← Yours In Progress

Privacy

What Yours In Progress keeps on your iPhone, what it sends and to whom, how long anything is kept, and how to take it all with you or delete it.

Yours In Progress (“the app”) is made and run by Alex Vestea (“I”, “me”), in Romania. For anything in this policy, write to support@alexvestea.com.

Effective and last updated 28 September 2026.

1. The short version

Your daily actions, reflections and moods stay on your iPhone. I do not sync or back them up to my servers.
AI personalization is off until you say yes. If you allow it and have Yours In Progress Plus, a short summary of your week is kept up to date on my server, and once a week my AI provider, Anthropic, uses it to write your letter. The summary is deleted from my server once the letter is written, and after 14 days at most. If you allow AI personalization during setup, your name and goals are also sent to Anthropic once, to write your free introductory letter.
You can keep any reflection private from your letter, turn AI personalization off at any time, export all your data, and delete your account and data, all from inside the app.
I do not sell your data, show ads, or use your writing for advertising. I do not track you across other companies' apps or websites.
Usage statistics are anonymous and contain no text you write. Crash reports are set up to leave out your writing and your account ID. You can turn either off.

2. What the app handles, and why

2.1 Data that stays on your iPhone

The following is stored only on your device, in the app's protected storage. I never receive it except as described in section 2.3.

Your daily actions and whether you completed them.
Your evening reflections (“what went well”, “what would you change”) and your mood ratings.
Your quotes, favorites and history.
Your settings: reminder times, letter day, notification and privacy choices.
Copies of the letters, quotes and action suggestions written for you.

Because this data is kept on your device, I cannot restore it if you lose or reset your iPhone. It is included in your own iCloud or computer backups of the iPhone, if you make them, under Apple's terms for those backups.

2.2 Account data held on my server

When you first use the app, it creates an anonymous account on my server. You do not give me an email address, phone number or password. The account is identified by a random user ID. My server stores:

Data	Why
Random user ID	Identifies your account. Also your ID with my purchases provider, RevenueCat.
Time zone, letter day, reminder times, weekly-letter notification setting	To schedule your weekly letter and restore your settings.
Your AI personalization choice, which version of the consent screen you saw, and when	To know whether AI content may be written for you.
Your goals and display name, only while AI personalization is on or you have linked Sign in with Apple	To write your letters and restore your setup on a new iPhone. If you turn AI personalization off and have not linked Sign in with Apple, they are removed from my server the next time the app syncs your settings, which is right away if you are online.
When the app was last active	To remove abandoned anonymous accounts (section 5).
Letters, daily quotes and action suggestions written for you, and when each letter first reached your device	To deliver them to your device and restore them. They are only ever shown to you.
Generation records: dates, status, technical details and cost, with no letter or summary content	To run and monitor the letter service.
Subscription status: whether Plus is active, product, expiry, renewal state, trial or intro period	To know whether you can use Plus features.
Push notification token for your device	To tell you when your weekly letter is ready.
Whether you have already had your free introductory letter	To limit it to one per account.
If you link Sign in with Apple: your Apple account identifier and an encrypted Apple refresh token	So you can sign back in on another iPhone, and so the app's Sign in with Apple access can be revoked when you delete your account. The app asks Apple for neither your name nor your email.
Short-lived request counters	To protect the service from abuse (rate limiting).
Sign-in records kept by my hosting provider's authentication service: when your account was created and last signed in, and active sessions, which record the IP address and device and app details used	To keep you signed in and your account secure.

2.3 AI personalization

AI personalization is optional and off until you turn it on. The app asks on a screen of its own, which names Anthropic, summarises what is sent and links to this policy, before anything is sent. You can turn it off at any time in Settings → Privacy → AI personalization.

Who processes it: Anthropic, PBC (“Anthropic”) processes the data below on my behalf, to write your letters, quotes and action suggestions.

What is sent for the introductory letter (once, if you allow AI personalization during setup):

The name you asked your future self to call you, if you gave one.
Your chosen growth areas and goals.

What is sent for the weekly letter (with Yours In Progress Plus): a short summary of the week, which the app updates on my server as you use it during the week and which is sent to Anthropic once a week, containing:

The start and end dates of that week.
Your display name, if any, and your goals (one to three).
How many days you were active, and how many actions you planned and completed, overall and per growth area.
Up to five short texts of actions you completed that week.
How many reflections you wrote.
How many mood ratings you gave and the overall trend, such as “rising” or “steady”. Individual mood ratings are not sent.
Up to three reflection highlights (“what went well” and “what would you change”, each cut to at most 280 characters), taken only from reflections you have not kept private.

What is not sent: your full reflections, reflections you kept private (they only add to the number of reflections), individual mood ratings, the dates of individual entries, your user ID, or your device identifiers.

