myFacets

Privacy Policy

Version 1.9 · last updated 2026-11-09

Who we are
==========
myFacets is published by EIGHTHMILE PUBLISHING PRIVATE LIMITED (CIN U58111UP2025PTC228808), a company incorporated in India with its registered office at 61A, Old Vijay Nagar, Taj Nagari, Agra, Uttar Pradesh, 282004. In this policy, "we", "us" and "our" mean that company. You can reach us at facets.help@gmail.com.

Under the Digital Personal Data Protection Act, 2023, we are the Data Fiduciary for the limited personal data described below, and you are the Data Principal.

Plain-English summary
=====================
Your facets, goals, actions, logs, scores, reflections, moods, journeys and any photos you attach are stored on this device. On phones, an automatic backup also keeps a copy in your own iCloud or Google account, unless you switch it off. We have no server that could hold any of it and no account to tie it to. We do count how features are used — anonymously, never what you wrote.

1. What information we collect
Everything you type stays on your device and in any backup you keep. We never receive it. Separately, and only in aggregate, we receive:
  • that an event happened — a facet was created, a season was reviewed, a backup ran
  • how many facets you set up
  • which parts of the app get used — for example that a reflection was saved, a starter pack added or a locked feature reached — never which pack or journey, and never a word of what you wrote
  • which of the twenty facets the app suggests you chose — for example Body or Parent — so we can tell which ones are worth keeping. A facet you named yourself is recorded only as "custom", with none of your wording
  • coarse app and OS version, so a bug report can be matched to a build
  • how long since you last opened the app, as a broad band only — "1 day", "2-7", "8-15", "16-30" or "30+" — never an exact number of days, and the dates themselves never leave your device
  • roughly how long a visit lasted and how many screens it covered
  • whether a score went up or down and by how much, never which facet it was
  • when something failed — a backup that could not be written, storage that could not be encrypted — described by a short reason code we chose, never the raw error text
Events in one visit share a short-lived session identifier, so they can be linked TO EACH OTHER within that visit. They are not linked to you, to your device, or to anything you did on another day.

If you contact us by email (e.g. through Contact us in Settings), we will see the email address you wrote from and the contents of your message. We use this only to reply to your request, and we do not share it.

2. What we never collect
  • anything you wrote yourself — the words of a facet you named, the names and contents of your goals, actions and notes, and your reflections, journey answers, check-ins and any photos you attach
  • your logs, satisfaction scores, moods, notes or dates
  • your name, contacts, calendar, microphone, camera or photo library (a photo you attach to a reflection stays on your phone and in your own backup)
  • your precise location — no GPS, no location permission; the analytics service resolves a country from your IP address and does not store the address itself
  • advertising identifiers, device identifiers, cookies or cross-app tracking

If the app breaks, it offers to email a report. Nothing is sent automatically — the whole report is shown to you first, and it goes through your own mail app, so you can read it, edit it or not send it. It contains the time, the screen you were on, your screen size, your device platform and browser identification, and the technical description of the failure. We do not put your facets, actions, notes or scores into it. The one thing we cannot promise is the technical description itself: it is written by whatever broke, and it can occasionally quote a value you had typed. That is why you see it before it goes.

3. Backups
On phones, automatic backup is on by default, so that a lost or replaced phone does not cost you your history. The app keeps one file in its own storage on your device and makes it available to your own iCloud (iOS) or Android system backup. The file holds everything in the app, including your reflections, moods, journey answers, check-ins and attached photos. On Android, if the file would grow past the size Android backs up, the oldest photos are left out of it and Settings says so; your words are always in it. It is plain, readable text, not encrypted by us, and does not contain your PIN. You can switch this off at any time in Settings, which deletes the file from your device. Copies your iCloud or Google account already holds are controlled by that account.

On Android you can also choose to back up to your own Google Drive. myFacets then keeps a copy of everything, photos included, in a hidden folder of your Drive that only the app can use. It goes from your phone to your Google account; we never receive it. Like the file above, it is not encrypted by us and does not contain your PIN. Turning it off can delete those copies, and Clear all data deletes them.

That backup, and any file you export yourself to a service of your choice (Drive, Files, iCloud Drive, email), goes to the service YOU chose. We never see it. We are not responsible for how that third-party service handles the file. Please review the privacy policies of those services.

4. Age
myFacets is for adults aged 18 and over. Please do not use the App if you are under 18. We do not knowingly collect any personal data from anyone under 18. If you believe someone under 18 has sent us personal data, for example by email, contact us and we will delete it.

