Seven Doors

Privacy policy

Plain language first: what the app and this website collect, why, and how to export or delete it.

Draft · pending legal review. This is a plain-language draft. It describes how Seven Doors is built to work and will be reviewed before the app launches.

The short version

  • You don’t need to give us your name or email to practise. The app starts with a guest account.
  • Your journal is encrypted on our server and is never used for analytics.
  • Product analytics and crash reports are optional, and analytics is off by default in the EU, UK and EEA.
  • You can export or delete everything from the app: Me → Privacy & data.
  • We don’t show ads and we don’t sell your data. This website sets no cookies and runs no analytics or third-party trackers.

Who we are

Seven Doors is a meditation app and this website. The operator’s legal name and address will be added here before launch. Until then you can reach us at sevendoors.app@gmail.com.

What the app collects

Your account

On first launch the app creates a guest account: a random identifier and a session token stored on your device. No name, email or phone number is needed.

If you choose to sign in with Google, Google shares your account identifier and email address with us. We use them only to sign you in and to keep your practice in step across devices.

Your practice

The sessions you start and finish (which method, how long, which guidance level and when), your reflection answers and notes, your path and profile, saved methods, discomfort reports and your settings. These are synced to our server so your progress survives a new phone and so your path can be worked out the same way everywhere.

Your journal

Journal entries are encrypted with AES-256-GCM before they are stored on our server. They are used only to show them back to you and to include them in your export.

Subscriptions

Purchases are made through Google Play and managed through RevenueCat. We receive your subscription status (which plan, whether it is active, when it renews). We never see your card or payment details.

Product analytics (optional)

If analytics is switched on, the app sends usage events to PostHog, for example that a session started or finished, or that a screen was opened. Events never include journal text, reflection notes or your email address. Analytics is off by default if your device is set to a country in the EU, UK or EEA, and on by default elsewhere. You can change it at any time in Me → Privacy & data, and the app works the same either way.

Reports that a practice felt uncomfortable are kept apart from other analytics, seen only by the people responsible for content safety, used only to review and improve the practices, and kept for 12 months.

Crash reports (optional)

If crash reporting is enabled, the app sends technical error reports to Sentry. Text you type, request bodies and fields such as notes or journal entries are removed before a report is sent.

What we don’t collect

No location, contacts, photos or health data. The app does not record audio. The voices you hear are generated in advance (see Voices are AI-generated).

This website

The website is a set of static pages. It sets no cookies and runs no analytics, advertising or third-party scripts. Our hosting provider, Cloudflare, processes standard request information such as IP addresses in order to deliver the pages and protect them from abuse.

Who processes your data

  • Cloudflare: hosting for the website and the app’s server, and the database that stores your account and practice data.
  • Google: sign-in with Google (optional) and Google Play billing.
  • RevenueCat: subscription status.
  • PostHog: product analytics, only when it is configured and switched on.
  • Sentry: crash reports, only when it is configured.

How long we keep it

Your data is kept while your account exists. When you delete your account, your account and practice data, including your journal, are deleted from our server straight away, and we ask PostHog to delete any analytics linked to you. If you sign in to an existing account and keep that account instead of merging, the set-aside guest data is deleted after 30 days. Anonymous, aggregate statistics that can’t identify you may remain.

Your choices and rights

  • Export: Me → Privacy & data → Export my data gives you a file with your sessions, reflections, preferences and journal.
  • Delete: Me → Privacy & data → Delete account and data. See Delete your account for details, including how to ask without the app.
  • Analytics: switch it on or off in Me → Privacy & data.

Depending on where you live, you may have rights to access, correct, delete or move your data and to object to some uses of it. Write to sevendoors.app@gmail.com and we will help. You can also complain to your local data protection authority.

Children

Seven Doors is meant for adults and is not directed at children.

Changes

If this policy changes, we will update this page and, for significant changes, tell you in the app.