Privacy Policy — Make Yourself

Last updated: 1 October 2026

This policy describes what the Make Yourself app collects, why, where it goes, and how to get rid of it. It is written to match what the code actually does. If you find a difference between this page and the app's behaviour, the difference is a bug — please report it to the address at the bottom.

Who is responsible for your data: Danylo Kozak, the individual developer who makes and publishes Make Yourself (the "data controller").

Contact: [email protected]

1. The short version

• What you put into the app - tasks, notes, recordings, money, training - stays on your phone until you sign in. There is no account by default.
• The one thing that is sent without an account is anonymous diagnostics: crash reports and basic usage statistics. They are used for one purpose only - to see whether the app works properly and what needs fixing. They are not used for advertising, and the app does not use an advertising ID.
• If you sign in, your data is backed up to your own private area of Google Firebase, readable only by you.
• The app can read the screen of other apps in order to block them. That reading happens on your phone, is never stored, and is never sent anywhere.
• Deleting your account deletes your cloud data with it.
• Nothing is sold, rented, or shared with advertisers.

2. What the app stores on your phone

All of this stays on the device unless you sign in and turn backup on:

• Tasks, habits, daily records, streaks and completion history
• Focus sessions and the time you have logged against each focus mode
• Discipline chat entries, including any photos, videos and voice recordings you record in it
• Ideas pages, Books, and saved quotes
• Sweet Money: the transactions, categories, budgets and accounts you enter
• Sport: the training sessions, weekly plan and meals you log, and anything imported from Health Connect or Strava (see section 4a)
• Which apps and categories you have chosen to block
• App usage statistics, used to show you your own screen time
• Your settings, including your profile name and picture

3. What is sent off the device, and when

There are three separate things here, and they are worth keeping apart.

3.1 Diagnostics - for everyone, with or without an account

So that faults can be found and fixed, the app sends two kinds of technical data to Google Firebase:

• Crash reports (Firebase Crashlytics): when the app crashes - the place in the code where it happened, the app version, the phone model and Android version, and an installation ID that Firebase generates.
• Basic usage statistics (Google Analytics for Firebase): automatic events such as the first open, a session starting, an update, the app version, the device type and the approximate country. The app sends no custom events of its own and no content you typed.

Neither contains your tasks, notes, recordings, money figures, health data or the list of apps you block. This data is used only to check that the app works properly and to decide what to fix or improve. It is not used for advertising or to build a profile of you, it is not sold, and the app does not request or use the Android advertising ID.

The app also uses Firebase App Check with Google Play Integrity and, during sign-in, Google reCAPTCHA. Both exist to confirm that requests come from the genuine app and a real person, and to keep abuse out.

3.2 Your content - only after you sign in, and only to your own account

If you sign in with email or Google, the app uses Google Firebase (Authentication, Firestore, Storage) to back your data up and, if you use the Windows app too, to keep your devices in step. Your data is stored under a path tied to your account ID and is protected by server-side rules that permit access only to the signed-in owner.

The Sweet Money figures are numbers you type in. The app has no access to any bank, card or payment account, and never asks for one.

3.3 Optional features that talk to another service

Each of these does nothing until you use it.

• Cloud dictation (Pro). When you dictate with the Pro dictation, the recording is sent to our server (Google Cloud, in the EU) and passed on to OpenAI to be turned into text. The text comes back to your phone. Our server does not store or log the recording or the text - it keeps only a count of the seconds used, so the monthly limit can be applied. OpenAI processes the recording under its API terms, which state that API data is not used to train its models. The free dictation uses your phone's own speech service (normally Google's) instead.
• Picture search in Ideas. When you search for a cover picture, the words you type are sent to Openverse (openverse.org, run by the WordPress Foundation), and the picture you pick is downloaded from the site that hosts it. No account data is sent, but as with any website those servers see your IP address.
• Checking your subscription. To unlock paid cloud features, the app sends the purchase token Google Play gave it to our server, which asks Google Play whether the subscription is active.
• Health Connect and Strava - see section 4a.

We do not sell your data, and we share it with nobody except the service providers named in this policy, who process it on our behalf to run the app.

4. Permissions, and what each one is genuinely for

• Camera and microphone — only to record the video and voice entries you choose to record. Neither is ever accessed in the background.
• Photos / media — to let you pick a profile picture, a book cover or a page cover.
• Accessibility service — this is how blocking works. The service reads the content of the screen to recognise a blocked app, or a specific part of one (Reels, Shorts, an incognito tab, an adult site) and closes it. What it reads is examined on your device and immediately discarded. It is never written to storage, never logged, and never transmitted. You turn this on yourself in Android's settings and can turn it off there at any time.
• Usage access — to show you your own screen-time figures and to notice which app is in front.
• Query all packages — to list the apps installed on your phone so you can choose which ones to block. The list of apps you actually block is stored; the full inventory is not.
• Notifications, exact alarms, run at startup — for reminders, the trial notice, and to restore your scheduled reminders after a reboot.
• Modify secure settings — used only to toggle Android's Private DNS filter on your behalf. This is a privileged permission that Android does not grant to apps installed from Google Play, so on a normal installation it does nothing at all.

4a. Health Connect and Strava

Both are off until you connect them on Settings → Connections, and both are read-only: the app never writes, edits or deletes anything in Health Connect or on Strava.

