Privacy Policy

Last updated: 12 May 2026

This policy describes the Know Yourself companion mobile application (the "App") and how we handle personal information when you use it. By using the App, you agree to this policy.

1. Who we are

The App is published by What Matters Press in connection with the Know Yourself practice programme. For privacy questions, contact us through the channels listed on whatmatterspress.com or the support path provided in the App store listing.

2. Information we collect

We collect and process the following categories of data:

• Account and authentication. When you register or sign in, we use Google Firebase Authentication. Depending on how you sign in, this may include your email address, a username you choose, and (if you use Google sign-in) basic profile identifiers supplied by Google (such as display name).
• Profile and practice data. We store information associated with your account in Firebase Cloud Firestore, such as your practice progress, current key, streaks, protocol check-ins, and related app state needed to run the programme.
• Journal entries. Text you enter in the Journal is stored in Firestore under your user account.
• Optional KY assistant.If you use the KY chat feature, the text you send is transmitted to Google's Gemini API to generate a response. That content is processed under Google's terms and infrastructure; it is not stored on our servers as a permanent KY conversation log by the App in the way described in the in-app notice, but Google processes API traffic according to its own policies.
• Notifications. If you enable practice reminders, the App schedules local notifications on your device. Preference times you set are stored in Firestore so they can sync with your account; delivery is handled on-device where applicable.
• Audio. Guided or stillness practice audio plays on your device. We do not record your microphone for storage or upload as part of normal App operation.

3. How we use your information

We use this information to:

• Provide, secure, and improve the App;
• Authenticate you and maintain your account;
• Synchronise practice and journal data across sessions;
• Operate optional features (KY, reminders) you turn on; and
• Comply with law and protect rights, safety, and integrity.

4. Legal bases (EEA/UK users)

Where the GDPR applies, we rely on performance of a contract (providing the App), legitimate interests (security, product improvement compatible with your rights), and, where required, your consent (for example, for notifications or optional processing where consent is the appropriate ground).

5. Sharing and subprocessors

We do not sell your personal information. We share data only with service providers needed to operate the App, including:

• Google Firebase (Authentication, Firestore, and related Firebase services);
• Google Sign-In when you choose that sign-in method; and
• Google Gemini when you use the optional KY feature.

These providers act as processors or independent controllers per their terms. Their use of information is governed by their respective privacy policies and API terms.

6. Retention

We retain account and app data for as long as your account exists and as needed to provide the service. You may request deletion of your account and associated data where applicable law allows; some residual backup copies may persist for a limited period.

7. Security

We use industry-standard measures appropriate to the service (including encrypted transport and access controls on backend services). No method of transmission or storage is 100% secure.

8. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or restrict processing of your personal data, or to object to certain processing. You can manage some information in the App (for example, profile and journal content). You may also disable notifications in system settings. To exercise other rights, contact us as described in section 1.

9. Children

The App is not directed at children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children.

10. International transfers

Our subprocessors may process data in the United States and other countries. Where required, we use appropriate safeguards for cross-border transfers.

11. Changes

We may update this policy from time to time. We will post the revised version on this page and update the "Last updated" date. Material changes may be communicated through the App or store listing where appropriate.