Legal
Privacy policy
This policy explains what SEVEN77 (“we”, “us”) collects when you use the SEVEN77 iOS app and seven77app.com, why we collect it, and who we share it with. The short version: we collect what the challenge needs to work, we use two service providers for analytics and logging, and we do not sell your data.
1. What we collect
Account data
When you sign in, we receive it from the provider you choose:
- Sign in with Apple — your Apple account identifier, and your name and email if you choose to share them (Apple lets you hide your email behind a relay address).
- Google — your Google account identifier, name, and email address.
- X — your X account identifier, handle, and display name.
- Email — the email address you enter. We send the sign-in link through our email delivery provider (Resend).
We never see or store passwords for any of these methods, and we do not receive your contacts, posts, or social graph from any provider.
Challenge data
- Daily tenet completions, notes, streak state, and attempt history.
- Check-in photos and the composited check-in cards, stored in our cloud storage and passed through automated moderation before appearing in the global feed.
- The targets you set during onboarding (steps, water, and similar).
- Reports you file and users you block.
Targets and completions can describe health-adjacent habits. We use them only to run your challenge — never for advertising, and never sold or shared beyond the processing described here.
Analytics (PostHog)
We use PostHog to understand how the app and website are used: screens viewed, features used, device type, OS version, and similar product events, tied to a pseudonymous identifier. This is product analytics, not advertising — there is no ad tracking, no cross-app tracking, and no sale of this data.
Logs and error reports (Axiom)
Application logs and error reports are sent to Axiom so we can find and fix failures. These can include timestamps, device and OS details, IP address as part of standard request metadata, the page or screen where an error occurred, and error messages. Log data is used only for reliability, debugging, and abuse prevention.
2. Why we process it
- To run the Service — accounts, streaks, photos, the feed, and notifications (contract).
- To keep the feed safe — automated photo moderation, reports, and blocking (legitimate interest).
- To improve the product — PostHog analytics (legitimate interest / consent where required).
- To keep it running — Axiom logs and error reports (legitimate interest).
3. Who we share it with
We share data only with the processors that run the Service:
| Provider | Purpose |
|---|---|
| Cloudflare | Hosting, database, and photo storage |
| PostHog | Product analytics |
| Axiom | Logs and error reporting |
| Resend | Email sign-in links and transactional email |
| Apple, Google, X | Sign-in, under their own privacy policies |
Content you post to the global feed is visible to other users. Check-in cards you share to X or other platforms are governed by those platforms’ policies. Beyond that, we disclose data only if required by law or to protect the Service and its users. We do not sell personal data and we do not share it for cross-context behavioural advertising.
4. Retention
Account and challenge data is kept while your account exists. Deleting your account removes your account data, photos, and feed posts, with residual copies leaving backups within 30 days. Analytics and log data is retained on rolling windows (logs typically 30–90 days) and then deleted or aggregated.
5. Your rights
Depending on where you live (GDPR, UK GDPR, CCPA, and similar), you may have the right to access, correct, export, delete, or restrict processing of your data, and to object to processing based on legitimate interest. You can delete your account and its data directly in the app, or email support@seven77app.com for any request. We respond within the timelines your law requires, and we honour Global Privacy Control signals on the website.
6. Children
The Service is not directed at children under 16, and we do not knowingly collect their data. If you believe a child is using SEVEN77, contact us and we will delete the account.
7. International transfers
Our providers process data in the United States and other countries. Where data leaves the EEA or UK, transfers rely on standard contractual clauses or equivalent safeguards maintained by each provider.
8. Changes and contact
We will announce material changes to this policy in the app or by email before they take effect. Questions and requests: support@seven77app.com.