PrivacyPolicy

02

What the app stores on your phone

All of this stays on the device unless you sign in and turn backup on:

• Tasks, habits, daily records, streaks and completion history
• Focus sessions and the time you have logged against each focus mode
• Discipline chat entries, including any photos, videos and voice recordings you record in it
• Ideas pages, Books, and saved quotes
• Sweet Money: the transactions, categories, budgets and accounts you enter
• Sport: the training sessions, weekly plan and meals you log, and anything imported from Health Connect or Strava (see section 4a)
• Which apps and categories you have chosen to block
• App usage statistics, used to show you your own screen time
• Your settings, including your profile name and picture

03

What is sent off the device, and when

There are three separate things here, and they are worth keeping apart.

3.1 Diagnostics - for everyone, with or without an account

So that faults can be found and fixed, the app sends two kinds of technical data to Google Firebase:

• Crash reports (Firebase Crashlytics): when the app crashes - the place in the code where it happened, the app version, the phone model and Android version, and an installation ID that Firebase generates.
• Basic usage statistics (Google Analytics for Firebase): automatic events such as the first open, a session starting, an update, the app version, the device type and the approximate country. The app sends no custom events of its own and no content you typed.

Neither contains your tasks, notes, recordings, money figures, health data or the list of apps you block. This data is used only to check that the app works properly and to decide what to fix or improve. It is not used for advertising or to build a profile of you, it is not sold, and the app does not request or use the Android advertising ID.

The app also uses Firebase App Check with Google Play Integrity and, during sign-in, Google reCAPTCHA. Both exist to confirm that requests come from the genuine app and a real person, and to keep abuse out.

3.2 Your content - only after you sign in, and only to your own account

If you sign in with email or Google, the app uses Google Firebase (Authentication, Firestore, Storage) to back your data up and, if you use the Windows app too, to keep your devices in step. Photos, videos and voice recordings may instead be kept in Cloudflare R2 (Cloudflare's file storage), in a private bucket that only our server can open; the app reaches a file only through a short-lived link our server issues to the signed-in owner. Your data is stored under a path tied to your account ID and is protected by server-side rules that permit access only to the signed-in owner.

How often, and how much. With Pro, the backup runs automatically as often as you choose and includes your photos, videos and voice recordings. Without Pro you can back up by hand at any time, or automatically once a day; that backup carries text only. Syncing between your phone and the Windows app works on every plan, and without Pro it carries smaller files: a photo or a voice recording up to 10 MB, a video up to 40 MB, and 1 GB in the cloud in total. A file over the limit simply stays on the device it was made on. If the cost of running the service passes a set limit, free automatic backup is switched to manual on your phone, and the app tells you so.

The Sweet Money figures are numbers you type in. The app has no access to any bank, card or payment account, and never asks for one.

3.3 Optional features that talk to another service

Each of these does nothing until you use it.

• Cloud dictation (Pro). When you dictate with the Pro dictation, the recording is sent to our server (Google Cloud, in the EU) and passed on to OpenAI to be turned into text. The text comes back to your phone. Our server does not store or log the recording or the text - it keeps only a count of the seconds used, so the monthly limit can be applied. OpenAI processes the recording under its API terms, which state that API data is not used to train its models. The free dictation uses your phone's own speech service (normally Google's) instead.
• Picture search in Ideas. When you search for a cover picture, the words you type are sent to Openverse (openverse.org, run by the WordPress Foundation), and the picture you pick is downloaded from the site that hosts it. No account data is sent, but as with any website those servers see your IP address.
• Checking your subscription. To unlock paid cloud features, the app sends the purchase token Google Play gave it to our server, which asks Google Play whether the subscription is active.
• Health Connect and Strava - see section 4a.

We do not sell your data, and we share it with nobody except the service providers named in this policy, who process it on our behalf to run the app.

3.4 Safety checks on uploaded files

To keep illegal and sexual content out of the service (Terms of Service), photos, videos, voice recordings and other files sent to our cloud may be checked automatically.

• What is checked: files uploaded to the cloud (backup, sync, chat media, profile picture). Text, tasks, notes and anything kept only on your device are not checked, and nothing is checked while Full Privacy Mode is on (section 3a).
• How: the file is passed to an automated classifier that returns only a score - how likely the file shows nudity or graphic violence. Google Cloud (Vision SafeSearch for photos, Video Intelligence for videos) processes the file for this purpose only and does not keep it or use it to train its models. Ordinary gym or swimwear photos are not flagged.
• When something is flagged: the file may be removed and a person (the developer) may look at it to decide what to do. A warning, a suspension or a ban is always decided by a person.
• Legal basis: our legitimate interest in keeping the service lawful and safe, and our legal duty to act on illegal content (Art. 6(1)(f) and 6(1)(c) GDPR; EU Digital Services Act).
• Evidence and authorities: if content appears illegal, we may keep it and the related account data as evidence and pass it to the police or other authorities. Sexual content involving minors is always reported.

