Privacy Policy

1Who we are

MYNIFEST® is a free goal and task tracker, operated by Jesus Agudo. In this policy, “MYNIFEST”, “we” and “us” mean Jesus Agudo, the operator of the MYNIFEST app and this website.

This policy explains what we keep, why, who can see it, how long we keep it, and the choices you have. You can reach us any time through our contact form.

2What we keep

When you use MYNIFEST, we keep:

• Account details: your name, your email address and your time zone.
• Your password, stored only as a one way scrambled code. We cannot read it, and our administrators never see it.
• What you create: your goals, tasks, notes, checklists, tags and the history of updates you make to them.
• Reminders and alerts that the app creates for you.
• A short record of emails we sent you, so we can see that an email went out.
• Help requests you send us: the subject, your messages, our replies and the request number.
• Times: when you signed up, when you last signed in, and when you accepted the terms and confirmed your age.

We do not ask for anything beyond this.

3Cookies and storage on your device

The app uses one sign in cookie. It keeps you signed in so you do not have to type your details on every page. Your device also saves your display choices, such as dark mode, so the app looks the way you left it. It also saves whether you are signed in, just a yes or no, so the app does not look signed out when your device is offline.

For each sign in, we keep the name of the browser you used, so you can tell your sign ins apart. We keep it until that sign in ends, which is 60 days after it was last used, or when you sign out.

The pages of this website, like this one, use no cookies at all. We do not use advertising or tracking cookies or tools anywhere. To see which pages are read, LISB, the studio that built MYNIFEST®, counts page views for us: the page address and the date only. The counter sets no cookies and saves no IP address or visitor ID, and browsers that send Do Not Track or Global Privacy Control are not counted.

4How we use your information

We use your information only to run MYNIFEST:

• to create and run your account and show you your goals and tasks;
• to send the emails listed below;
• to answer your help requests;
• to keep the service safe and working, and to stop misuse.

Messages you send through our contact form are emailed to MYNIFEST support and used only to reply to you.

We never sell your information. There are no ads and no ad trackers.

5Emails we send

Our emails come from a MYNIFEST no-reply address. The app sends:

• A confirmation link when you sign up. It works for 3 days.
• A password reset link if you ask for one, or if an administrator sends you one. It works for 1 hour, or 24 hours for a new administrator account set up on the server.
• Task reminders, if you want them, at the times you choose, from 1 hour to 1 week before a task starts or is due.
• An email when we answer your help request. It is short, with the request number and a link.
• A notice if someone tries to sign up with your email address, or tries to change their account to your address. It is short, and nothing about your account changes.
• A link to confirm a new email address when you change your own email. It is sent to the new address and works for 3 days. When you make the change yourself, your email only changes once you open it.
• A short notice to your current address when someone signed in to your account asks to change its email, as long as your current address is confirmed. It has no link in it. If you did not ask for this, please change your password and contact us through our contact form.
• If an administrator changes your email address. The change happens right away: your account moves to the new address, and we send a link there that you open before you can use the account again. If your old address was confirmed, we also send it a short notice, without a link.

Every sign up works the same way. Nobody chooses a password on the sign up form. Instead, we email you a link that works for 3 days. The link opens a page where you choose your password, check your name and time zone, and agree to the terms again. Only after you save that page is your address confirmed and your account ready. Until then we keep the name and time zone from the newest sign up with its link, and they are removed when the link is used or runs out. If you sign up again with the same address before then, we send a new link that replaces the earlier ones. If a sign up is never finished, we delete it, with its name, email address and time zone, once its link runs out.

You can turn off reminders and help request answer emails in Settings. Help requests and your replies are also emailed to MYNIFEST support so we can help you.

6Who can see your information

A small number of administrators can see account details, goals, tasks and help requests, so they can look after accounts and help you. They can never see your password, and they cannot sign in as you.

Every action an administrator takes is recorded in an audit log. Administrators may also add internal notes to an account or help request, which you do not see.

We do not sell your data and we do not hand it to advertisers. If the law requires us to give information to the authorities, we may have to do so.

Links to other websites open those websites; their own privacy rules apply.

7Where your information is kept

MYNIFEST runs on the operator’s own web hosting account, and your information is stored there. We do not give your information to anyone else to store or use for their own purposes.

8How long we keep it

We keep your information while your account is open. A daily clean up clears some records sooner. Here is how long each one lasts:

• The record of emails we sent you, with who it went to, the subject, the time and whether it was sent or failed, is kept while your account exists and removed with it.
• Security records of sign in, sign up, password reset and confirmation attempts, some with an IP address, are deleted after 1 day.
• Alerts you have read are deleted after 90 days, and all alerts after 1 year.
• Reminder records are deleted after about 400 days.
• Unused links stop working after a set time: confirmation links after 3 days, password reset links after 1 hour, and email change links after 3 days.
• A sign up that is never finished, where no password was chosen and the address was never confirmed, is deleted with its name, email address and time zone once its link runs out after 3 days.

When an account is deleted, by you or by an administrator, everything tied to it is removed right away: goals, tasks, checklists, tags, update history, notes, reminders and reminder records, alerts, sign ins, help requests with all their messages and internal notes, administrator notes about you, any email change still waiting, the record of emails sent to your account or address, and security counters tied to your account or address. The audit log keeps only the kind of action and the time, marked as a deleted account, with no name, email or text. Emails we already sent you stay in the inboxes they went to.

9Your choices and rights

• Download your data. In Settings you can download your data as a CSV or JSON file.
• Delete your account. In Settings you can delete your account and everything tied to it, right away.
• Turn off emails. You can switch off reminder emails and help request answer emails in Settings.
• Ask us. You can use our contact form to ask what we hold about you, to ask us to correct something, or for help with any of the choices above.

Depending on where you live, you may have other rights over your information. Write to us and we will do our best to help.

10How we protect your information

We take care to protect your information. Passwords are stored only as a one way scrambled code, you confirm your email before using the app, and administrator actions are recorded in an audit log. No online service can be made perfectly safe, so we cannot promise that your information will never be lost, seen or misused by someone it should not reach.

Please keep your password private, and use one that you do not use anywhere else.

11Children and age

You must be at least 16 years old. If you are 16 or 17, you need a parent or guardian’s permission to use MYNIFEST.

When you sign up, you tick a box that says: “I am 18 or older, or I am 16 or 17 and have a parent or guardian’s permission.” You cannot create an account without it.

MYNIFEST is not for anyone under 16, and we do not knowingly collect information from them. If we learn that an account belongs to someone under 16, we will close it and remove its data. If you are a parent or guardian and think this has happened, please contact us through our contact form.

12Changes to this policy

We may update this policy from time to time. When we do, we will change the “Last updated” date at the top. If a change is important, we will announce it in the app. Using MYNIFEST after a change means you accept the updated policy.

13Questions and contact

Questions about this policy, or want to use any of your choices? Please use our contact form.

Operator: Jesus Agudo