Privacy Policy

1. Introduction

Selfinity ("Selfinity", "the app", "we", "us") is a personal wellbeing and self-development app developed and operated by Mindoria Studio, based in Türkiye.

This Privacy Policy explains what personal data we collect, why we collect it, who we share it with, and what rights and choices you have. It is written to be read, not to be survived — where something is unusual or important, we say so plainly rather than burying it.

Data controller: Mindoria Studio, Türkiye. Contact: hello@getselfinity.com

If you do not agree with this policy, please do not use Selfinity.

2. At a glance

3. The data we collect

3.1 Account information

• Email address and password. Your password is stored only in hashed form by our authentication provider (Supabase). We never see or store your plaintext password.
• Display name and, optionally, an avatar or profile picture you choose.
• Sign in with Google: we receive the email address, name and profile picture on your Google account.
• Sign in with Apple: we receive the email address Apple passes to us. If you choose "Hide My Email", we only ever receive Apple's private relay address and never your real one.
• Guest (anonymous) accounts: if you continue without registering, we create an anonymous account on our servers with a randomly generated identifier. Guest mode is not "local only" — it is a real account and the content in section 3.2 syncs to our servers exactly as it would for a registered account. Because a guest account has no email address, it cannot be recovered if you uninstall the app or switch device. You can convert it into a full account at any time and keep everything.
• Consent records: your acceptance of these terms and your email-communication preference, recorded at sign-up.

3.2 Wellbeing content you create

Selfinity is a wellbeing app, so most of what it holds is content you deliberately enter. Under the GDPR a large part of this is special category data concerning health; under Turkish KVKK it is özel nitelikli kişisel veri. We process it only on the basis of your explicit consent, which you give by choosing to use the relevant feature.

• Mood logs, including free-text notes
• Sleep logs (bedtime, wake time, quality)
• Water and beverage intake
• Nutrition logs (meals, calories, macronutrients)
• Daily step counts
• Journal entries ("Magic Pages")
• CBT thought records — the situation, your automatic thought, emotions, cognitive distortions and rational response
• Quick thoughts and worry-box entries
• Gratitude entries and weekly reviews
• Self-assessment and psychometric test results
• Meditation and breathing session history
• Daily wellbeing ("bio-status") scores
• Life Log activities, including optional notes and photos
• Vision board items, including images you add
• Personal care routines and their completion history
• Focus and Pomodoro sessions
• Progress data: XP, level, streaks, diamonds, achievements, quests, inventory, garden and mini-game state

Some of the above never leaves your device — section 7 says which.

3.3 Device permissions and sensors

Every permission below is optional. The app runs without it; only the related feature stops working. You can revoke any of them at any time in your operating system settings.

3.4 Technical data collected automatically

We keep this deliberately minimal:

• an authentication session token, so you stay signed in;
• the IP address your requests arrive from, which our hosting provider processes as part of normal server operation and security logging;
• your app language and basic device and platform information, needed to serve the right content and localisation.

What we explicitly do not collect: no analytics or behavioural events, no usage-tracking SDK, no crash-reporting SDK, no advertising identifier (Android Advertising ID or Apple IDFA), no device fingerprinting, no cross-app or cross-site tracking, and no tracking cookies inside the app.

3.5 Subscription and purchase data

Premium subscriptions are sold through Apple's App Store and Google Play, and managed through RevenueCat.

• We never see or receive your card details, billing address or any payment instrument. Those go only to Apple or Google.
• We send RevenueCat your Selfinity user identifier (a random UUID) so your subscription follows your account across devices. RevenueCat receives your purchase receipt and subscription status (product, start date, renewal date, whether it is active) from Apple or Google.
• We store your subscription status on our own servers so the app knows whether to unlock Premium features.

3.6 Social features

If you use the friends features:

• Your display name becomes searchable by other Selfinity users.
• People you have accepted as friends can see your public profile: display name, avatar, level, XP, streaks and achievements.
• Your journal entries, mood logs, thought records and every other personal entry listed in section 3.2 are never visible to other users.

4. Why we use your data, and on what legal basis

Under Turkish KVKK the corresponding grounds are Art. 5/2-c (necessary for performance of a contract) and Art. 5/2-f (legitimate interests), and — for special-category health data — your explicit consent under Art. 6.

You can withdraw consent at any time by stopping use of the relevant feature, deleting the relevant entries, or deleting your account. Withdrawal does not affect processing that has already taken place.

5. AI features: exactly what is sent, and to whom

Selfinity has four optional AI features. Each of them runs through our own server, which calls Google's Gemini API as a processor on our behalf. If you never use these features, nothing described in this section ever happens.

• Google acts as our processor and does not use this data to train its general-purpose models.
• Our API key lives on our server; the app never talks to Google's AI directly.
• AI output is generated text. It can be wrong, and it is not medical, psychological, diagnostic or nutritional advice. See our Terms of Use.

5.1 Automated safety screening

To reduce the risk of harm, our server automatically checks free text you write — journal entries, quick thoughts, thought records, mood notes, Life Log notes and assistant messages — for patterns that suggest self-harm or a mental-health crisis. When a pattern matches, the app changes what it shows you, for example offering support resources instead of a generated response.

• The check is automated pattern matching on our own server. No one at Mindoria Studio reads your entries as part of it.
• We do not notify any third party, emergency service, or any contact of yours.
• No profile or permanent record of these matches is built about you.

6. Who we share your data with

We do not sell your personal data, and we do not share it for cross-context behavioural advertising. Under the CCPA and CPRA, we have not sold or shared personal information in the preceding twelve months. We use only the processors below.

Beyond these, we may disclose data where we are legally required to — for example a valid court order or a binding legal obligation — or where it is necessary to establish, exercise or defend legal claims.

