Privacy Policy

The short version

6:8 is local-first. Private journals, prayers, reflections, and Tune check-ins remain encrypted on your device. We do not sell personal data, serve third-party ads, or use data to track you across other companies’ apps or websites.

Data we handle

You can use the core app without an account. If you choose to sign in, we process your email address or Apple sign-in identifier and an internal user ID so we can authenticate you and sync supported data.

Supported cloud data can include your alignment profile, saved wisdom signals, and app preferences. Private journal text, prayers, reflections, and Tune check-ins are excluded from cloud sync.

We process product-interaction information to operate and improve the app. Apple, Stripe, and our subscription providers process purchase status so we can unlock paid features, deliver web purchases, prevent fraud, and restore access.

AI features send what you write or say to the AI services named below, and only after you agree in the app. See “AI features and who receives your words”.

How we use and share data

We use data only to provide app functionality, authenticate accounts, sync supported content, manage subscriptions, maintain security, answer support requests, and understand product reliability and usage.

We share data only with service providers needed for those purposes, including Apple for sign-in and purchases, Stripe for web checkout, Supabase for optional accounts and supported cloud data, Superwall for native paywalls and entitlements, Loops for requested transactional messages and email sequences you opt into, the AI services named below for AI features you agree to, and AppsFlyer for ad attribution if you allow tracking. Shared content is otherwise shared only when you explicitly choose to share it.

Optional product analytics

With your permission, we use PostHog to collect sanitized page paths and product-interaction events. We do not send names, emails, individual quiz answers, or private reflection text. Session replay, autocapture, heatmaps, surveys, experiments, performance capture, and automatic exception capture are disabled.

You can change your choice at any time.

Progress check-ins

On day 7, 30 and 90 of your plan, the 6:8 app asks a few tap-only questions: whether things feel easier than when you started (on a scale of 1 to 5), whether the habit your plan works on happened more, about the same, or less, and how often you kept your day. Your answers stay on your phone so you can see your own progress. You can turn check-ins off in Settings › Privacy.

If you have allowed product analytics, those numbers are counted together with everyone else’s so we can see whether 6:8 helps. We never send your words, your journal, what you told your Guardian, your faith, anything about a crisis, or the name of a private plan. For a private plan we do not send which plan it is.

Research program (optional)

After your first check-in the app may invite you to join our research program, which studies what helps people change. It is off unless you choose Join. It is separate from these terms, and you can say no and use 6:8 exactly the same.

If you join, your phone creates a random research ID that is not your account, your email, or your analytics ID, and is never linked to them. Only your check-in numbers are sent with that ID, along with the app version and the week of the year: no words, no names, no private plan names, no location, no device identifiers. We do not keep IP addresses with research records.

You can leave at any time in Settings › Privacy › Research. Leaving stops new uploads and deletes the research records for your research ID. Research records are deleted automatically after 24 months. Because the ID is not tied to your account, the app is the only way to find and delete them, and deleting the app before leaving means we cannot match those records to you. We may publish findings from the research program, but only as totals across many people, never anything that could identify you.

Research, training and licensing each need their own yes. Research records are used only to study what helps, and are never used to train SI models, never licensed or sold, and never part of 6/8’s SI Data (sixeight.si). Using the app, or joining research, is not consent to any of those.

Sharing your words (optional)

After a check-in you rate easier, the app may ask once whether you’d tell someone what’s changed. It’s optional, the box to agree starts unticked, and “Not now” means we never ask again.

If you agree and tap Share, we keep your words (up to 280 characters), the first name you typed, the sentence you agreed to and when, the app version, and your account ID if you were signed in, so we can find your words if you ask us to remove them. We don’t keep your IP address, device ID or analytics ID with it, and your words never go into analytics. Words that read as a crisis are never stored.

A person at 6:8 reads every one, and nothing is shown anywhere until they approve it. If we use your words, in the app or in our marketing, we show them with your first name only. You can ask us to remove them any time in Settings › Help & feedback; we then stop using them in anything new. Deleting your account deletes them too.

Ad attribution in the iPhone app

If you allow tracking when iOS asks, the 6:8 iPhone app lets AppsFlyer use your device’s advertising ID to learn which ad or link brought you to 6:8, so we spend less on ads. AppsFlyer also receives app events such as onboarding finished, trial started, and subscription purchased. It never receives your journal, reflections, check-ins, or anything you write. Say no and the app works exactly the same; attribution then uses Apple’s privacy-preserving SKAdNetwork. You can change this any time in iOS Settings › Privacy & Security › Tracking.

