Privacy Policy
Last updated October 2026 · Plain language first, legal detail after.
The short version
Ghost entries are end-to-end encrypted on your device. We cannot read them. Nobody can. Your grades and logs belong to you, are never sold, and can be deleted entirely at any time. We collect the minimum needed to run the app.
What we collect
Your display name and email address, so you have an account and can appear on leaderboards. A profile photo if you add one. Optionally an age range, gender and city, used only to filter leaderboards; all three can be left blank. Which items you track, when you complete them, your daily grades, and the days you opened the app. Which connected apps you tap through to, and when. A notification token, so reminders reach your phone. If you choose to use them: before-and-after photos, weigh-ins and a short monthly money check-in. If you earn a reward, the period it covers, the amount and whether it has been sent. Crash reports, so failures can be fixed, and anonymous usage events that you can switch off in the app.
What we never collect
Anything from inside another app. Tapping through to a connected app records that you opened it and nothing more: we do not read your health data, your workouts, your reading or your location. Your contacts. Advertising identifiers. The readable content of Ghost entries. We do not sell data and we do not share it with advertisers.
How Ghost encryption works
Ghost entries are encrypted on your device with a key kept in your phone's secure storage. That key is never sent to us. Our servers hold only ciphertext, which our staff and tools cannot open. If you set a recovery phrase, a copy of the key locked with that phrase is stored so a new phone can restore your entries; we hold nothing that can open it. Lose your phone and your recovery phrase, and Ghost entries cannot be recovered. That is the design, not a limitation.
What other people see
Other signed-in members can see your name, photo, level, streak and public score on leaderboards, and in the groups and friend lists you join. The public score comes from your set categories, custom goals and connected apps. Ghost items count toward your own grade only and are left out of every leaderboard, group and friend view. An accountability partner you invite sees the items in the areas you chose to share and whether each was done that day, never the amounts or notes, and never Ghost. In a team challenge, members of that organization see each other's days or totals for the challenge's item. Weigh-ins, money check-ins and before-and-after photos are visible only to you.
Deleting your data
In the app, open Profile, then Account & data, then Delete my account. Your account and its data are removed immediately and age out of our backups within 30 days. If you cannot open the app, email us from the address on your account and we will delete it for you. For a copy of your data, write to the same address.
Age
You must be 13 or older to use Simplify1.
Contact
Simplify1@its1app.com — a founder reads it.