Privacy Policy
Myw Your True Identity
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Myw stores your chosen name, optional profile photo, personal quote, ordered values, stories and their optional photos and dates, goals and steps, goal change history, daily reflection answers and mood ratings, and reminder preferences locally on your iPhone. The app creates a random installation secret in the device Keychain on first launch. If you choose Save backup to server, the app encrypts the local journal on your device before sending it. The backend stores the encrypted journal, a SHA-256 installation identifier, a bcrypt hash of the installation secret, and the last update time in PostgreSQL. The secret is transmitted over HTTPS to authorize requests but is not saved in plaintext by the application server. Cloudflare receives public HTTPS requests, including IP address, request headers and technical metadata, and proxies them to the Railway-hosted service when you use backup or visit this website. Cloudflare terminates public TLS, so it processes request contents in transit; journal contents remain encrypted by the app. Railway also processes requests and hosting metadata. The service temporarily holds IP addresses and installation identifiers in memory for rate limiting. It does not provide accounts, advertising, analytics or email delivery.
How we use information
Local information provides your private journal, linked values, goals, daily questions, activity visualizations and mood history. Photos appear only where you add them. Reminder preferences schedule an optional local notification on your device. The encrypted backup enables manual save and restoration on the same installation. Installation credentials authorize access to that installation’s backup and deletion. Technical metadata supports hosting, availability, security and abuse prevention. Growth insights are calculated locally from your saved entries.
Service providers and sharing
Railway hosts the application service and PostgreSQL database and processes stored encrypted backups and technical infrastructure data as our hosting provider. The service uses its private database connection. Native Apple system services provide the photo picker, Keychain and local notifications; selected photos are copied into your journal, and no broad photo-library upload is performed. There are no third-party mobile analytics, advertising or social sign-in SDKs. We do not sell journal information or send it to messaging or marketing providers. Data may be disclosed where legally required. Cloudflare provides the public HTTPS proxy for the API and this website, processing network requests and technical security metadata before forwarding traffic to Railway. Both providers can process the authorization secret in transit as infrastructure providers; the application server stores only its hash.
Data retention
Local entries remain on your device until you edit or delete them or remove the app; operating-system device backups may retain app files according to your Apple settings. The backend retains only the most recently uploaded encrypted backup for an installation until you replace it or choose Delete server backup. No scheduled expiry is implemented. That action deletes the active database row, including its credential hash and timestamp. Infrastructure logs and any hosting or database recovery copies are governed by the relevant Railway and Cloudflare configuration and practices; this product does not assert a fixed retention period or immediate erasure from provider recovery media. Rate-limit windows last one minute; their identifiers may remain in process memory until capacity cleanup or process restart.
Deleting your information
You can delete individual stories, goals and past reflections, edit today’s reflection, or choose Delete all local content in Settings. Deleting local content does not delete a server backup. Use Delete server backup separately to remove the active server copy; this requires the installation secret and repeated confirmation by the app. Restoring a backup replaces local journal content only after confirmation and disables the restored reminder until you enable it again. Removing the app does not send a server deletion request. The device-only Keychain secret is not a cross-device recovery method; losing it means the server copy cannot be accessed or deleted through the app. You may contact crispin97fortes@icloud.com about privacy or deletion, but we cannot recover your encryption secret or decrypt your journal. Please do not send your secret or journal contents by email.
Permissions and your choices
Photo selection is optional and uses Apple’s system Photos picker, which exposes only the images you select. The app does not use your camera, location, contacts or microphone. You can remove selected images from the app, cancel the picker, or change photo access in iOS Settings where applicable. Notifications are requested only when you save an enabled daily reminder. You can disable the reminder in the app or revoke notification permission in iOS Settings; journaling continues to work without it. Core local features work without a network connection. Backup and the public privacy page require internet access.
Your privacy rights
Depending on your location, you may have rights to access, correct, delete, restrict or object to processing of your personal data, and to complain to a data-protection authority. You can inspect and edit local entries within the app and use the local and server deletion controls. Contact the product owner at crispin97fortes@icloud.com for privacy questions and rights requests. This address is a public privacy contact, not an account, sign-in method or in-app support delivery system. We may need sufficient information to verify a request while minimizing additional personal information; we cannot identify or decrypt a journal from a person’s name or email alone.
Security
Local journal files are written atomically with iOS file protection. The installation secret is stored in Keychain using device-only after-first-unlock protection. The app derives a 256-bit encryption key from that secret using HKDF-SHA256 and encrypts backups with authenticated AES-GCM before upload. HTTPS protects requests in transit, with public TLS terminated by Cloudflare and HTTPS forwarding to the Railway origin. The server checks the installation digest and bcrypt credential hash on every backup request, requires confirmation for deletion, and enforces payload and request limits. Credentials and journal content are omitted from application error logs. No security measure is absolute; protect access to your device. The server cannot reset or recover the installation secret, and we do not promise recovery after its loss.
Children’s privacy
Myw is intended for adults interested in personal reflection and self-development, rather than children. It does not intentionally solicit information from children or provide child accounts. If you believe a child’s personal data has been submitted, contact crispin97fortes@icloud.com. Because server journals are encrypted and installation-scoped, deletion or identification may require access through the originating installation.
Changes to this policy
We may update this policy when the application’s processing or legal obligations change. The current version and effective date will be published on this page. Material processing changes will be reflected in the app or its release information as appropriate. Review the policy before choosing optional server backup. This version describes the implemented local journal and manual encrypted backup service.