Eights — Privacy Policy
This Privacy Policy explains how Eights App Inc. ("Eights," "we," "us") collects, uses, and protects your personal information when you use the Eights mobile application (the "App") and the website at eightsapp.com (together, the "Services"). We are a Canadian company and comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.
The short version: your memories are private by design. They are visible only to you and the people you explicitly share them with — there is no public feed and no broadcast option, ever. We collect only what we need to run Eights, we don't sell your personal information, and we never use your content for advertising or to train AI models.
1. Information We Collect
Account information. You sign in with Sign in with Apple. We receive your name and email address as provided by Apple (if you use Apple's "Hide My Email" option, we receive only your private relay address — that works fine with Eights). You then create a profile: a handle, a display name, and optionally an avatar photo.
Your content. The 8-second videos you record or import, their captions, comments you write, capsules you create or join, and the people you manually tag in memories. Four details worth knowing:
- Speech transcripts. Each clip is transcribed on your device (never on Apple's or our transcription servers) so your memories are searchable by what was said. The resulting text is uploaded and stored with the memory in our database. A transcript is visible to exactly the same people who can see the memory itself.
- Image labels and on-screen text. When you post a clip, your device also looks at a few of its frames and derives short labels for what is visible in them, and reads any text that appears in the shot — a sign, a menu, a shirt — so your memories are searchable by what was in them and not only by what was said. This runs entirely on your device using Apple's built-in Vision framework; the frames themselves are never sent anywhere to be analysed. As with transcripts, only the resulting text is uploaded and stored with the memory, and it is visible to exactly the same people who can see the memory. This is not face recognition and does not identify people — see Section 2.
- Previews. The small animated previews in your archive are generated on your device.
- The date of a video you add, from your photo library. Every memory is dated from when it was actually shot. Most videos carry that date inside the file itself; when one doesn't — common for a video that reached you through another app — Eights asks permission to find that video in your photo library and read the date recorded there, so the memory keeps a real date instead of the day you posted it. Permission is asked for only at that moment, and never when you record a video or add one that already carries its own date. The date is the only thing read: Eights does not otherwise browse your photo library, and nothing is uploaded from it that you did not choose to post.
Sharing information. When you share a memory or capsule, we process the sharing relationship (who you shared with and capsule membership) so we can deliver it. Recipients can save shared memories for offline viewing on their own devices — see Section 5 for what that means for deletion.
Push notifications. If you enable notifications, we store your device's push token (Apple Push Notification service) to deliver them. The content of a notification — for example, a friend's name and the text of their comment — necessarily passes through Apple's push service on its way to your device.
Purchase information. Your Eights+ subscription status (just its expiry date — Apple's signed transaction is verified and then discarded, and we store no transaction identifiers or receipts). Payment is handled entirely by Apple — we never see your payment card details. We also count your posts against the free tier's monthly budget, using the timezone your device reports.
Viewing activity. When you watch a memory, we record that you watched it, when, and how many times it looped — and, for memories we bring back into your feed, when we last resurfaced it. We use this to choose which of the memories you can already see, your own and ones shared with you, to bring back into your feed: the ones you have watched most, or that have the most conversation on them, are likelier to return. We also use it to avoid showing you the same memory too often. These counts are never shown to anyone — not to other viewers, and not to the person who created the memory. There are no likes, no view counts, and no follower numbers anywhere in Eights. When a memory resurfaces, you can tell us not to bring that one back again.
Launch waitlist (website only). If you enter your email address in the sign-up form on eightsapp.com, we store that address, the date, and the country your request came from, for one purpose: to tell you when Eights reaches the App Store. It is kept in Cloudflare KV — the same provider that already serves this site — and is not connected to any Eights account, not used for any other mailing, and not shared with anyone. To limit abuse of the form, the submitting network address is also held briefly (it expires automatically within ten minutes). We will send at most two messages, both about the launch, and then delete the list. Every message carries an unsubscribe link, and following it deletes your address there and then — it does not merely mark you as opted out. You can also write to privacy@eightsapp.com and we will remove it by hand. You do not need to join the waitlist to use anything on this site.
Diagnostics. The App contains no analytics or tracking SDK. If you have chosen to share diagnostics with app developers in your device settings, we may receive crash reports through Apple's opt-in developer diagnostics; that choice, and what those reports contain, are governed by Apple.
We do not collect your location, your contacts, your browsing history, or advertising identifiers, and we do not track you across other companies' apps or websites.
2. How We Use Your Information
We use personal information to: provide the Services (store your memories, sync them, deliver what you share, power search over your own captions, transcripts, image labels, and tags; choose which of the memories you can already see to bring back into your feed); process and manage your subscription; provide customer support; maintain safety and security (processing reports, enforcing blocks, preventing fraud and abuse); fix bugs and improve the App using aggregated or de-identified diagnostics; and communicate with you about the Services.