Because files may be checked, the cloud is not end-to-end encrypted.

3.5 E-mails we send

• Account and service e-mails - sign-in, password reset, changes to these documents, account warnings, suspensions and bans, and answers to your messages. These are part of the service and are sent to every signed-in user. Legal basis: performance of the contract.
• Offers and news - only if you turn on "Offers by e-mail" in Account & Profile. You can withdraw at any time with the link in every such e-mail or with the same switch. Legal basis: your consent.

Your e-mail address is never sold or given to advertisers. E-mails are sent through Resend (Resend, Inc., USA, under the EU Standard Contractual Clauses), which processes the address only to deliver the message.

3.6 Device identifier (ban enforcement)

When you are signed in, the app sends an identifier of the device (on Android the app's ANDROID_ID, on Windows the installation's MachineGuid). We store only a one-way hash of it, together with the accounts used on that device. It has one purpose: a ban for breaking the Terms also covers new accounts made on the same device. It is not used for advertising or tracking. Legal basis: legitimate interest in enforcing the Terms (Art. 6(1)(f) GDPR). Kept while the account exists, and for as long as a ban applies.

03a

Full Privacy Mode

Full Privacy Mode is a switch in Settings → Account & Profile, on the phone and on the Windows app. Each device has its own switch. While it is on, that device is offline for your data:

• Nothing you put into the app leaves the device. Tasks, journal entries, photos, voice and video notes, ideas, books, money, training, Evolve photos, your name and profile picture, and your settings are kept only on that device. There is no sync with your other device, no cloud backup (automatic or manual), no upload of any file, and no cloud dictation.
• No diagnostics. On the phone, crash reports and usage statistics (section 3.1) are switched off too. The Windows app never sends them.
• Nothing is stored or checked on our side. Because nothing is uploaded, we do not receive, store, see or scan any of it - the automated checks on uploaded files (section 3.4) only ever apply to files that reach our servers.
• What still talks to the internet. If you are signed in, the app still reads which plan your account has, so Pro keeps working, and it still checks whether the account or device has been banned. Features you start yourself that need another service - a picture search, the Health Connect and Strava import, the Windows app's update check - work as described in section 3.3 and 8b.
• Files you add are copied into the app. A photo or video picked from the gallery (or a file on the laptop) is copied into the app's own storage on that device, so deleting the original does not remove it from the app. The copy never leaves the device.
• What is already in the cloud stays there until you delete it. "Delete all data, keep the account" (section 6) works while the mode is on.
• Turning it off starts the sync of text and lists again (section 3.2). Photos, videos and voice notes added while the mode was on are never uploaded, not even after it is turned off: they stay on that device only, and the other device shows that they are there.

Your responsibility. In Full Privacy Mode the content exists only on your device, under your control. We have no copy of it and no access to it, and you alone are responsible for what you keep there and for keeping a backup of it - lose the device, and the data is gone.

04

Permissions, and what each one is genuinely for

• Camera and microphone — only to record the video and voice entries you choose to record. Neither is ever accessed in the background.
• Photos / media — to let you pick a profile picture, a book cover or a page cover.
• Accessibility service — this is how blocking works. The service reads the content of the screen to recognise a blocked app, or a specific part of one (Reels, Shorts, an incognito tab, an adult site) and closes it. What it reads is examined on your device and immediately discarded. It is never written to storage, never logged, and never transmitted. You turn this on yourself in Android's settings and can turn it off there at any time.
• Usage access — to show you your own screen-time figures and to notice which app is in front.
• Query all packages — to list the apps installed on your phone so you can choose which ones to block. The list of apps you actually block is stored; the full inventory is not.
• Notifications, exact alarms, run at startup — for reminders, the trial notice, and to restore your scheduled reminders after a reboot.
• Modify secure settings — used only to toggle Android's Private DNS filter on your behalf. This is a privileged permission that Android does not grant to apps installed from Google Play, so on a normal installation it does nothing at all.

04a

Health Connect and Strava

Both are off until you connect them on Settings → Connections, and both are read-only: the app never writes, edits or deletes anything in Health Connect or on Strava.

