Privacy policy

Last updated: September 23, 2026

Shortyear helps you plan and follow twelve-week goals. To do that, it stores what you plan in your account. This policy explains what we collect, why, where it goes, and how to get it deleted. There are no ads in Shortyear and we never sell your data. The app does count a few anonymous actions, so that we can see where people get stuck, and the list of those actions is written below.

Who we are

Shortyear is published by Sheyenne Hervin EI, an individual entrepreneur registered in France under SIREN 981 390 495, whose registered address is 60 rue François 1er, 75008 Paris, France. We are responsible for your personal data under the EU General Data Protection Regulation (GDPR). You can reach us at support@shortyear.com.

What we collect

Your account

• Your email address.
• If you sign in with Google: the email address, name and profile picture that Google shares with us when you choose your Google account.

Your profile

• The first name you give when you start, which you can change in Profile, and the 3-year vision you write.
• The profile photo you pick from your gallery, if you add one. Profile photos are stored so that anyone with the photo's link can view it.

What you plan and do in the app

• Your cycles, weeks, goals and their details and values, tactics and tasks, and which tasks you completed.
• Your focus sessions: their category, the goal they belong to, when they started and how long they lasted.
• Your weekly review answers, your life balance ratings, the challenges you join, and the categories you create.

Your subscription

• Whether you subscribed, your plan, your trial and renewal dates, and the purchase details Google Play sends us.

When you write to us

• Your email address and the content of your message.

Anonymous usage counts

To see where people get stuck, the app counts nine actions, and only these nine: opening the app, reaching each step of the setup, creating an account and whether it was by email or with Google, starting a cycle, seeing the subscription screen, starting a trial and which plan, a purchase failing and a short technical reason, ticking a task, and finishing a weekly review.

Each count carries the time it happened, the version of the app, the name and version of your phone's operating system, and your phone's language. It also carries a random identifier that the app creates on your phone the first time it runs. That identifier lets us see that several counts came from the same phone. It is not your email address, it is not your account, and it is not linked to them. Reinstalling the app creates a new one.

Nothing you write ever leaves the app for these counts, not your goals, your vision, your reasons, your tactics, your first name or your email address. We know that someone stopped at the fourth step of the setup. We do not know who, and we cannot read what they had typed.

These counts are processed by PostHog on servers in Germany. Your IP address reaches their servers, as it does for any request on the internet, and we have turned on their setting that discards it instead of storing it. On our current plan, PostHog keeps these counts for one year.

Being honest about the limit of this: because these counts are not attached to your account, we cannot pick out the ones that came from your phone and delete them on request. What we can do is stop counting you. A switch to turn these counts off sits in Settings, and turning it off stops them from that moment.

If you join the waitlist on shortyear.com

• Your email address, the date you joined, which form you used, and the reference of the link you followed if it had one, such as the video you came from.
• The phone you told us you use, Android or iPhone, so that we email you when Shortyear opens on it. Answering is optional.

What stays on your phone

• Calendar. If you turn it on, Shortyear adds your planned blocks to a calendar on your phone. It only creates, updates and removes the blocks it added itself. It does not read your other events, and nothing from your calendar is sent to us.
• Reminders. Notifications are scheduled on your phone, and your reminder times and appearance settings are stored there too. We do not use a push notification service.
• Widgets. What your home screen widgets show is prepared on your phone.

What we do not collect

No advertising identifiers, no location, no contacts, and no recordings of your screen. Nothing you write is ever used for the counts above. We do not sell your data, we do not use it for advertising, and we do not follow you across other apps or websites.

Why we use your data

• To provide the app: show your plans, sync them across your devices and keep a backup. This is necessary to perform our contract with you.
• To answer you when you contact us. This is our legitimate interest in helping the people who use Shortyear.
• To email you once when Shortyear opens, if you joined the waitlist. This is based on your consent, which you can withdraw at any time by writing to us.

Who processes it for us

• Supabase hosts our database, sign-in and file storage, on servers located in the United States.
• Google handles sign-in when you choose to sign in with Google, and distributes the app through Google Play.
• Expo delivers app updates to your phone, which involves processing technical information such as your IP address and device type.
• Zoho hosts our support mailbox. The emails you send to support@shortyear.com, and our replies, are stored on its servers in the European Union.
• Resend sends the emails you get from Shortyear, such as the code to reset your password. It processes your email address for that purpose only.
• RevenueCat manages your subscription. It receives your purchase details from Google Play and your account identifier, to tell the app what you have access to.
• PostHog receives the anonymous usage counts described above, on servers in Germany.
• Podia sends the email that tells the waitlist Shortyear is open.

When your data is processed outside the European Economic Area, these providers rely on safeguards recognized by the European Commission, such as Standard Contractual Clauses.

How long we keep it

We keep your data for as long as your account exists. When you delete your account, your data is deleted from our database right away. Copies may remain in our providers' backups for a limited time before they are overwritten.

Waitlist email addresses are deleted once we have announced that Shortyear is open, or sooner if you ask.

Your rights

You can ask to access, correct, export or delete your data, or object to how we use it. Write to support@shortyear.com from the email address of your account. If you think we are not respecting your rights, you can file a complaint with the CNIL, the French data protection authority, at cnil.fr.

Deleting your account

In the app, go to Profile, then Settings, then Account, and tap Delete account. Everything linked to your account is erased: cycles, goals, tasks, focus sessions, badges and your profile photo. You can also ask us to delete it by email.

Children

Shortyear is not intended for children under 13, and we do not knowingly collect their data.

Changes to this policy

If we change this policy, we will update the date at the top of this page, and tell you in the app when the change matters.