Privacy Policy: One Vision and The 12 Techniques
1. The short version
- The 12 Techniques keeps everything on your phone. We don't collect anything from it.
- One Vision is for two people who share a home. Most of what you type stays on your phone. Some of it, such as your check-in sliders, your Aims and the topics you choose to negotiate, goes to our server so that your partner's phone can show it.
- Some of what you can enter in One Vision is health information (for example blood pressure and blood sugar). Some questions are about your relationship, including one about intimacy. The law gives health information extra protection, and we give your relationship answers the same care. We only use it with your explicit consent, and only to run the app for you and your partner.
- We don't show adverts. We don't use analytics or tracking tools. We don't sell your information, and we don't share it with anyone for marketing.
- You can ask us to show you your information, correct it or delete it at any time. Email [email protected].
2. Who we are
The apps are published by Digital Self Management Limited (DSM). We are a company registered in England and Wales, company number 15108485, and our registered address is 34 Harewood Road, Doncaster, England DN2 6DF.
Under UK data protection law, including the UK GDPR and the Data Protection Act 2018, we are the "controller" of the personal information described here. That means we decide how it is used, and we are responsible for looking after it.
Contact us about privacy: [email protected]
Post: Digital Self Management Limited, 34 Harewood Road, Doncaster, England DN2 6DF
We are a small company and haven't appointed a Data Protection Officer. Privacy questions go straight to the directors.
3. Which apps this policy covers
- One Vision for iPhone and Android, including its home-screen widgets on iPhone and the One Vision web Agenda.
- The 12 Techniques for iPhone, and The 12 Techniques when it is unlocked inside One Vision.
It also covers our website, digitalselfmanagement.com, where this policy is published (see section 11).
4. The 12 Techniques
The 12 Techniques doesn't send any of your information to us or to anyone else. It has no account, no sign-in, no analytics and no adverts.
The ABC Analysis cards you write (the activating event, your beliefs and thoughts, and how you felt and acted) are saved only on your phone, in the app's own storage. We can't see them. If you delete a card, it's gone. If you delete the app, all your cards are deleted with it.
Your phone's own backups, such as iCloud Backup or a backup to your computer, may include the app's storage, depending on your phone settings. Those backups are run by Apple or by you, not by us.
When The 12 Techniques is unlocked inside One Vision, the same rule applies: ABC cards stay on your phone and are not sent to our server.
5. One Vision: what we collect and why
5.1 Information that stays on your phone
Some things you enter in One Vision are kept only on your phone and never sent to us:
- Your date of birth (optional) and your personal life grid, the "weeks of your life" picture behind your Aims. These are never shared with your partner or with us.
- Drafts of questionnaire answers you haven't submitted yet.
- Your notification choices and reminder times. Reminders are scheduled on your phone by your phone's own notification system. We don't run a push notification server.
- iPhone widgets. The widgets show short titles and percentages, such as your check-in score, the titles of your Aims and next steps, your team name and the titles of Negotiate topics. To do this, the app saves a small file on your phone that only the widgets can read. That file never leaves your phone. Remember that widgets can be seen by anyone who can see your home screen or lock screen.
5.2 Information shared with your partner through our server
One Vision is made for two people, "seat 1" and "seat 2", who join a household with a short code. To let the two phones show each other's progress, the app sends some information to our server, and your partner's phone collects it from there.
| What | Examples | Who can see it |
|---|---|---|
| Household details | A household ID made up by the app, your seat (1 or 2), the date the household was created, a one-off join code (valid for 48 hours), and a household or team name if you set one | You and your partner |
| Your display name | The name you type in, such as "Sam" | You and your partner |
| Your sex | Male or female. The app uses this to score the waist measurement, because healthy ranges differ | You and your partner |
| Check-in sliders | Your scores for wellbeing areas: physical health, safety and security, belonging and personal growth. Some of these are health measurements (see section 5.3) | You and your partner |
| Aims and goals | Your Aims, the goals and steps inside them, their status and dates, and your Competence cards. Your partner sees only the Aims you choose to share | You, and your partner for shared Aims |
| Negotiate topics | Topics you share for the Agenda, their status, meeting dates, trial periods and the responses you write | You and your partner |
| Projects | Project names, steps, equipment, costs, the currency you display costs in, who is responsible and whether each of you has agreed | You and your partner |
| Engage cards | The "Us" ledger: names and roles you enter, and the notes you add to each card | You and your partner |
| Questionnaire answers | Your Agree or Disagree answers to the shared-meaning questionnaires, and when you started and submitted them. Your partner can't see your answers until you have both submitted | You, and your partner once you have both submitted |
| Settings shared by the household | For example, whether blood-pressure categories are shown on both cards | You and your partner |
| Security details | A secret key for each phone. We store only a scrambled (hashed) version of it, never the key itself. We also keep a short-lived count of wrong link codes, with a time but no other details, to block guessing | Nobody. This is used only to keep your household secure |
The server records the time each item was last changed and which person changed it.
