Your inner voice stays yours.

Who we are

Selfime is developed and operated by Anphase Ltd, an independent software research and development lab based in Aotearoa New Zealand ("we"). This policy covers the Selfime mobile app and the selfime.com website. In short: Selfime collects no personal data. We cannot read, sell, or share what we never receive.

What Selfime stores

Selfime stores the scripts, recordings, schedules, reflections, optional tape-place labels, and preferences you create inside the app’s private storage on your device. Completed recordings and the local database are protected with app-level encryption.

What Selfime sends

Selfime v1 does not upload your recordings, scripts, reflections, encryption keys, contacts, advertising identifier, or usage history to Selfime-controlled services. It sends no crash reports or diagnostics either. Scheduled reminders are local device notifications.

Crash diagnostics

Selfime v1 contains no crash-reporting software and nowhere to send a report, so the app cannot produce or transmit one to Selfime. If the app crashes, Selfime itself sends nothing. Your operating system may offer its own crash reporting to Apple or Google under the sharing settings you control on your device; that is an operating-system service governed by Apple's or Google's privacy terms, not by Selfime. If a future version adds optional crash reporting, it will be off by default, opt-in, and described here before release.

Optional on-device speech

Automatic transcription is off by default. When you explicitly create a transcript, or enable it for future tapes, Selfime requires your phone to confirm that its own built-in speech recognition is available. Selfime does not send a recording to a transcription service and does not fall back to one over the internet. On unsupported devices the feature remains unavailable; Android may offer the operating system’s separate offline language-pack download.

Reading a practice aloud works the same way. It is off by default and uses a voice already installed on your device; a voice that would synthesise over the internet is filtered out rather than ranked lower. Nothing you write is ever sent to a speech service, and Selfime contacts no speech or AI service while it runs. Pressing a practice to tape records that same device voice, on the device.

The practices Selfime ships with are the one exception, and the exception is ours, not yours. The text of those fifty Selfime-written scripts was sent once to an AI speech service on our own machines, before the app was built and signed, so that each one ships with a prepared reading as ordinary audio files. Your own words have never taken that path, and neither have the practices you edit: editing one turns its prepared reading off and returns it to your device’s voice. You can also choose your device’s voice for everything by picking a voice yourself. The readings are credited in full, with the model and settings used, in the app’s audio credits.

Optional tape places

You can type an area or city for a tape without granting location access. If you choose “Use current area,” Selfime asks for approximate foreground location and uses your phone’s location service once to suggest an area or city that you can edit. The coordinates are immediately discarded and are never written to Selfime storage or logs; only the place label you save is kept with the encrypted tape. Selfime never requests precise or background location. Apple or Google may process the one-time operating-system request under the privacy settings and terms governing your device, but no Selfime-operated service receives location data.

App-store purchases

Selfime contacts Apple’s App Store or Google Play to show, complete, and restore the optional Lifetime purchase. Those stores process the transaction under their own privacy terms. Selfime does not send them a recording, script, reflection, or encryption key and does not operate a purchase or receipt server in v1.

Backups and exports

On iPhone and iPad, your operating system may include Selfime’s encrypted data in an iCloud or computer backup according to the settings you control. An encrypted backup can carry the key alongside it, in which case a restored library opens on the new device; a transfer that leaves the key behind cannot be opened without your 12-word recovery code. On Android, Selfime switches automatic backup off on purpose: a restored copy would arrive without its key and could not be opened at all. These are operating-system services either way, not a Selfime content cloud.

A Selfime Recovery Kit is the dependable way to move a library between devices, and on Android it is the only way. The kit is encrypted inside the app before it leaves, and it goes only to the destination you choose: iCloud Drive, Google Drive, or any other files app on your device. Whoever stores the file cannot read it, and neither can we. Without your 12 words it cannot be opened at all.

A posted tape differs from a kit in a way that matters. It carries one tape to one person and carries its own key, so anyone who has the file can play it. Send one the way you would send a voice note. Selfime never receives it, and a tape reaches you only when you choose its file yourself.

Encryption and its limits

Selfime encrypts completed recordings and structured content in persistent app storage. While a recording is being captured it sits in Selfime’s private area of your device, protected by the phone’s own device encryption, and it is then immediately converted into Selfime’s encrypted format. No software can protect content on an already-unlocked, compromised, rooted, or jailbroken device. For the technically curious: recordings use AES-256-GCM and the local database uses SQLCipher.

Data retention and deletion

Selfime has no accounts and no server-side copy of your content, so there is nothing to ask us to delete: everything the app knows lives on your device, retained only until you remove it. You can delete individual recordings, scripts, and reflections inside the app at any time, or delete all Selfime data at once by uninstalling the app. Copies may remain in system backups, Recovery Kits, or tapes you posted to someone, until you delete those copies. No phone can guarantee that a deleted file is permanently unrecoverable from its storage.

The website and contact form

selfime.com sets no cookies and runs no analytics. If you email us or use a contact form, we receive the message and the details you include, use them only to reply, and retain them like ordinary correspondence. Contact-form messages pass through servers we run on Amazon Web Services, which briefly notes the network address a message came from so it can block spam and abuse.

The optional videos use YouTube’s privacy-enhanced player. Their previews are hosted by Selfime, and YouTube is contacted only when you press Play. After that, Google receives your network address and browser information to deliver the video, under Google’s privacy policy.

Children and sensitive content

Selfime is a general wellbeing tool, not a medical service or emergency resource. It is not directed to children under 13. Do not rely on it where immediate professional or emergency support is required.

Future services

If Selfime later offers optional accounts or encrypted sync, those features will be opt-in and covered by an updated notice before any content leaves the device.

Changes to this policy

If this policy changes, the new version is published on this page with an updated effective date. Any future change that would let content leave your device will be opt-in and announced in the app before it takes effect.

Contact

Privacy questions, complaints, and rights requests can be sent to [email protected]. You may also have rights under your local privacy law, such as the New Zealand Privacy Act 2020 or the GDPR; because Selfime holds no personal data about you, most requests can be satisfied by the deletion steps above, but we will help however we can.