How it flows: the app sends the summary to my server, hosted by Supabase. When your letter is due, the server sends the summary to Anthropic, stores the letter, quotes and suggestions that come back, and deletes the summary. For the introductory letter, your name and goals are passed straight through to Anthropic and the request itself is not stored. The letter is kept, and your goals and name stay in your profile as described in section 2.2.

Anthropic's use: under Anthropic's commercial terms, data sent through its API is not used to train its models. Anthropic keeps API inputs and outputs for a limited period under its own privacy policy and commercial terms, and then deletes them, except where its policy says otherwise, for example for trust and safety review.

AI-written content: letters are written in the voice of an imagined “future self”. That is a creative framing, not a prediction, and not medical, mental-health, financial or legal advice. See the terms of use.

Turning AI personalization off takes effect at once on your iPhone: the app stops sending summaries. Summaries already on my server are deleted, and no new weekly letters are written, as soon as the change reaches my server, which is right away if you are online and otherwise the next time the app syncs. At the same time, unless you have linked Sign in with Apple, your goals and name are removed from my server. Letters you already have stay available.

2.4 Sign in with Apple (optional backup)

If you choose Settings → Account → Sign in with Apple, your anonymous account is linked to your Apple ID so your letters, goals and name can be restored on a new iPhone. The app asks Apple for no name and no email. Linking keeps your goals and display name on my server even if AI personalization is off, and the link screen tells you so before you continue. Your daily actions, reflections and moods are still not backed up.

2.5 Purchases

Subscriptions are sold and billed by Apple through the App Store. RevenueCat manages subscription status, and receives your random user ID and your App Store purchase and subscription information. I never receive your payment card details.

2.6 Notifications

Morning and evening reminders are scheduled on your device. For the “letter ready” notification, your device's push token is sent to my server, which asks the Apple Push Notification service to deliver it. Notifications never contain your writing or your letter.

2.7 Keeping the introductory letter to one per device

The app sends a one-time Apple DeviceCheck token, which my server uses to read and set a flag Apple keeps for your device. The token is not stored. Apple keeps the flag even if you delete the app or your account, so a device that has already had an introductory letter will not get another.

2.8 Anonymous usage statistics

If “Share anonymous usage statistics” is on (it is by default, and you can turn it off in Settings → Privacy), the app sends usage events to TelemetryDeck, such as “onboarding completed”, “reflection saved” or “letter opened”, with details that are not content: counts, a length range, whether you have Plus. Events never contain text you write, and they carry a hashed identifier made by TelemetryDeck that is not linked to your account. With the setting off, no events are sent.

2.9 Crash reports

If “Send crash reports” is on (it is by default, and you can turn it off in Settings → Privacy), the app sends crash reports and limited performance and error diagnostics to Sentry. They are set up to leave out your writing and your account ID: no user ID is attached, screenshots and screen layouts are not captured, labels of what you tapped are not recorded, request headers, cookies and query strings are removed, request bodies are not captured, and long text values are redacted. Turning it off stops reports at once, and nothing more is sent to Sentry. Turning it back on applies the next time the app opens.

2.10 Server logs

My own server functions write technical logs, such as the function name, result code and how long it took. These logs never contain request or response content, and your user ID appears in them only as a short one-way hash.

Separately, my hosting provider, Supabase, keeps platform logs of requests to my server. These record details such as the IP address, the time and the request path, and a request path can include your user ID.

3. Service providers

I do not sell or rent personal data, share it for cross-context behavioural advertising, or use it to track you. These are the companies that process data for the app:

Provider	What they do	Data involved
Supabase, Inc.	Hosting, database, sign-in, server functions. The project is in Frankfurt, Germany (AWS eu-central-1).	Everything in section 2.2, and weekly summaries.
Anthropic, PBC	Writing letters, quotes and action suggestions	Weekly summaries and introductory-letter requests (section 2.3), only with your consent.
RevenueCat, Inc.	Subscription management	Random user ID, App Store purchase information.
Apple Inc.	App Store purchases, Push Notification service, DeviceCheck, Sign in with Apple	Purchase data, push tokens, DeviceCheck tokens, Apple account identifier.
TelemetryDeck GmbH	Anonymous usage statistics	Usage events without content (section 2.8).
Functional Software, Inc. (Sentry)	Crash reporting	Redacted crash and diagnostic reports (section 2.9).