If you add other people's names to Engage cards or Projects, please keep the details to what you need. Those people haven't agreed to this policy.
5.3 Health information and other sensitive information
Some of the check-in areas are about your health:
- pain and illness management
- your waist result (healthy, raised or high), only if you switch on sharing. Your waist measurement stays on your phone
- blood pressure (systolic and diastolic)
- blood sugar (fasted), in mmol/L or mg/dL
- water intake, activity and movement, and sleep quality
Your height and waist measurements stay on your phone. If you switch on Share my waist result with your partner, One Vision sends only your waist result (a band: healthy, raised or high, not your measurements) to our server, so it can appear in your household pulse. Only your linked partner can see it. You can switch sharing off at any time, and the shared result is deleted when you do or when you delete your account.
Some questionnaire statements are about your relationship. One, for example, asks whether you and your partner have similar views towards the role of intimacy in your lives. We treat answers like this with the same extra care as health information.
Under UK GDPR, information about your health is "special category" data (Article 9), and we treat your more personal relationship answers the same way. We only use them:
- with your explicit consent, which you give in the app before you enter or share it, and
- for one purpose only: to show it to you and your partner in the app.
You don't have to enter any health information to use One Vision. You can leave those sliders empty. You can withdraw your consent at any time by clearing those entries in the app, leaving the household, or emailing us to ask us to delete them. Withdrawing consent doesn't affect anything that happened before you withdrew it.
We never use your health information for advertising, profiling, research or selling, and we never combine it with information from anywhere else. One Vision is a self-reflection tool. It is not a medical device and doesn't give medical advice. If you're worried about your health, please speak to a GP or another qualified professional.
5.4 The One Vision web Agenda
The web Agenda lets members of a household see the shared Agenda in a web browser. It is protected by Cloudflare Access. To sign in, you give your email address and type in a one-time code that Cloudflare emails to you. Only email addresses we have linked to a household can sign in. If you use the web Agenda, we keep your email address with your seat so that we can show which household is yours and who last edited a topic.
5.5 What we don't collect
From either app, we don't collect:
- your location, contacts, photos, camera, microphone or files
- data from Apple Health, Google Health Connect or any wearable
- advertising identifiers or device fingerprints
- information about how you use the app (no analytics, crash-reporting or tracking tools are built into our apps)
- your payment card details
6. Our legal reasons for using your information
| Purpose | Legal basis under UK GDPR |
|---|---|
| Running One Vision's household features: creating and joining a household, syncing between the two phones, the web Agenda | Contract (Article 6(1)(b)). We need it to give you the service you asked for |
| Health information and personal relationship answers | Explicit consent (Article 6(1)(a) and Article 9(2)(a)) |
| Keeping the service secure: hashed device keys, limits on wrong codes, preventing misuse | Legitimate interests (Article 6(1)(f)). We have a genuine need to protect your household and our systems, and this has very little effect on you |
| Answering your emails and requests | Legitimate interests, or legal obligation where the law requires us to answer |
| Keeping records of purchases and complying with tax and company law | Legal obligation (Article 6(1)(c)) |
7. Who else handles your information
We don't sell or rent your information. We use a small number of trusted companies ("processors") who handle information only on our instructions:
- Cloudflare, Inc. hosts our server and database (Cloudflare Pages Functions and D1) and runs the sign-in for the web Agenda (Cloudflare Access). All information sent between the app and Cloudflare is encrypted in transit (HTTPS). Cloudflare may keep short-term technical logs, such as IP addresses, to run and protect its network.
- Apple (the App Store and TestFlight) and Google (Google Play) distribute our apps and handle any purchases. When you buy something, Apple or Google takes your payment under their own privacy policies. We don't see your card details. Apple and Google may give us summary statistics, and crash reports if you have chosen to share them with app developers in your phone settings. If you test a pre-release version through TestFlight, Apple shares with us the name and email address you were invited with, and any feedback or screenshots you send.