Health Connect (Android's health data store, which is where Garmin, Samsung Health, Fitbit and similar apps put their data). With your permission the app reads: exercise sessions, distance, calories burned (total and active), heart rate and resting heart rate, heart rate variability, sleep, steps, floors climbed, elevation gained, speed, cadence, oxygen saturation, VO2 max, weight and body fat. Each type is asked for separately and you can grant only the ones you want; the history permission is used only so a first import can reach further back than 30 days.

What it is used for: to show your own workouts, sleep and daily figures on the Sport page, next to what you log by hand, and to count imported workouts in your weekly training stats and calorie budget. Nothing else.

Strava. If you connect Strava, the app signs in to Strava with your consent (read access to your activities only) and imports your activities into the same Sport log. The Strava access token is stored only on your phone. Disconnecting removes it.

Where that data goes. Imported workouts and sleep are stored on your phone. Daily figures (steps, heart rate, oxygen saturation and the like) never leave the phone. If you sign in, the Sport log — including imported workouts and sleep — is backed up to your own private Firebase area with the rest of your data, and deleting your account deletes it. Health data is never sold, shared with third parties, used for advertising, or used to build profiles, and it is not used to train any model.

The use of information received from Health Connect will adhere to the Health Connect Permissions policy, including the Limited Use requirements. You can revoke the app's access at any time in Android's Health Connect settings, or disconnect a source on Settings → Connections.

05

Payments

Subscriptions (Pro and Max) and extra cloud storage are bought and handled entirely by Google Play. The app never sees, receives or stores your card details, and Google does not share them with us. We receive only the fact that a subscription is active, which plan it is and which storage add-ons the account holds - that is how the app and our server know your limits. Prices, renewals, cancellation and refunds are described in the Terms of Service.

06

How to delete your data

• In the app: Settings → Account & Profile → Delete account. This deletes your login and every document and file stored under your account: backups, tasks, chat media, everything. It cannot be undone.
• Everything but the account: Settings → Account & Profile → Log-in → Delete all data, keep the account. This deletes every document and file stored under your account and everything the app holds on that device. Your login and your subscription stay. Another device signed in to the same account still holds its own copy and will upload it again, so clear it there too. It cannot be undone.
• Locally: uninstalling the app, or clearing its data in Android's app settings, removes everything held on the device.
• Another account on the same device: signing out deletes nothing. When a different account then signs in, the app asks first and, if you agree, removes the previous account's data from that device before it starts. Nothing of the previous account is uploaded to the new one, and the previous account's cloud copy is not touched.

Uninstalling without a backup — read this before you delete the app

Your data lives on your phone. Uninstalling the app deletes it from the phone, and the app has no way to bring back anything that was not backed up first. The app does not warn you at the moment you uninstall it — Android does not tell an app it is being removed — so this is the warning.

• If you never made a backup (no account, or you never pressed "Back up now"), uninstalling permanently deletes all of it: your Discipline chat with every message, video, voice note and photo; tasks, streaks and completed days; Focus sessions and statistics; ideas, books and saved quotes; money entries, training log and food diary; focus modes, blocked apps and settings; and the snapshot saved on the phone.
• On the free plan, a backup carries text and numbers only. It never uploads the videos, voice notes and photos from your Discipline chat, voice notes and pictures in Ideas, book covers or your profile photo or video — those exist only on your phone and are lost for good when you uninstall. The free plan also never backs up on its own, so everything you did after your last manual backup is lost too, as is the snapshot saved on the phone.
• On Pro, backups also carry your videos, voice notes and photos and can run automatically; anything created after the most recent backup is still only on the phone.

Android's own device backup (Google One) may independently restore some app settings on a new install. That is a feature of your phone, not of this app, and nothing here relies on it.

We cannot recover data that was never backed up, and we do not accept responsibility for data lost by uninstalling the app or clearing its data without backing it up first.

• By email: write to makeyourselfsupport@gmail.com from the address you signed up with and we will delete the account and its data.

06a

How long data is kept

• Your account and its backup: until you delete the account (section 6).
• Photos, videos and voice recordings in the cloud: kept while you use the app. Without Pro, the cloud copy of these files is deleted once the app has not been opened on any of your devices for 30 days. If Pro ends, the cloud copy is deleted three days later. In both cases only the cloud copy goes: the files on your phone and laptop are not touched, and your tasks, journal text, books and other written data stay in your account.
• If your account keeps more in the cloud than your plan holds: this can happen when you move to a smaller plan. From the day it is noticed you have 30 days to remove files (Data & Backup

  Manage cloud space) or to return to the larger plan. After that the oldest cloud files over the limit are deleted, oldest first, until the account fits. The app shows the date in Data & Backup. Only the cloud copies go; the files on your devices are not touched.