Health Connect (Android's health data store, which is where Garmin, Samsung Health, Fitbit and similar apps put their data). With your permission the app reads: exercise sessions, distance, calories burned (total and active), heart rate and resting heart rate, heart rate variability, sleep, steps, floors climbed, elevation gained, speed, cadence, oxygen saturation, VO2 max, weight and body fat. Each type is asked for separately and you can grant only the ones you want; the history permission is used only so a first import can reach further back than 30 days.

What it is used for: to show your own workouts, sleep and daily figures on the Sport page, next to what you log by hand, and to count imported workouts in your weekly training stats and calorie budget. Nothing else.

Strava. If you connect Strava, the app signs in to Strava with your consent (read access to your activities only) and imports your activities into the same Sport log. The Strava access token is stored only on your phone. Disconnecting removes it.

Where that data goes. Imported workouts and sleep are stored on your phone. Daily figures (steps, heart rate, oxygen saturation and the like) never leave the phone. If you sign in, the Sport log — including imported workouts and sleep — is backed up to your own private Firebase area with the rest of your data, and deleting your account deletes it. Health data is never sold, shared with third parties, used for advertising, or used to build profiles, and it is not used to train any model.

The use of information received from Health Connect will adhere to the Health Connect Permissions policy, including the Limited Use requirements. You can revoke the app's access at any time in Android's Health Connect settings, or disconnect a source on Settings → Connections.

5. Payments

Subscriptions are handled entirely by Google Play. The app never sees, receives or stores your card details, and Google does not share them with us. We receive only the fact that a subscription is active. Prices, renewals, cancellation and refunds are described in the Terms of Service.

6. How to delete your data

• In the app: Settings → Account & Profile → Delete account. This deletes your login and every document and file stored under your account: backups, tasks, chat media, everything. It cannot be undone.
• Locally: uninstalling the app, or clearing its data in Android's app settings, removes everything held on the device.

Uninstalling without a backup — read this before you delete the app

Your data lives on your phone. Uninstalling the app deletes it from the phone, and the app has no way to bring back anything that was not backed up first. The app does not warn you at the moment you uninstall it — Android does not tell an app it is being removed — so this is the warning.

• If you never made a backup (no account, or you never pressed "Back up now"), uninstalling permanently deletes all of it: your Discipline chat with every message, video, voice note and photo; tasks, streaks and completed days; Focus sessions and statistics; ideas, books and saved quotes; money entries, training log and food diary; focus modes, blocked apps and settings; and the snapshot saved on the phone.
• On the free plan, a backup carries text and numbers only. It never uploads the videos, voice notes and photos from your Discipline chat, voice notes and pictures in Ideas, book covers or your profile photo or video — those exist only on your phone and are lost for good when you uninstall. The free plan also never backs up on its own, so everything you did after your last manual backup is lost too, as is the snapshot saved on the phone.
• On Pro, backups also carry your videos, voice notes and photos and can run automatically; anything created after the most recent backup is still only on the phone.

Android's own device backup (Google One) may independently restore some app settings on a new install. That is a feature of your phone, not of this app, and nothing here relies on it.

We cannot recover data that was never backed up, and we do not accept responsibility for data lost by uninstalling the app or clearing its data without backing it up first.

• By email: write to [email protected] from the address you signed up with and we will delete the account and its data.

6a. How long data is kept

• Your account and its backup: until you delete the account (section 6).
• Photos, videos and voice recordings in the cloud: these are part of Pro. If Pro ends, the cloud copy is deleted three days later; the copy on your phone is not touched.
• Dictation recordings: not kept by us at all (section 3.3).
• Crash reports and usage statistics: kept by Google for its standard periods - crash reports for about 90 days, usage statistics for no longer than 14 months - and then deleted.

6b. Your rights

If you are in the European Economic Area, the United Kingdom or another place with similar law, you have the right to see the data held about you, to have it corrected or deleted, to receive a copy of it, to object to its use, and to withdraw a consent you gave (for example by disconnecting Health Connect or Strava, or turning a permission off). You can do most of this yourself in the app; for anything else write to [email protected]. You also have the right to complain to your data protection authority.

The legal grounds are: providing the service you asked for (your account, backup and sync, paid features), your consent (permissions, Health Connect, Strava), and our legitimate interest in keeping the app working and secure (diagnostics and abuse protection).

7. Children

The app is not intended for children under 13 and we do not knowingly collect their data.

8. Security, and where your data is kept

Data in transit is encrypted (HTTPS/TLS); the app refuses unencrypted connections outright. Data at rest is held on Google Firebase infrastructure. Access is restricted by server-side rules that allow each account to reach only its own data. The app-lock password, if you set one, is stored only as a salted, iterated hash, never in readable form, and never leaves your device.

Where. Backups are stored on Google Cloud servers in the United States. If you are in the United Kingdom, the European Economic Area, or another country with similar rules, this means your data is transferred outside your region. That transfer relies on Google's standard contractual clauses and its certification under the EU–US Data Privacy Framework. If you would rather your content did not leave your own region, do not sign in - the app is fully usable without an account, and without one the only thing sent is the anonymous diagnostics described in section 3.1.

9. Changes

If this policy changes, the date at the top changes with it, and the current version is always the one published at this address.