database that stores member records, and site security.
• Brevo: sending our emails and handling unsubscribes.
• Google:
  • Google Drive, in an account owned by Garang, holds the master copy of the course and resource files that members reach through the members' area.
  • Google Analytics 4 measures visits, checkout starts and purchases on our Signed pages. GA4 is ON. Our Google Analytics tag turns Google signals OFF and ads personalization OFF, so GA4 data isn't used for advertising.
  • Google processes this data for us as a service provider (processor) under its data processing terms.
  • What GA4 collects:
    • pages viewed, including the page address and any campaign tags in it
    • the referring site
    • approximate location (city, region or country)
    • device, browser and operating system
    • session information
    • the events we send: checkout started, and purchase completed, with price, plan name and our Stripe checkout reference
  • We don't send your name, email or card details to Google Analytics.
  • IP addresses: Google uses them to estimate approximate location under GA4's default handling. Google states that GA4 does not log or store IP addresses. We don't receive your IP address from GA4.
  • To opt out of GA4, block or delete cookies in your browser settings, or install Google's Analytics opt-out browser add-on (tools.google.com/dlpage/gaoptout).
• Stripe: payments, Stripe Checkout, the Stripe Customer Portal for managing or cancelling, discounts, refunds and receipts. Card details go directly to Stripe on Stripe-hosted pages. Stripe processes payment data under its own privacy policy and must keep certain billing records by law.

KONTINU INC runs the website, the database and the email setup for Signed, using the providers above. It uses member records only to run Signed. During the move, Skool (our previous community platform) is used only as the source of the member export and of Garang's content, until our Skool group is closed.

We may also disclose information if the law requires it, to protect someone's safety, or as part of a sale or reorganization of the business. If that happens, we'll tell you first.

5. Where it's stored and international transfers

Member records are stored in a Cloudflare-hosted database run by KONTINU INC for Signed. Your membership is linked to a client record in that database, which is used only to run Signed and the services you ask for. Our providers may process data in the United States and other countries. For members in the EU or UK, these transfers rely on the safeguards the providers offer, such as Standard Contractual Clauses.

6. How long we keep it

• Active members: for as long as your membership is active.
• Cancelled members: a scheduled job deletes your data 12 months after your membership ends (or after your last sign-in or payment, if that is later). We keep only a non-personal accounting record (amounts and dates, no name or email). The one exception is billing records that Stripe must keep under its own legal obligations.
• Skool export: after the import, the Skool export file is deleted by KONTINU staff tooling, and the deletion is logged. The export is never kept in shared folders.
• Checkouts started but not completed: deleted within 12 months.
• Google Analytics 4: Google keeps GA4 event data for the retention period set in our Google Analytics account, then deletes it.
• Opt-outs and deletion requests: completed within 30 days. We keep a minimal record that the request was completed (date and email), so we don't add you back by mistake.
• Marketing: if you unsubscribe, we stop right away and keep only your email on a do-not-email list.

7. Your account

• One membership is for one person. Keep your login private, and tell us right away if you think someone else has used it.

8. Your rights and choices

You can ask us to:

• give you a copy of your information (access and portability),
• correct it,
• delete it,
• stop marketing emails (you can also use the unsubscribe link in any of our emails), and
• object to or limit certain uses.

Email hello@signedchallenge.com. We may need to confirm that you own the email on the account. We respond, and complete deletion requests, within 30 days. We won't treat you differently for using your rights.

• California residents: where the CCPA/CPRA applies, you have the rights above. We don't sell or share personal information as those laws define it.
• EU/UK residents: you can also withdraw consent at any time, and you can complain to your local data protection authority.

Cancelling your membership (signedchallenge.com/manage) stops billing, but it doesn't delete your data by itself. Ask us if you'd like it deleted sooner than 12 months.

9. Cookies and similar technologies

• EU, EEA, UK and Switzerland: for visitors there, Google Consent Mode sets analytics storage and all advertising signals to "denied" by default, so Google Analytics doesn't set or read _ga cookies for them. A banner asks whether you accept analytics cookies. Only if you click Accept do we turn analytics storage on; advertising signals stay off. Your choice is saved in your browser (sg_consent, see the table), and you can change it by clearing it.
• We don't use advertising cookies.
• You can block or delete cookies in your browser settings. If you block the sign-in/session cookie, you can't stay signed in to the members' area. If you block Stripe's cookies, checkout may not work.

10. Security

Card entry happens only on Stripe-hosted pages, and our site, systems and files never handle card numbers. Access to member records is restricted, and admin tools are protected. No system is perfectly secure. If a breach affects your information, we'll tell you as the law requires.

11. Changes to this policy

If we make a significant change, we'll email members before it takes effect and update the date above. Where the law requires it, we'll ask for your consent again.

12. Contact

Signed on Purpose, operated by Garang Majok
hello@signedchallenge.com
17350 State Hwy 249 Ste 220, Houston TX 77064