• A journal message you delete: its photo, video or voice recording is removed from the cloud as well. A file you remove on the Cloud space page is deleted from the cloud at once and is no longer part of your backup.
• Dictation recordings: not kept by us at all (section 3.3).
• Crash reports and usage statistics: kept by Google for its standard periods - crash reports for about 90 days, usage statistics for no longer than 14 months - and then deleted.
• Safety checks: the scores from automated checks (section 3.4) are kept for 90 days. Content and data kept as evidence of a breach are kept until the matter is closed, or longer if the authorities ask for it. A record of a ban (e-mail address, device hash and reason) is kept for as long as the ban applies, so a banned person cannot simply sign up again.

06b

Your rights

If you are in the European Economic Area, the United Kingdom or another place with similar law, you have the right to see the data held about you, to have it corrected or deleted, to receive a copy of it, to object to its use, and to withdraw a consent you gave (for example by disconnecting Health Connect or Strava, or turning a permission off). You can do most of this yourself in the app; for anything else write to makeyourselfsupport@gmail.com. You also have the right to complain to your data protection authority.

The legal grounds are: providing the service you asked for (your account, backup and sync, paid features, service e-mails), your consent (permissions, Health Connect, Strava, offers by e-mail), our legitimate interest in keeping the app working, safe and secure (diagnostics, abuse protection, safety checks on uploaded files, ban enforcement), and our legal duty to act on illegal content.

07

Children

The app is not intended for children under 13 and we do not knowingly collect their data.

08

Security, and where your data is kept

Data in transit is encrypted (HTTPS/TLS); the app refuses unencrypted connections outright. Data at rest is held on Google Firebase infrastructure, and photos, videos and voice recordings may be held in Cloudflare R2 (section 3.2). Access is restricted by server-side rules that allow each account to reach only its own data. The app-lock password, if you set one, is stored only as a salted, iterated hash, never in readable form, and never leaves your device.

Where. Backups are stored on Google Cloud servers in the United States. If you are in the United Kingdom, the European Economic Area, or another country with similar rules, this means your data is transferred outside your region. That transfer relies on Google's standard contractual clauses and its certification under the EU–US Data Privacy Framework. Files held in Cloudflare R2 are covered by Cloudflare's standard contractual clauses and Data Privacy Framework certification in the same way. If you would rather your content did not leave your own region, do not sign in - the app is fully usable without an account, and without one the only thing sent is the anonymous diagnostics described in section 3.1.

08a

The website makeyourself.app

The website is hosted by Cloudflare, which, like any host, processes your IP address and browser details to deliver the page and keep it secure.

Visit statistics without cookies. The site uses Cloudflare Web Analytics to count visits: which page was opened, the site the visitor came from, the country, and the browser and device type. It sets no cookies, stores nothing on your device and does not follow you across other sites, so there is nothing to accept or decline. The numbers are used only to see how the site is used.

The website has no accounts, forms or payments.

08b

The Windows app

Make Yourself for Windows is the same app on a laptop, and this policy covers it. What is different there:

• Where your data is kept. In a file in your Windows user folder (the Make Yourself folder under AppData), with your photos and recordings beside it. If you set an app lock password, that file is encrypted with your Windows account; the photos and recordings are not. Uninstalling the app leaves the folder in place, so nothing is lost by accident - delete the folder yourself if you want it gone.
• No diagnostics. The Windows app sends no crash reports and no usage statistics.
• Sync. Only after you sign in, and only to your own account, exactly as in section 3.2 - and never while Full Privacy Mode is on (section 3a).
• Updates. The app asks GitHub whether a newer version exists when it starts and every few hours, and downloads it from there. As with any website, GitHub sees your IP address.
• Blocking (a Pro feature). To close a program or a browser tab you chose to block, the app reads the names of the programs that are open and the titles of their windows. That happens on your laptop; it is never stored and never sent anywhere.
• Picture search and Pro dictation work as described in section 3.3. The free dictation is Windows' own voice typing.
• Payments. There are none on the laptop. Pro and Max are bought in the phone app; the laptop only reads which plan your account has.
• Another account. When a different account signs in on the laptop, it starts empty. The previous account's data is kept as a file in the snapshots folder beside the data file and is not uploaded to the new account. "Delete all data, keep the account" works there as on the phone.

09

Changes

If this policy changes, the date at the top changes with it, and the current version is always the one published at this address.