Your data is yours.

Last updated: 27 September 2026

SelfVertex is a personal self-development tool. It holds some of the most private things a person records — moods, reflections, faith, honest failings. This policy explains, plainly, what is collected, why, where it lives, and the control you have over it.

Who is responsible

The person responsible for your data (the "data controller") is SelfVertex, contactable at hello@selfvertex.app. If you have any question about your data or want to exercise the rights below, that address is where to write.

What we collect

Three kinds of information, and nothing else:

• Your account details — the email address you sign up with, and an encrypted form of your password. These are handled by our authentication provider, Supabase, and are used solely to let you log in and to keep your data attached to you.
• What you record in the app — your daily pillar scores, notes, emotions, decisions, flashcard progress, speaking and sparring scores, and monthly reflections. You enter all of this yourself.
• A small amount of service data we generate, not you. Specifically: a count of how many AI requests your account has made this week, and — if you use AI sparring — how many seconds of session time you have used this week, with the date of each session. This exists to cap what the AI features can cost and to stop them being abused. It is a set of numbers and timestamps tied to your account. It contains nothing about what you asked, said, or recorded, and it is deleted along with your account.

We do not collect analytics, advertising identifiers, location, contacts, device identifiers, or any tracking of your activity outside the app. There are no third-party trackers or ad networks. Reminders are scheduled by your own device and are never sent from a server, so there is no push token or notification identifier anywhere.

What we do not do

We never sell your data. We never share it with advertisers. We never use the private things you record to build a profile of you for any purpose other than showing you your own history back to you.

AI features, and exactly what they send

Some features send data to OpenAI, who provide the AI models. Under OpenAI's API terms, data sent this way is not used to train their models. They may hold it briefly to monitor for abuse — see "Who processes your data" below, which is also where we are honest about the limits of what we can promise on another company's behalf.

• Explain a flashcard — for the cards that come with the app, this sends nothing at all: every explanation is written in advance and stored, so tapping Explain just reads a stored paragraph. Only a card you wrote yourself is sent to be explained, and only the once — flashcards are study material rather than personal writing.
• Weekly read-back — off unless you switch it on in Account. When on, it sends numbers only from the week just finished: hours slept, pillar scores, prayer and deep-work counts, minutes studied, and — for predictions you have already resolved — the confidence you gave and whether it turned out right.
• AI feedback on speaking takes — on by default, with an off switch in Account → Settings. Your recorded take is turned into text on your own device, and only that text is sent, to suggest a clarity and structure score. The recording itself is never uploaded. This needs on-device speech recognition, so it works in the phone app and is simply unavailable in a web browser — we would rather the feature be missing there than quietly send your voice to a third party to transcribe it.
• AI sparring — a Pro feature, not yet available to buy. This is the one feature that sends your voice, and it is the reason this policy has an exception in it. For the AI to answer you and interrupt you, it has to hear you: while a session is running, your microphone is streamed live to OpenAI, and OpenAI turns your speech into text so the session can be scored at the end. Three things follow, and we would rather spell them out than round them off:
  • Your device connects to OpenAI directly for the call, rather than through our servers. That keeps the conversation out of our hands entirely, but it does mean OpenAI sees your device's IP address for the duration of the session.
  • We never receive or store the audio, and we store no transcript. What OpenAI does with it while processing is governed by their API terms, described below — we can tell you what we do, and point you at what they say, but we cannot promise it on their behalf.
  • The conversation is not saved in the app. If you switch on "Keep sparring scores" in Account, we keep the two scores and one line of feedback so you can see whether you are improving — never what was said.
  You are shown this and asked to agree before your first session, and we record that you agreed. No session can start until you do.

What these features never send: anything else you wrote. Not what you noticed, not the word you chose for an emotion or what triggered it, not the text of a decision, not a monthly write-up. Those stay on your device and in your own account, and are never sent to an AI provider. The weekly read-back is built as a list of permitted numbers and rebuilt the same way on our server before it is sent, specifically so that a future mistake in the app cannot start attaching your writing to it. If you never turn a feature on, nothing extra is sent for it at all.

About audio, in one place. The speaking trainer's recordings are never uploaded — they exist only on your device for playback and are discarded when you finish, and its AI feedback works from text your own device produces, never from the sound. AI sparring is the single exception: it is Pro-only, it asks first, and while a session runs your microphone is streamed to OpenAI. No other feature sends audio anywhere, and nothing in the app records you without your starting it.