7. What stays only on your device

The following is stored in the app's local database and is never uploaded to our servers:

• Worry box entries
• Self-assessment and psychometric test results
• Breathing exercise sessions
• Your weight, height, birth year, gender and activity level — used only to calculate your calorie and nutrition targets on the device itself
• Individual drink entries
• Mini-game state and statistics (Sudoku, 2048, word search)
• Search history and playback history
• Audio content you download for offline use

Because this data exists only on your device, uninstalling the app deletes it permanently and we cannot restore it.

8. Photos and files you upload

Two features upload images to our storage: Vision Board and Life Log.

Correction to earlier versions: before 29 July 2026 these two areas were public, and anyone who knew an image's exact URL could open it without logging in. That access was fully closed on 29 July 2026; every image — including older uploads — is now served only through the signed links described above. Older app versions (5.1.x) cannot generate signed links and may fail to display these images; updating to the latest version resolves this.

Meal-scan photos work differently: they are sent to Google for analysis and are not placed in our storage at all. A copy may remain in the app's own cache on your device until you clear it.

9. How long we keep data, and how to delete it

• We keep your data for as long as your account exists.
• Deleting your account in the app: open Settings → Account → Delete my account. This runs a server routine that permanently removes your account and its data. It is immediate and irreversible, and we cannot undo it for you.
• Deleting by email: write to hello@getselfinity.com from your registered address with the subject "Data Deletion Request". We verify the request and complete it within 30 days.
• Backups: data may persist in encrypted backups for up to 90 days after deletion, after which it is overwritten.
• Guest accounts: a guest account has no email address, so we cannot identify it if you lose access to the device. Delete it from inside the app before uninstalling, or convert it into a full account first.
• Deleting your account does not cancel your subscription. Cancel that in the App Store or Google Play — see Terms of Use, section 5.
• We may retain a minimal record of a deletion request, and transaction records, where the law requires it.

10. Your rights

Wherever you live, you can exercise the rights below by emailing hello@getselfinity.com. We respond within 30 days, we do not charge for it, and we will never treat you differently for exercising a right.

10.1 If you are in the EEA or the United Kingdom (GDPR / UK GDPR)

• Access — obtain a copy of the personal data we hold about you
• Rectification — correct inaccurate or incomplete data
• Erasure — the "right to be forgotten"
• Restriction of processing
• Data portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on our legitimate interests
• Withdraw consent at any time, without affecting processing already carried out
• Lodge a complaint with your national supervisory authority

We do not make decisions producing legal or similarly significant effects about you by solely automated means.

10.2 If you are in Türkiye (KVKK Art. 11)

• Learn whether your personal data is processed, and request information if it is
• Learn the purpose of processing and whether it is used in line with that purpose
• Know the third parties to whom your data is transferred, in Türkiye or abroad
• Request correction of incomplete or inaccurate data, and its notification to third parties
• Request erasure or destruction under the conditions of Art. 7, and its notification to third parties
• Object to a result reached solely through automated analysis that works to your detriment
• Claim compensation for damage arising from unlawful processing

Applications under Art. 13 of the KVKK are answered within 30 days, and you may lodge a complaint with the Turkish Personal Data Protection Board (KVKK Kurulu).

10.3 If you are in California (CCPA / CPRA)

• Right to know what personal information we collect, use and disclose
• Right to delete and right to correct
• Right to opt out of the sale or sharing of personal information — we do neither, so there is nothing to opt out of
• Right to limit the use of sensitive personal information
• Right not to be discriminated against for exercising these rights

10.4 Everywhere else

As a matter of policy we apply the same rights globally, whether or not local law requires them.

11. International data transfers

We are based in Türkiye and our providers operate in the European Union and the United States. When your data crosses a border we rely on the European Commission's Standard Contractual Clauses (with the UK Addendum where relevant), on the EU–US Data Privacy Framework where a provider is certified under it, and — for transfers out of Türkiye — on your explicit consent under Art. 9 of the KVKK where no adequacy decision or written undertaking applies.

12. Children's privacy

Selfinity is not directed at children under 13, and we do not knowingly collect personal data from them. Our Terms of Use require you to be at least 13 years old, and if you are under 18 you need permission from a parent or guardian.

We comply with the United States Children's Online Privacy Protection Act (COPPA). In countries where the age of digital consent is higher than 13 — up to 16 in parts of the European Union — you need parental authorisation below that age.

If you believe a child has provided us with personal data, contact hello@getselfinity.com and we will delete it promptly.

13. Security

• All traffic between the app and our servers uses HTTPS/TLS.
• Data at rest on our infrastructure is encrypted.
• Row-level security policies in our database restrict every record to the account that owns it.
• Authentication tokens and other sensitive values are held in the iOS Keychain and in Android's encrypted preferences, not in plain files.
• Access to production data is limited to what is necessary to operate the service.

14. Changes to this policy

We update this page when the app changes, and we change the effective date at the top. For significant changes we will notify you in the app or by email before they take effect. Continuing to use Selfinity after a change means you accept the updated policy.

14.1 Versions 5.1.x and earlier (Android only)

Older Android versions of Selfinity behaved differently. This section is kept for people who have not yet updated:

• They displayed Google AdMob advertisements to users without Premium, and collected an advertising identifier for that purpose.
• They used Firebase Analytics for usage statistics and Firebase Cloud Messaging for push notifications.
• They read step and activity data through Google Health Connect.
• Subscriptions were sold directly through Google Play Billing, without RevenueCat.

From version 5.2.0 onwards, all advertising, all analytics SDKs and all push messaging have been removed from the app, and step counting uses the device's own sensor instead of Health Connect. If you are still on an older version, updating the app moves you to the practices described in this policy.