Nafsi Profile

Privacy Policy

Last updated October 7, 2026

Nafsi Profile is a personal productivity application for tracking growth, weekly notes, health records, financial goals, and connected calendar information. This policy explains how information is handled when you use the service.

Information we collect

When you sign in with Google or Apple, we receive the basic account information needed to identify your profile, such as your name, email address, and provider account identifier. Apple may provide a private relay email address. We store your confirmed name, email address, and date of birth in your private, account-scoped profile. Your date of birth is used for age-based financial timelines. We store the time of your latest signed-in profile visit so the beta thank-you note can appear after more than 48 hours away. We also store the content you choose to add to Nafsi Profile, including goals, milestones, notes, health entries, financial goal projections, and calendar settings. Nafsi Profile does not connect to a bank account. Earlier budget and transaction records may remain privately archived for recovery, but they are not displayed or used by the current Finances page. If you send a note or suggestion to the founder through Settings, we store the message type, message, submission date, and a snapshot of your confirmed name and sign-in email.

If you connect Apple Health in the iPhone or iPad app, Nafsi requests read-only access to step count and body-mass data. The app sends daily step totals and weight summaries to your private Nafsi account so they can appear on your signed-in devices. It also sends a random installation identifier stored in the system Keychain so summaries from multiple devices can be merged safely and a device can retire its own saved snapshot when you stop syncing. The identifier is used only for this synchronization. Nafsi does not write to Apple Health and does not collect other HealthKit categories through this connection.

During Apple's review of the Mac app, Apple's reviewers may use a dedicated Nafsi Profile username and password supplied privately in App Store Connect. That sign-in creates a synthetic review account that is isolated from every other account. Nafsi Profile stores a salted password verifier in protected server configuration, not the review password, and keeps only short-lived rate-limit records for unsuccessful attempts.

How information is used

We use your information to sign you in, keep each user's profile separate, save your content, and provide the features you request. Google and Apple account data is used only for authentication, account identification, and sign-in security. On iPhone and Mac, native sign-in begins in the provider's system authentication interface and sends short-lived credentials to Nafsi Profile over encrypted HTTPS. On iPhone, session credentials are stored in the system Keychain. On Mac, the app uses a secure, HttpOnly website session cookie after authentication succeeds. The dedicated App Review credential is used only to verify access to the synthetic review account and is not linked to a Google or Apple identity. Your confirmed name and sign-in email identify a note or suggestion you choose to send to the founder. Apple Health information is used only to provide your Health timeline and weight summary. It is not used for advertising, marketing, or data mining. We do not sell personal information.

Sharing and retention

Your profile content is not displayed to other Nafsi Profile users. Data may be processed by service providers that operate the application. Cloudflare processes application hosting and database traffic; Google and Apple process authentication, and Apple processes connected calendar data only when you enable that feature. These providers process information only as needed to provide their relevant services under their applicable privacy terms and safeguards. Nafsi Profile requires contracted service providers with access to user data to use it only to provide the service and to protect it consistently with this policy. Information is retained while your account is active or as needed to operate and secure the service. Automatic recovery points are encrypted and limited to the five most recent restore operations. Notes and suggestions sent through Settings are visible only in the founder's private inbox and are not available to other users or included in the submitting user's downloadable backup.

Your choices

You may disconnect linked calendars or stop Apple Health synchronization on any connected device at any time. Stopping synchronization does not delete values already saved to your Nafsi account; account deletion removes them. You may permanently delete your account from Settings after a recent sign-in. Deletion removes the account and its saved profile, goals, notes, health data, financial plan, calendars, feedback, recovery points, linked identities, and active sessions from Nafsi Profile's active database. A keyed, non-readable identity digest may remain for up to 31 days solely to reject older sessions; it cannot be used to recover your content. Backup files you downloaded remain under your control. For access or correction requests, email hodarih@gmail.com.

Changes

This policy may be updated as Nafsi Profile develops. The date above will show when the latest revision took effect.