We do not sell or rent personal information, use your content for advertising, or use your content to train machine-learning models. People-tagging in Eights is manual only — we do not run automated face recognition.
3. How Your Content Is Protected
Your content is encrypted in transit (TLS) and at rest (AES-256). Who can see a memory is enforced in our database itself — a memory is visible only to its creator and the people it was explicitly shared with. Our media storage is designed to be "blind": video bytes travel directly between your device and storage via short-lived signed links, and our servers never read or decode your videos in normal operation.
An honest limit: Eights is not end-to-end encrypted. Like most consumer apps, we hold the keys to our storage, which means we are technically able to access stored content — and may need to, for example to review an abuse report or respond to a lawful request. We describe our practices accurately and will never claim otherwise.
4. Who Processes Your Information
We use a small number of service providers ("sub-processors") under contractual confidentiality and security obligations:
- Supabase — our database, authentication, and application backend (account data, captions, transcripts, comments, sharing relationships)
- Cloudflare — encrypted storage for video, preview, and avatar files (R2); hosting for eightsapp.com and, if you join it, the launch waitlist (Pages and KV)
- Apple — Sign in with Apple, App Store subscriptions, and push notification delivery
- Resend — email delivery for our internal moderation alerts: when you file a report, that report (including the display names and handles of the accounts involved, a snapshot of any reported text, and anything you wrote in the report) is emailed to our moderation inbox so we can act on it
Depending on these providers' data-centre locations, information may be stored or processed outside your province or outside Canada (including in the United States), where it may be subject to the laws of those jurisdictions. Beyond these providers, we share personal information only with people you choose (recipients of your shares), and with authorities where required by law or necessary to protect the rights and safety of our users or others. If Eights App Inc. is involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction, subject to this policy and notice to you.
5. Retention and Deletion
Deleting a memory is a hard delete: the database record is removed (which revokes everyone's access) and the stored video files are deleted. You can delete your entire account from within the App (Profile → Delete Account); this removes your content, profile, and authentication record (including revoking your Sign in with Apple token with Apple), sweeps everything stored under your account's media prefix — including stray artifacts of uploads that never completed — and clears local caches on your device. Residual copies leave encrypted backups within 90 days, and internal notification-delivery logs are deleted after at most 90 days as well. We retain reports as moderation records (see Section 6) and other limited records where required by law.
The launch waitlist is deleted after launch. Once the two launch messages described in Section 1 have gone out, the whole list is deleted — it is not kept, migrated into an account, or reused for anything else. You can have your address removed sooner by writing to privacy@eightsapp.com.
One honest caveat about shared copies: if someone you shared with saved a memory for offline viewing, that copy lives on their device. When their device reconnects, deleted or unshared memories are purged from their offline shelf automatically — but a device that stays offline keeps its copy until it reconnects. Deletion across other people's devices is honest-best-effort, not instantaneous.
6. Safety, Reports, and Blocking
You can report any memory, comment, or person in the App; reports come to our team and are actioned promptly (see our Support page for the current commitment). A report is a moderation record: we keep it — including a snapshot of any reported text — even if the reported content, the reported account, or the reporting account is later deleted; it is unlinked from deleted accounts rather than destroyed. Blocking someone severs the friendship, all shares in both directions, shared capsule membership, search visibility, and mentions. If a breach of security occurs that creates a real risk of significant harm, we will notify you and the Office of the Privacy Commissioner of Canada as required by PIPEDA. We may report content involving the exploitation of minors to relevant authorities.
7. Children
The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, contact us at privacy@eightsapp.com and we will delete it.
8. Your Rights
Subject to applicable law, you may: access the personal information we hold about you; correct inaccurate information; delete your content and account (see Section 5); export your data (contact us — currently a manual process we complete within 30 days); withdraw consent to our collection and use of your information (which may mean you can no longer use the Services); and complain — we'd rather hear from you first at privacy@eightsapp.com, but you also have the right to complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca) or your provincial privacy regulator.
If you are in Quebec, you have additional rights under Law 25, including data portability; requests can be sent to our privacy officer at the address below. If you are in the European Economic Area or UK, you may have rights under the GDPR/UK GDPR, including access, rectification, erasure, and portability; our legal basis for processing is the performance of our contract with you and our legitimate interests in operating the Services.
9. Person Responsible for Privacy
Privacy Officer, Eights App Inc. 375 University Avenue, Unit 102, Suite 3379 Toronto, ON M5G 2J5, Canada privacy@eightsapp.com
10. Changes to This Policy
We may update this policy from time to time. If a change is material, we will notify you in the App or by email before it takes effect. The "Last updated" date at the top always reflects the current version.