Privacy policy

North Start is a private journal. This Privacy Policy explains what personal data we collect, how we store and use it, who can access it, and how you can delete it.

1. Signing in

An account is required to use North Start. Your journal is linked to your account, allowing you to access it across devices.

You can sign in using Apple or Google. Depending on the provider, we receive your unique account identifier, email address, and name. Google may also provide a profile picture URL. Apple allows you to use a private relay email address.

North Start uses your first name to personalise your experience. Authentication providers may also collect your IP address and device information to maintain account security.

2. Data we collect and store

North Start stores your data locally on your device and securely in your account.

Journal data

• Daily ratings, reflections, intentions, and gratitude entries.
• Journal entries and workbook responses.
• Saved cards and active workbooks.

Profile data

• First name, where provided by your sign-in provider.
• City, age range, and gender, if voluntarily provided.

Account data

• Email address and authentication identifiers.
• Session information required for account security.

Journal data is stored as a document associated with your account. Changes are synchronised automatically after you stop typing and retrieved when you sign in on another device.

Journal data is excluded from your device's iCloud backup because it is stored in your account. When you sign out, pending changes are synchronised and the local copy is removed.

Your account data is hosted by Supabase on servers in Ireland, within the European Union.

3. Optional demographic data

Providing your city, age range, and gender is entirely optional. This information is used solely to understand our user base and inform decisions about North Start's outreach and growth.

This data:

• Is never sold or shared with third parties for their own purposes.
• Is not used for advertising.
• Is not analysed alongside your journal entries.

Age is stored as a range rather than a date of birth.

You can remove any of this information from your profile in the app. Removed data is deleted from your account immediately.

The date you were asked to provide this information is retained to prevent repeated requests. It is deleted when you close your account but remains after using Delete everything.

4. Access to your data

Your data is protected by access controls that restrict access to your account. Other North Start users cannot access your information.

Your journal entries are never published, shared with other users, or used to train AI models.

As the operator of North Start, 10 8 City B.V. has technical access to the database. We do not routinely access personal journal entries. Access is limited to:

• Investigating and resolving a technical issue you have reported, to the extent necessary.
• Complying with a legally binding request from a court or law enforcement authority.

5. Data transmission and tracking

North Start transmits your journal data to its database to synchronise it across devices.

The app does not:

• Collect your location or contacts.
• Track your activity, taps, or time spent in the app.
• Use advertising identifiers or track you across apps or websites.
• Display advertisements.
• Sell your data or share it for third parties' independent purposes.

6. Data retention

Your data is retained for as long as your account remains active.

When you close your account, your data is deleted from the active database. Copies may remain in routine backups for up to seven days before being overwritten.

7. Deleting your data

You can manage your data from your profile in the app.

Close your account

Permanently deletes your account and associated data, including your journal and profile information, from the account and your device.

Delete everything

Deletes your ratings, journal entries, workbook responses, and optional demographic data from your device and account.

If another device is still signed in, its local copy may be synchronised back to your account. Sign out of other devices first or delete the data on each device.

Both actions are permanent and cannot be undone.

Deleting the app removes its local data but does not delete your account. To remove all your data, close your account first.

8. Your data protection rights

Under applicable European data protection law, you have the right to:

• Access your personal data.
• Request correction of inaccurate data.
• Request erasure of your data.
• Receive a copy of your data in a portable format.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with a data protection authority.

You can exercise these rights by contacting sam@ten8.city. We will respond within one month, subject to applicable legal requirements.

Legal basis for processing

We process your data on the following legal bases:

Contractual necessity: Account and journal data are processed to provide the North Start service and synchronise your journal across devices.

Explicit consent: Health-related information, including sleep and daily wellbeing ratings and health information you choose to include in journal entries, is processed on the basis of your explicit consent. You can withdraw consent by deleting the relevant data or closing your account.

Consent: Optional demographic information is processed with your consent, which you can withdraw by removing the information from your profile.

If you believe your personal data has been handled unlawfully, you may lodge a complaint with your local data protection authority. In the Netherlands, this is the Autoriteit Persoonsgegevens.

Contact enquiries

If you contact us by email, we process your email address and message content solely to respond to your enquiry and retain it only for as long as necessary.

9. Third-party service providers

North Start relies on the following providers:

• Supabase: Stores account and journal data on servers in Ireland.
• Apple and Google: Provide authentication services.

These providers process data as necessary to deliver their services and are not authorised to use your journal entries for their own purposes.

10. Children

North Start is intended for adults aged 16 and older. Users must meet this minimum age requirement, as set out in our Terms of Service.

11. Website data

Our website is hosted by Vercel, which may collect standard server logs, including IP addresses.

The website uses Google Fonts, which may transmit your IP address to Google when fonts load.

These services are not used by North Start to track your activity. The website does not set cookies.

12. Changes to this policy

We may update this Privacy Policy from time to time. The effective date will be updated accordingly, and material changes will be communicated through the app before they take effect.

13. Data controller and contact

10 8 City B.V.
Amsterdam, the Netherlands

10 8 City B.V. is the data controller responsible for processing personal data described in this Privacy Policy.

For questions, data access requests, corrections, or deletion requests, contact:

Sam Ahhee
sam@ten8.city