Your partner. The information in section 5.2 is shared with the other member of your household, because that is what the app is for.
We may also share information if the law requires it, or to protect someone's safety. We would only share what is necessary.
8. International transfers
Cloudflare runs a worldwide network, so your information may be handled in data centres outside the UK, including in the USA. Your synced data is stored in a Cloudflare database located in Western Europe. Cloudflare may process requests through its global network, protected by the UK International Data Transfer Addendum and Standard Contractual Clauses. Where information leaves the UK, it is protected by safeguards that UK law recognises. These include the UK International Data Transfer Addendum to the EU Standard Contractual Clauses (or the UK International Data Transfer Agreement), which are part of Cloudflare's data processing terms, and the UK–US "data bridge" where it applies. Apple and Google use similar safeguards. You can ask us for more detail.
9. How long we keep your information
- On your phone: until you delete it in the app or delete the app. Deleting the app removes everything it stored on that phone. This doesn't affect your phone's own backups.
- On our server: for as long as your household uses One Vision. More specifically:
- Join codes expire after 48 hours, and phone link codes after 15 minutes.
- Records of wrong link codes are deleted after 15 minutes.
- To help undo mistakes, we keep up to the last 200 versions of a household's Projects list, and a short record of deleted Projects.
- If you ask us to delete your information, we will do so within one month. Our database provider keeps rolling backups for up to 30 days, so deleted information disappears from those backups within that time.
- If a household hasn't been used for 24 months, we will delete it.
10. Leaving a household and deleting your information
- Leave household (in Settings): this disconnects your phone, and our server forgets that phone's key. Leaving does not, by itself, delete the information you have already shared from our server. Your partner may still see it.
- Delete your information from our server: email [email protected] from the app, or tell us your household name and seat, and we will delete your seat's information (your check-ins, Aims, Competences and questionnaire answers, plus your name and email). We'll ask your partner before deleting anything you both share, such as topics and Projects, or we'll delete the whole household if you both ask.
- Delete the app: this removes everything stored on that phone, including the ABC cards in The 12 Techniques. It doesn't delete what is on our server, so email us if you want that removed too.
11. Our website
digitalselfmanagement.com doesn't use advertising or analytics cookies. Our fonts are served from our own site, so your browser doesn't contact Google or any other third party when you visit.
12. Keeping your information safe
We take sensible steps to protect your information. Everything is encrypted in transit. Each household is kept separate on our server. Each phone can only change its own person's information. Device keys are stored only in scrambled form. Your partner's questionnaire answers are held back until you have both answered. Your phone's own lock and encryption also protect what is stored on it, so please use a passcode.
No system is perfect. If something goes wrong that puts you at risk, we will tell you and the Information Commissioner's Office (ICO) when the law requires it, normally within 72 hours.
13. Age limits
One Vision and The 12 Techniques are for adults. They are not meant for anyone under 18, and we don't knowingly collect information from children. If you think a child has used One Vision, contact us and we'll delete their information.
14. Your rights
Under UK data protection law, you have the right to:
- access your information and get a copy
- correct anything that is wrong or incomplete
- delete your information ("the right to be forgotten")
- restrict how we use it
- object to us using it on the basis of legitimate interests
- data portability: get the information you gave us in a common format, such as JSON, so you can take it elsewhere
- withdraw consent at any time, where we rely on consent
We don't make any decisions about you using only automated processes that have legal or similarly significant effects on you. The app's scores and colours are just there to help you reflect.
To use any of these rights, email [email protected]. It's free. We'll reply within one month. We may need to check that the request really comes from you, for example by asking you to send a code shown in your app.
15. Complaints
If you're unhappy with how we have handled your information, please tell us first and we'll try to put it right. We'll acknowledge your complaint within 30 days.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator:
- Website: ico.org.uk/make-a-complaint
- Phone: 0303 123 1113
- Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
16. Changes to this policy
We'll update this policy when our apps or the law change. The date at the top always shows when it last changed. If we make an important change, such as collecting a new kind of information or using it in a new way, we'll tell you in the app (and on our website) before the change takes effect. Where the law requires it, we'll ask for your consent again. Earlier versions are available on request.
17. Contact
Digital Self Management Limited
34 Harewood Road, Doncaster, England DN2 6DF
Company number 15108485
[email protected]