Who processes your data

Two companies handle the data you put into SelfVertex, and neither is permitted to use it for their own purposes. Nobody else receives it.

• Supabase — hosts the database and manages sign-in, including sending account emails. Your data is held in their West EU (Ireland) region.
• OpenAI — provides the AI models, and receives only what the features above describe. OpenAI processes this in the United States.

What we can and cannot promise. We can tell you exactly what leaves your device, because we wrote that part. What happens to it inside OpenAI is governed by OpenAI's own API terms: at the time of writing, data sent through their API is not used to train their models, and may be retained for a limited period so they can detect abuse of the service. We are not going to paraphrase that as "nothing is kept", because it is their commitment and not ours to make. If you would rather no AI feature ever ran for your account, leave the read-back off, switch speaking feedback off in Account, and never start a sparring session — nothing will be sent.

Transfers outside the UK and EEA

Using the AI features means data is transferred to the United States, where OpenAI processes it. Transfers like this are made under the safeguards UK and EU data protection law provides for international transfers, through the terms we have with that provider. Your account and everything you record stay in the EU (Ireland) with Supabase; it is only the specific AI requests described above that leave.

Where your data is stored

Your account, everything you record, and the service counters described above are stored by Supabase in the West EU (Ireland) region. Access is protected by database-level security rules so that each account can only ever read or write its own data — the rule is enforced by the database itself, not merely by the app. Deleting your account removes all of it, counters included.

Audio recordings from the speaking trainer are never uploaded or stored — they exist only on your device for immediate playback and are discarded the moment you finish. We hold no recording of you anywhere, from any feature.

Our lawful basis (UK/EU GDPR)

We process your account details, and keep the service counters described above, in order to provide the service you asked for and to keep it running sustainably (the "contract" and "legitimate interests" bases).

Because some of what you record can be sensitive — for example reflections touching on health, mood, or religious practice — we process that content only on the basis of your explicit consent, given when you create an account and enter it.

The AI features are treated separately, because they involve sending data to another company:

• The weekly read-back is off until you switch it on. That is your consent, and switching it off withdraws it.
• AI feedback on speaking takes is on by default, with an off switch in Account → Settings. It sends text made on your device from a take you chose to record.
• AI sparring requires separate, explicit agreement before the first session, because it is the only feature that sends your voice. We record that you agreed, and no session can begin until you have.

You can withdraw consent at any time by switching the relevant feature off, and for everything else by deleting your data or your account, as described below.

How long we keep it

Your data stays until you remove it. If you delete your account, everything attached to it is deleted along with it — your entries, your scores, and the service counters described above. If an account is inactive for a long period we may contact you before removing it; we will never delete your data silently.

We keep no recording of your voice at any point, so there is nothing of that kind to retain or delete. Any period for which OpenAI holds an AI request in order to detect abuse is governed by their terms, not ours.

Your rights

Under UK and EU data protection law you have the right to:

• Access everything we hold about you — the app's Export feature gives you your full history as a file at any time.
• Correct anything inaccurate — you can edit or overwrite your entries directly.
• Delete your data — remove entries in the app, use "Erase all data" to clear this device, or delete your account entirely from Account → Settings → Backup. Account deletion is confirmed by email and then held for a 30-day grace period before anything is removed, so a request made by mistake can still be cancelled; after that window your account and every entry are deleted permanently.
• Port your data — the export is a standard, machine-readable file you can take elsewhere.
• Withdraw consent or object to processing — by erasing your data in the app and requesting account deletion.
• Complain — if you're in the UK, to the Information Commissioner's Office (ico.org.uk); elsewhere, your local data protection authority.

Storage on your device

The app keeps a copy of your data on your own device so it works quickly and offline, along with the flashcard explanations you have read, so they work with no connection at all. If you set a PIN, it is held in your device's secure keychain and never sent anywhere. Reminders are scheduled locally by your device. None of this is tracking — it is your own data, cached on your own hardware, and it clears if you clear the app's storage or delete it.

Security

Passwords are never stored in plain text. Data travels over encrypted connections (HTTPS). Database access is restricted per account by row-level security. No system is perfectly secure, but we hold your data with the care its sensitivity deserves, and we will tell you promptly if we ever become aware of a breach affecting it.

Children

SelfVertex is intended for adults. It is not directed at children under 16, and we don't knowingly create accounts for them.

Changes to this policy

If this policy changes in a way that affects you, we'll update the date above and, for significant changes, let you know in the app or by email.

Contact

Questions, requests, or concerns about your data: hello@selfvertex.app.