4. Where your data is processed

My server and its database are in the European Union, in Frankfurt. Some of the providers above, including Anthropic, RevenueCat and Sentry, are based in the United States and may process data there. Where data leaves the European Economic Area, it is covered by the transfer safeguards each provider offers in its own terms, such as the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

5. How long data is kept

Data	How long
Data on your iPhone	Until you delete it, delete your account in the app, or delete the app.
Weekly summary on my server	Deleted as soon as that week's letter is written, and after 14 days at most. Deleted when your choice to turn AI personalization off reaches my server.
Introductory-letter request (name and goals)	The request is not stored. The letter is kept, and your goals and name stay in your profile as described in section 2.2.
Letters, quotes and action suggestions	Until you delete your account.
Profile and settings, including goals and name where they apply	Until you delete your account. Goals and name go sooner, at the next settings sync, if you turn AI personalization off and have not linked Sign in with Apple.
Generation records (no content)	13 months, or until you delete your account if that is sooner.
Subscription status	Until you delete your account.
Subscription event records from RevenueCat (event ID, event type, user ID)	Deleted with your account, and otherwise after 90 days.
Push tokens	Until Apple reports the token as no longer valid, or until you delete your account.
Encrypted Apple refresh token	Until you delete your account. On deletion the app's access is revoked with Apple where possible, and the token is deleted.
Rate-limit counters	Deleted with your account, and otherwise after 2 days.
Inactive anonymous accounts	An account that is not linked to Sign in with Apple, has no active Plus subscription and has not been used for 180 days is deleted with its server data. Data on your device is not affected. Records held by RevenueCat, and short-lived technical records such as rate-limit counters, subscription event records and server logs, expire under their own retention periods in this table.
Anonymous usage statistics	Under TelemetryDeck's retention policy.
Crash reports	Under Sentry's retention policy.
Server logs	My function logs and Supabase's platform logs are kept under Supabase's retention policy.
Sign-in records (sessions, IP address, device details)	Deleted with your account. Any authentication audit log Supabase keeps falls under its own retention policy.
Data held by Anthropic	See section 2.3.
Data held by RevenueCat	When you delete your account, RevenueCat is asked to delete your subscriber record. If your Apple subscription keeps renewing, RevenueCat may create a new record for the renewal. Apple keeps its own purchase records under its policies.

6. Your choices and rights

In the app, at any time:

Keep a reflection private from your letter, on any reflection, including past ones. If it was already part of a summary waiting to be used, the summary is replaced without it.
Turn AI personalization on or off in Settings → Privacy.
Turn anonymous usage statistics off in Settings → Privacy.
Turn crash reports off in Settings → Privacy.
Turn notifications off in Settings → Notifications, or in iOS Settings.
Export your data from Settings → Privacy → Export my data. You get a JSON file with everything stored on your device, including history the Free plan hides, and, when you are online, what my server holds about you: your profile, letters, quotes and suggestions, subscription status, generation dates and status, any weekly summary still waiting to be used, and the number of push tokens registered.
Delete your account and data from Settings → Privacy → Delete account and data. This deletes everything on your iPhone and on my server (section 5 lists the records that expire on their own schedule), revokes the app's Sign in with Apple access where possible, and asks RevenueCat to delete your subscriber record. If the Apple or RevenueCat step fails, your account is still deleted. You need to be online: if my server cannot be reached, nothing is deleted, so nothing is left half-removed. Deleting your account does not cancel a subscription. Cancel it in Settings › Apple ID › Subscriptions.
Correct your data by editing your goals, name, settings, actions and reflections in the app.

Under the GDPR you also have the right to access, correct, delete or port your data, to object to or restrict its processing, and to withdraw consent at any time without affecting what was done before. To use any of them, or to ask a question, email support@alexvestea.com. You also have the right to complain to a data protection authority. In Romania that is the ANSPDCP, and you can also go to the authority where you live.

Legal bases. Providing the app, your account, letters, notifications and subscriptions: performance of the contract with you. AI personalization, including sending summaries to Anthropic: your consent. Anonymous usage statistics and crash reports: my legitimate interest in keeping the app reliable and improving it. You can object to either by turning it off in Settings → Privacy. Keeping the introductory letter to one per device, and rate limiting: my legitimate interest in preventing abuse.

7. Security

Data on your iPhone is stored with iOS file protection, and the app does not write your text to device logs.
All network traffic uses HTTPS.
On my server, each account can only reach its own data (row-level security), internal systems use separate secrets, and Apple refresh tokens are encrypted (AES-GCM).
Text you write is treated strictly as data when it is sent to the AI, what the AI writes is checked before it is saved, and it is only ever shown to you.

No system is perfectly secure. If there is a breach, I will tell you and the authorities where the law requires it.

8. Children

Yours In Progress is not meant for anyone under 16, and I do not knowingly collect personal data from anyone under 16. If you believe someone under 16 has used the app, write to me and the data will be deleted.

9. Changes to this policy

This policy changes when what the app does changes, and the date at the top changes with it. If a change affects what is sent for AI personalization, the app asks for your consent again before sending anything under the new terms.

10. Contact

Alex Vestea, Romania
support@alexvestea.com