Privacy policy
Effective 7 October 2026. The app works without an account; most of what follows applies only if you sign in or switch a feature on, and each section says so.
Who is responsible
DoMyBest is operated by [the LLC, pending registration], [registered address, pending]. That company is the controller of the data described here. Contact: hello@mail.domybestapp.com.
What stays on your phone
Your terms, days, items, answers, proof photos, settings, the apps you pick to block, and every figure read from Apple Health or Health Connect are stored on your phone. Without an account, none of it is sent to us. The Health and usage figures never leave the phone, with or without an account.
What leaves your phone, and when
| Data | When | Why |
|---|---|---|
| Usage events: which screens and steps were reached, a day number, a count. A random install id, not your name, email or account id. Never an item name, answer, photo, Health value or app name. No location, no screen recording. | From the first screen, unless you turn Analytics off (Settings; the first screen says so). | To see where people stop, so the app can be fixed. |
| Your sign-in identity: email address (or Apple’s private relay address), the provider’s user id, and your name if the provider gives it. | When you sign in with Apple, Google or an email code. Optional. | The account. |
| A text backup of your record: terms, days, items, answers, snapshots, rest credits and excuses. For an item proven by Health it keeps that it was proven by Health and when, never the figure. | When you are signed in, after changes, at most about every ten minutes. | To restore the record on a new phone. |
| Proof photos you took in the app, resized. | Only when you switch on Back up photos, and only while signed in. Off by default. | To restore them. |
| A share-link card: counts and dates from your record, your first name and a signed line if you add them, up to 140 characters each. No item names, photos or Health values. | When you make a link; with no account this creates an anonymous session so the link can work. The card is public to anyone holding the link. People who open a link are counted; no visitor identity is stored. Someone who signs a link leaves the name they type. | To show the link page. |
| Subscription state: whether you have an active plan. | When subscriptions are live in the app. Not yet. | To unlock the term you bought. |
| The one-page export. | Only when you send it, through the share sheet. | Your choice. |
We do not collect your contacts, location, advertising id or the contents of other apps. If you block apps on Android, the app reads which app is in front, on the phone, to show the shield. That reading is not sent anywhere.
Health data
DoMyBest reads steps, sleep and workouts from Apple Health or Health Connect, only to mark an item proven by your body and only after you allow it. If you finish a workout in the app it can save that workout back to Apple Health or Health Connect. The values are kept on your phone and are not sent to us, to analytics or to anyone else. Health data is not used for advertising or marketing, is not sold, and is not used to build a profile, and no one gets it for data mining. If you sign in, the backup records that an item was proven by Health and when, so the record restores as it was; the figure is not in it. DoMyBest’s use of information received from Health Connect adheres to the Google Play User Data policy, including the Limited Use requirements.
DoMyBest is not a medical service and does not diagnose or treat anything.
Who processes it
- Supabase, region London: the account, the text backup, backed-up photos and share cards, when you use those.
- PostHog, EU cloud: the usage events, unless you turn them off.
- Resend: sends the sign-in code to your email address.
- Apple and Google: sign-in if you choose it, and the App Store and Google Play for downloads and purchases. They run those under their own policies.
- RevenueCat: subscription state, once subscriptions are live.
- GitHub: holds the nightly database backup described below.
We do not sell personal data and we run no advertising. Nothing here is used to track you across other companies’ apps or sites.
How long it is kept
- On your phone: until you delete the app or erase it from Settings.
- Account and backup: until you delete the account. When you do, the data is hidden at once and removed for good 30 days later.
- Nightly database backups, once switched on, are kept 30 days and then roll off.
- Share links stop working 30 days after they are made, or when you remove one.
- Usage events are anonymous and are kept by PostHog for as long as we keep the project; we cannot tie them to you to delete them.
- Sign-in codes expire within an hour.
Your rights
You can see your record on the phone at any time and export it as a one-page file from the app. If you are signed in, you can delete the account from Settings, under Account, or without the app from the deletion page. Deleting the account does not cancel a subscription; cancel that in the App Store or Google Play. You can switch Analytics off, switch photo backup off, sign out, and remove a share link, in the app. In the UK and EU you also have the rights to access, correct, restrict and object, and to complain to your data protection authority. Write to hello@mail.domybestapp.com and we reply within a month.
Our servers are in the UK. If you are elsewhere, your data is sent there when you sign in. Our processors may handle it in other countries under standard contractual clauses.
Children
DoMyBest is not for anyone under 16. We do not knowingly collect data from them. If you think a child has made an account, write to us and we will delete it.
Changes
If this policy changes in a way that matters, the app will say so before the change applies.
- 7 October 2026: first version.