5. Third parties
For analytics, the app uses one third-party service: Aptabase, for anonymous product analytics, on its EU region, where the events are processed and stored. It uses no cookies, no device identifiers and no fingerprinting; the app attaches a session id generated on your device from a timestamp and a random number, which resets after an hour of inactivity, and Aptabase separately derives a daily identifier on its servers from your IP address, browser type and a salt it rotates and discards every day — so neither can follow the same device from one day to the next. Your IP address is used only to resolve a country and is never stored. It never receives your goals, actions, logs, scores, notes, dates, or any wording you typed yourself — in any form, including shortened, categorised or hashed. What it receives is the name of the thing that happened and, sometimes, a small whole number such as how many facets exist. It also receives which of the twenty facets the app suggests you selected, chosen from that fixed list and identical for every user — so we can see which suggestions earn their place. If you write your own facet name, that is recorded as the single word “custom”: the wording never leaves your device, and a facet you called “Chemo”, “Sobriety” or “Allotment” is indistinguishable from any other in the data. No advertising, attribution or automatic crash-reporting SDK is used. Each event also carries your language setting, the app and SDK version, and the session identifier described above, which groups the events of a single visit and is not tied to you or your device. It also receives coarse timing bands rather than exact figures: how long since you last opened the app is sent as “1 day”, “2-7”, “8-15”, “16-30” or “30+”, and never as a precise count. The app keeps the underlying dates on your device to do that arithmetic; those dates are never transmitted. Aptabase retains analytics for up to five years, and because it holds no identifier for you, it cannot locate or delete any single person's events on request — which is the flip side of it being anonymous. On iPhone and iPad, myFacets asks you on first launch and nothing at all is sent unless you say yes — including during setup. On Android and on the web it is on from the start and this policy is the disclosure, because the events carry no cookie, no device identifier and nothing stored on your device. Either way one switch in Settings turns it off, it stops immediately, and nothing is sent while it is off. Separately, on Android, if you turn on Google Drive backup, the app uses Google Play services on your phone to ask your Google account for permission, and the backup goes straight from your phone to your own Google Drive. That copy is held by Google under your account and Google’s own privacy policy; it never passes through us.

6. Push notifications
If you enable notifications, they are scheduled and delivered by your phone's operating system (Apple iOS / Android). We do not have a notification server. Notifications never leave your device.

7. App store data
If you install myFacets from the App Store or Google Play, those stores collect their own data per their privacy policies (purchase records, device info, crash reports if you opt in). We do not receive any personally-identifying information from those stores beyond aggregate, anonymous install/uninstall counts.

8. Security
Your data sits in the app's private storage area on your device, isolated from other apps by your operating system. On phones and tablets the database is encrypted at rest; the key is generated randomly on your device and held in the operating system's own secure storage (iOS Keychain, Android Keystore), never in the app's files and never anywhere we can reach. If a device cannot set up that encryption, the app does not pretend otherwise: it keeps working with an unencrypted database and says so on the Settings screen, so you can export your data and decide what to do. In a web browser the same encryption is not available, so the data is stored unencrypted in the browser's private storage for the site.

You may set an optional PIN and biometric lock. The PIN itself is never stored — only a PBKDF2-SHA256 hash of it, with a per-install random salt and 210,000 iterations, and repeated wrong attempts are progressively delayed. Note that the lock and the encryption are independent: the PIN keeps someone who picks up your unlocked phone out of the app, while the encryption protects the stored files.

9. Your rights
Because we hold no data about you, there is nothing for us to delete, export, or correct on your behalf. To delete your data, uninstall the app, or use the "Clear all data" function in Settings. To export, use Backup.

The Digital Personal Data Protection Act, 2023 gives you the right to access, correct and erase your personal data, to nominate someone to exercise those rights, and to complain to the Data Protection Board of India. We state plainly what those rights mean here: the analytics events described in section 1 carry no identifier for you or your device, so we cannot locate the events belonging to any one person in order to show or erase them. That is a consequence of collecting nothing that identifies you, not a refusal — and it is why the switch in Settings, which stops collection at source and immediately, is the control that actually does something. Anything you send us by email we can and will delete on request.

10. Changes to this policy
We may update this policy when the app changes. Material changes will be noted in the app's release notes. Continued use of the app after a change means you accept the updated terms.

11. Contact and grievances
For any privacy question, use the Contact us option in Settings, or write to facets.help@gmail.com.

Grievance Officer
  myFacets Helpdesk
  EIGHTHMILE PUBLISHING PRIVATE LIMITED
  61A, Old Vijay Nagar, Taj Nagari, Agra, Uttar Pradesh, 282004
  facets.help@gmail.com

The Grievance Officer is the contact named under the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and is also the person to write to about your rights under the Digital Personal Data Protection Act, 2023. We aim to acknowledge a grievance within 24 hours and resolve it within 15 days, as those Rules require.

If you are not satisfied with our response, you may complain to the Data Protection Board of India.