Legal

Privacy Policy

This policy covers the Selfworth iOS app. It is separate from the privacy notice for this website.

The shortest honest summary: Selfworth is a private self-worth journal. Your journal stays on your iPhone, and we never see it. There is no account, no server of ours, no analytics, no ads, no tracking, and no third-party code in the app.

What the app stores, and where

Everything you write — daily practices, evidence entries, harsh thoughts and your answers, experiments, reflections, letters, scenes, cases, your blueprint, settings, and the monthly self-esteem questionnaire — is stored in a single file on your device, inside the app's protected storage. The home-screen widget reads the same file on your device.

We (the developer) have no access to any of it. The app makes no network connections except the optional iCloud backup described below and Apple's App Store, which handles purchases.

Optional iCloud backup

If you turn on “Back up to iCloud” in You → Settings, the app uploads a copy of your journal file to your private iCloud database (Apple CloudKit), tied to your personal Apple Account. Only your Apple Account can access it; the developer cannot read, query, or receive it. Apple encrypts this data in transit and on its servers. If you want end-to-end encryption for iCloud data, you can turn on Advanced Data Protection in iOS Settings — it covers this backup too.

Backup is off by default. You can turn it off at any time, and when you do, the app offers to delete the backup copy from iCloud as well.

Face ID

If you enable the Face ID lock, unlocking is handled entirely by iOS. The app only receives “unlocked: yes/no” — biometric data never reaches the app and never leaves your device.

Notifications

Reminders are scheduled locally on your device. Their content (including the day's prompt) is generated on-device and is never sent anywhere.

What we collect about you

Nothing. The app contains no analytics, crash reporting, advertising, or tracking SDKs, and it does not transmit usage data of any kind. Apple may provide the developer with standard, aggregated, opt-in App Store statistics (e.g., download counts); these contain no journal content and no identity.

Purchases

If you buy a subscription or a one-time purchase, the transaction is handled entirely by Apple through the App Store. The app never sees or stores your payment details. Apple provides the developer only with anonymized, aggregated sales reports — no journal content and nothing that identifies you.

Data deletion

Deleting the app deletes your journal from the device. If you used iCloud backup, you can delete the cloud copy beforehand via the backup toggle in You → Settings (choose “Stop and delete it from iCloud”), or by removing Selfworth's iCloud data in iOS Settings → your name → iCloud.

Children

Selfworth is not directed at children and has no features that knowingly collect information from anyone, children included.

Not a medical device

Selfworth is a self-help journal informed by published research. It is not a medical device, does not provide diagnoses or treatment, and is not a substitute for professional care.

Changes

If a future version changes how data is handled, this policy will be updated and the effective date changed before that version ships.

Contact

Questions about this policy: piet@gehrkestudio.com.

Effective July 2026 · Last updated July 2026