Last updated 15 October 2026.
QUESTION 42 LTD ("we") is the controller for the personal data described here. We are a company registered in England and Wales, company number 17261981. Our registered office is Apartment 31, 75 Little Britain, London EC1A 7BT.
Questions and data requests go to nick@question42.co.uk.
What this covers
This policy covers:
- the website at question42.co.uk
- Bodfit, the fitness and movement coach, live at bodfit.expo.app and coming to iOS and Android
- Hopni, the intercity carpooling app for Bulgaria
Purchases of Bitkoinz products on Amazon are covered by Amazon's own privacy notice. We do not receive your payment card number from those orders.
The website
The site does not ask you to create an account. If you email us, we receive your address, your name if you include it, and what you write. We use that to reply, and to keep a record of the conversation. The contact form on the site opens your own email app. It does not send the message to a server of ours.
The lawful basis is legitimate interests (answering a person who wrote to us) and, where you ask us to do work, steps toward a contract.
This website does not use a third-party analytics service, and it does not set advertising cookies. There is no cookie banner, because the site does not set non-essential cookies. Our host may keep ordinary server logs, such as IP address, browser, and the page requested, for security and to keep the site online. We do not use those logs to market to you.
Bodfit
Bodfit is an AI coach for fitness and movement. You sign in with Clerk. Clerk processes the details needed to authenticate you, such as your email address and authentication identifiers. Clerk keeps you signed in on the app, including on bodfit.expo.app, using the cookies or equivalent storage that sign-in requires. Those are not set on question42.co.uk.
What you enter in Bodfit is stored by Convex, which hosts our database and backend. That includes check-ins (sleep, energy, and where something hurts) and the sessions generated from them.
Sleep, energy, and discomfort can be data about your health. We use it only to build the session you asked for. We treat submission of a check-in, for that purpose, as your explicit consent to use those details for coaching (UK GDPR Article 9(2)(a)), alongside the contract to provide the app. We do not use health details for advertising. You can withdraw this by asking us to delete the check-in or the account.
To write a session, Bodfit sends the check-in context needed for the plan to OpenAI. We do not send your password. OpenAI processes that content to return the plan.
The lawful bases for the rest of the account are contract (providing Bodfit) and legitimate interests (keeping the app reliable).
Hopni
Hopni is an intercity carpooling app for Bulgaria, in Bulgarian and English. You sign in with Clerk, on the same basis as Bodfit. Trip details, requests related to a journey, and messages you send to arrange a ride are stored by Convex.
If you include information about someone else, share only what they would expect for arranging the journey.
The lawful bases are contract (providing Hopni) and legitimate interests (keeping the app reliable and safe to use).
Analytics
The website does not run a third-party analytics tracker. Bodfit and Hopni may store product-usage events, such as a screen being opened, in Convex with your account. We use those events to operate the apps, fix faults, and see which parts are used. We do not sell this data, and we do not use it to build advertising profiles.
The lawful basis is legitimate interests: understanding whether the product works, without a separate marketing use.
Who else handles data
- Clerk, for sign-in on Bodfit and Hopni
- Convex, for the app database and backend
- OpenAI, for generating Bodfit session plans from a check-in
- the company that hosts question42.co.uk, for server logs
- our email provider, when you write to nick@question42.co.uk
We do not sell personal data.
International transfers
Clerk, Convex, and OpenAI are based in the United States. Where personal data leaves the UK, we rely on a transfer safeguard the UK GDPR allows, such as the UK International Data Transfer Addendum to the EU standard contractual clauses.
How long we keep it
- Account data, check-ins, trips, and messages: for as long as the account exists. If you ask us to delete the account, we delete or anonymise it unless the law requires us to keep a record, or we need it to defend a legal claim.
- Emails you send us: while we are corresponding, and for up to two years after the last message, in case you follow up.
- Host logs: for a short security period set by the host. We do not set that period ourselves, and we do not use the logs to identify you for marketing.
Your rights
Under the UK GDPR you can ask us to:
- confirm whether we hold your data, and for a copy of it
- correct data that is wrong
- delete it
- restrict or object to certain uses, including uses based on legitimate interests
- receive a portable copy, where the basis is contract or consent and the processing is automated
Email nick@question42.co.uk. In the ordinary case there is no fee. We respond within one month. If a request is complex we may extend that by up to two further months, and we will tell you if we do.
You can complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint. The ICO is the UK regulator for data protection. We would like the chance to put something right first, and you do not have to wait for us before you contact them.
Children
The website, Bodfit, and Hopni are not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe we have, email us and we will delete it.
Changes
If this policy changes, we will update this page and the date at the top.
How to reach us
QUESTION 42 LTD
Apartment 31, 75 Little Britain, London EC1A 7BT
Company number 17261981
nick@question42.co.uk