Privacy Policy

1. Information We Collect

Account Information

When you create an account, we collect:

• Email address (for authentication and communication)
• Display name (optional)
• Profile picture (via Google OAuth, optional)
• Authentication tokens (securely stored)

User Content

To provide our service, we store:

• Goals you create (titles, descriptions, categories, deadlines)
• Daily intentions and your answers to AI questions
• Chat conversations with the AI coach
• Goal completion status and progress tracking
• Custom images you upload for goal cards

Health Data (iOS Only)

If you enable Apple Health integration:

• Step counts, exercise minutes, sleep hours, mindfulness sessions
• This data is read from your device only when you explicitly authorize it
• Health data is used solely to update your goal progress and is not shared with third parties
• You can revoke access anytime in iOS Settings

Biometric Data (Face Recognition - Trove Only)

If you use Trove (our family photo app) and enable the optional face recognition feature:

• Opt-in only: Face recognition is disabled by default. You must explicitly enable it in Settings.
• On-device processing: All facial geometry analysis and embedding generation happens entirely on your device using Apple's Vision framework.
• No server transmission: Biometric data (face embeddings) is never transmitted to our servers or stored in the cloud. It remains exclusively on your device.
• Parental consent: Parents provide consent on behalf of their children when enabling face recognition for child profiles.
• You can revoke access and delete all face data anytime in Settings → Face Recognition → Clear Local Face Data

Usage Analytics

We collect usage data to improve our apps and website. It is linked to your account, not anonymized:

• Feature usage patterns (which features you use most)
• Performance metrics (app load times, error rates)
• Device information (OS version, app version, browser type)
• In our iPhone apps, app usage analytics including periodic screenshots of the app (see below). You can turn this off at any time.

App Usage Analytics and Screenshots

To find out where our apps are confusing or broken, and to fix them, the Goals AI and MagicList+ iPhone apps record how the app is used and send it to us. This includes:

• Which screens you visit, and for how long
• Where on the screen you tap, and how far you scroll
• Which features you use, such as creating a goal, setting an intention or adding items to a list
• Errors, failed requests and app crashes
• Screenshots of the app: on each screen while you set the app up, and after that occasionally as you use it
• Your app version, iOS version and device model

Screenshots show whatever the app is showing at that moment, which may include your goals, intentions, coaching conversations, shopping lists, recipes, meal plans, household members' names and anything you have typed. We never capture payment screens: App Store purchase sheets are shown by iOS, not by our apps, and never appear in a screenshot.

This data is linked to your account so we can see where a problem happened. Only a small number of My Best Day staff can view it, and only to improve and support the apps. It is never sold, never shared with advertisers and never used to train AI models. We delete it automatically after 90 days, and straight away if you delete your account.

You can turn this off at any time in the app under Settings → Data & Privacy → Share usage analytics (the same place in Goals AI and MagicList+). When you turn it off, anything not yet sent is deleted from your phone and nothing more is collected.

Device Identifiers

Our mobile apps may send a device identifier when they create or restore an account: the vendor identifier (IDFV) on iOS, and the Android ID on Android. We use it for one purpose — keeping an account attached to the device that created it, so an account you have not signed into can be restored instead of silently replaced, and so a single install does not accumulate duplicate accounts.

• Never used for advertising, ad targeting, or tracking you across other apps, and never sold
• Not shared with anyone beyond the infrastructure providers that store it for us
• Resettable by you: the iOS identifier changes once you delete all of our apps from the device, and the Android identifier changes on a factory reset
• If you turn on notifications, we also store a push token for your device so we can deliver them
• Both are erased when you delete your account

2. How We Use Your Information

We use your data to:

• Provide the service: Store your goals, generate daily intentions, provide AI coaching
• Personalize your experience: Tailor AI questions and responses based on your goals and history
• Send communications: Daily reminders, goal notifications, important account updates
• Process payments: Via Stripe (we never store your credit card details)
• Improve the product: Analyze how the apps are used, including the app usage analytics and screenshots described above, to find problems and build better features
• Provide support: Help you troubleshoot issues when you contact us

3. AI Processing

Our AI features use OpenAI's GPT models to:

• Generate personalized daily intention questions
• Provide coaching responses in the Discover chat
• Suggest goal categories based on descriptions
• Generate contextual advice based on your goals

When using AI features, your goals and conversation context are sent to OpenAI's API for processing. OpenAI does not use this data to train their models. See OpenAI's privacy policy for more details.

4. Data Sharing and Third Parties

We share limited data with these service providers:

We do not sell your data. We never share your goals, intentions, or personal information with advertisers or data brokers.

5. Data Storage and Security

Your data security is our top priority:

• Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
• Infrastructure: Hosted on Cloudflare's secure, globally distributed network
• Database: Cloudflare D1 (SQLite) cache layer with R2 persistent storage
• Authentication: Secure JWT tokens with Google OAuth
• Access controls: Strict role-based access (RBAC) for admin operations
• Monitoring: Continuous security monitoring and automated backups

6. Your Privacy Rights

You have the following rights under GDPR and CCPA:

7. Data Retention

We retain your data as long as your account is active. If you cancel your subscription, your data remains accessible at the free tier level. If you delete your account, all data is permanently removed from our systems within 30 days, except where we're legally required to retain it (e.g., payment records for tax purposes).

App usage analytics and screenshots are kept for 90 days and then deleted automatically, and are deleted straight away when you delete your account.

Biometric Data Retention (Trove)

Face embeddings stored on your device are automatically deleted when:

• You remove a family member profile from Trove
• You delete your Trove account
• You use the "Clear Local Face Data" option in Settings
• You uninstall the Trove app

To manually delete face recognition data at any time, go to Settings → Face Recognition → Clear Local Face Data.

8. Cookies and Tracking

We use minimal cookies and tracking:

• Essential cookies: Authentication tokens, session management (required)
• Analytics cookies: Usage tracking to improve the product (can be disabled in Settings)
• No advertising cookies: We don't use cookies for advertising or cross-site tracking

9. Children's Privacy

My Best Day is not intended for children under 13. We do not knowingly collect information from children. If you believe we've collected data from a child, please contact us at privacy@mybestday.ai and we'll delete it immediately.

10. International Data Transfers

My Best Day is hosted on Cloudflare's global network. Your data may be processed in data centers outside your country of residence. We ensure all international transfers comply with GDPR requirements through standard contractual clauses and appropriate safeguards.

11. Changes to This Policy

We may update this privacy policy from time to time. If we make significant changes, we'll notify you via email and display a notice in the app. Your continued use of My Best Day after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this privacy policy or how we handle your data: