Privacy Policy
Draft — not yet approved. Version 0.1 (draft), 2026-08-09.
SELF//PHASE is a self-observation app. This policy explains what it records, where that stays, and how to get it back or get rid of it.
Who is responsible
The controller is the operator of SELF//PHASE, reachable at privacy@selfphase.me. (Legal entity and address to be filled in before release.)
What the app records
Everything the app stores is something you typed or tapped:
- the state you report (for example "overloaded", "focused");
- your daily check-in: four self-assessed values from 1 to 10 — energy, money, focus, social;
- which card you drew and when;
- an optional free-text note you attach to a card;
- app settings: language and reminder time.
The app does not ask for your name, gender, date of birth, address or phone number, and does not collect contacts, photos, location or health-sensor data.
Where it is stored
Without an account, everything stays on your device. Nothing is sent to us. Deleting the app deletes the data.
With an account (Sign in with Apple or Google), the same records are also stored on our server so they survive a reinstall or a new phone. From the provider we keep only an opaque account identifier — we do not store your email address or your name.
Why we are allowed to do this (GDPR)
Storing your records on the server happens on the basis of your consent (Art. 6(1)(a) GDPR), given in the app before the first entry. Notes and reported states can say something about your mental state, so we treat them as special category data (Art. 9) and rely on your explicit consent. You can withdraw consent at any time by deleting your account; withdrawal does not affect processing that already happened.
Automated pattern analysis and text generation
The app detects recurring patterns in your records (an automated analysis that runs only after you have given consent) and phrases them as short observations. To phrase an observation, our server sends OpenAI (OpenAI, L.L.C., USA — our processor under a data processing agreement; the transfer is safeguarded by the EU–US Data Privacy Framework and standard contractual clauses) only the pattern type, aggregate numbers and card identifiers — for example "overloaded 4 times in 7 days", or the names of two cards you keep alternating between. Your notes, your account identifiers and anything you typed are never sent to a text-generation provider. If the provider is unavailable, the app shows a built-in template text instead.
How long we keep it
For as long as your account exists. Delete the account and the records are erased immediately, not archived. Server backups roll over within 30 days.
Your rights
In the app: Settings → Export data produces a full JSON copy (Art. 20), and Settings → Delete account erases everything (Art. 17). For access, rectification, restriction or objection, or to complain to a supervisory authority, write to privacy@selfphase.me.
Not medical advice
SELF//PHASE is not a medical device, does not diagnose anything and does not replace professional help.
Children
The app is not intended for anyone under 16.
Changes
Material changes are announced in the app before they take effect.