Retention and your choices

On-device data remains until you delete it in 6:8, reset local data, or remove the app. Signed-in users can delete their account and associated cloud data from Profile → Settings → Account. You can also sign out to stop future sync and use local-only mode.

Purchase records may be retained by Apple, Stripe, and our systems as required for billing, fraud prevention, tax, account access, and legal obligations. You can unsubscribe from lifecycle emails at any time; transactional report, receipt, and account-access messages may still be sent when you request them. Limited operational records may be retained where reasonably necessary for security, support, dispute resolution, or compliance.

Wellness and AI features

Temple tools (Tune, Inner Script, Shadow Work) support personal growth and self-reflection only. They are not medical, mental health, diagnostic, or therapeutic services.

AI features and who receives your words

AI features in the 6:8 app run only after you agree in the app, and you can turn them off in Settings › Privacy › AI replies. Until you agree, or after you turn them off, nothing you write or say is sent to an AI service. Replies are then written on your phone and read by the iOS voice.

When you agree, these services receive what each feature needs:

• OpenRouter, which passes text to DeepSeek, or to Anthropic or OpenAI if DeepSeek can’t answer. It receives your Guardian messages, a practice summary, your Guardian’s short notes, recent journal notes if you allow that, journal entries you ask your Guardian to reflect on, your morning and evening journal answers when Guardian replies to them are on (you can turn them off in Settings), Genie wishes, and the onboarding answer you send, with your name and the answers you gave just before it.
• OpenAI turns replies into speech, and receives your voice live during a Guardian call, together with your name, what you shared in onboarding and practice, and your Guardian’s notes. 6:8 does not record call audio. If you ask for a voice-note summary, its transcript goes to OpenAI too.

Private vault entries never leave your phone. Speech you dictate is transcribed on your device. Calls and voice-note summaries each ask for their own permission first.

If you use AI-assisted features, generated text is for reflection prompts and action suggestions only — not medical, legal, financial, or mental health advice.

Who is responsible for your data

Six Eight Labs, a company registered in Delaware, United States, is the data controller for the information described here — the party that decides why and how it is processed. You can reach us at support@sixeightapp.com.

Why we are allowed to process it

Under UK and EU data protection law we need a lawful basis for each purpose. Ours are:

To perform our agreement with you — running the app, authenticating your account, syncing supported data, and delivering purchases you have made.

Your consent — optional product analytics, the optional research program, words you choose to share, and any marketing emails you opt into. You can withdraw consent at any time without affecting processing already carried out.

Our legitimate interests — keeping the service secure, preventing fraud and abuse, answering support requests, and understanding reliability. We only rely on this where your rights do not override it.

Legal obligations — retaining billing and tax records for as long as the law requires.

Your rights over your data

You can ask us to give you a copy of your data, correct it if it is wrong, delete it, restrict how we use it, or object to processing we carry out on the basis of legitimate interests. You can also ask for a portable copy in a machine-readable format, and withdraw any consent you have given.

Most of this is immediate and self-serve: signed-in users can delete their account and its cloud data from Profile → Settings → Account, and analytics consent can be changed above. For anything else, email us and we will respond within one month.

If you are in the UK or EU and think we have handled your data badly, you can complain to your national data protection authority. In the UK that is the Information Commissioner’s Office. You are welcome to raise it with us first, but you are not required to.

Where your data is processed

We are a small team using established infrastructure providers, and several of them process data in the United States — including Supabase, Vercel, Stripe, Loops, PostHog, OpenRouter, OpenAI, and AppsFlyer. Text sent to AI features may also be processed in other countries, depending on which model provider answers. If you are in the UK or EU, that means your data may be transferred outside your country.

Where that happens, transfers are covered by the safeguards those providers offer, such as Standard Contractual Clauses or an equivalent approved mechanism. You can ask us which applies to a particular provider.

California privacy rights

If you are a California resident, you have the right to know what personal information we collect and why, to request a copy, to have it corrected or deleted, and not to be discriminated against for exercising any of those rights.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. Because we do not, there is no opt-out for us to offer — but the request rights above apply, and you can exercise them by emailing us.

Age

6:8 is not intended for children. You must be at least 16 to use it, or at least 13 with the consent of a parent or guardian where local law allows. If you believe a child has given us personal data, contact us and we will delete it.

Contact

Questions: Support or email support@sixeightapp.com.

Effective August 6, 2026. Last updated October 22, 2026.