About Me Privacy Policy

Who is responsible for the data

The operator of About Me can be reached at [email protected]. You can use this address to ask a data question or request access, correction, or deletion.

Data we process

• Account data: email, name, selected language, password hash, and connected sign-in methods, including the Sign in with Apple identifier when used
• Telegram data when using the Mini App or linking an account: identifier, name, username, language, and available profile photo
• User content: journal and dream entries, ratings, emotions, activities, goals, memories, tags, photos, and settings
• Technical data: IP address, user agent, session information, security events, request times, and diagnostic errors
• Public website data: visited pages, navigation, and interactions that Yandex Metrica may collect, including Session Replay
• Browser registration attribution: bounded UTM values and referring hostname without the full URL, plus timestamps for onboarding completion and the first two entries without any entry content

Why we use the data

• Create an account, authenticate the user, and maintain a session
• Store, display, search, export, and restore user content
• Link email and Telegram sign-in methods only after an explicit user action
• Protect the service from abuse, investigate errors, and maintain security
• Understand how the public website is used and improve its content and navigation
• Measure which sources lead to completed setup and journal entries without analyzing journal content

Legal bases

Account data and user content are processed to provide the requested service. Security data and minimal diagnostics are processed to protect users and the legitimate interests of the service. Public-site analytics are used where permitted by applicable law and browser settings.

How data is protected

Passwords are stored only as strong Argon2id hashes. Journal entries, memories, goals, and photos are stored in encrypted form. Each account uses a separate encryption key.

Some service metadata remains available to the system without decrypting content: calendar dates, ratings, statuses, entity relationships, and numeric tracker values. This is required for the calendar, filtered search, and analytics.

Processors and sharing

The service may use infrastructure providers for hosting, databases, object storage, and email delivery. When Telegram is used, relevant data is also processed by Telegram; when Sign in with Apple is used, sign-in data is processed by Apple. Yandex Metrica is used on the public website.

Data is not sold or shared for another company’s independent advertising. Providers receive only the access needed for their technical function.

Cookies and local storage

An HttpOnly cookie is used to refresh an authenticated session. Non-secret interface preferences, such as language and theme, are stored in localStorage, along with bounded UTM values and a referring hostname until registration succeeds. Yandex Metrica may set its own cookies on the public website.

Retention

User content is stored while the account exists unless the user deletes individual data earlier. Sessions and temporary tokens have limited lifetimes. Technical events may be kept longer when necessary for security and incident investigation.

After account deletion, associated user data is removed from the primary database and file storage, and Sign in with Apple authorization is revoked when it was used. Some de-identified technical records and infrastructure backups may remain for a limited period until routine overwrite.

User rights

• View and correct profile data
• Download a ZIP backup of user content
• Delete individual entries, memories, photos, and other data
• Delete the account and associated data in the app settings
• Contact [email protected] about access, correction, restriction, or deletion

Policy changes

This policy may change as the service or legal requirements evolve. The current version and its update date are always published on this page.