Eights — Privacy Policy
This Privacy Policy explains how Eights App Inc. ("Eights," "we," "us") collects, uses, and protects your personal information when you use the Eights mobile application (the "App") and the website at eightsapp.com (together, the "Services"). We are a Canadian company and comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.
The short version: your memories are private by design. They are visible only to you and the people you explicitly share them with — there is no public feed and no broadcast option, ever. We collect only what we need to run Eights, we don't sell your personal information, and we never use your content for advertising or to train AI models.
1. Information We Collect
Account information. You sign in with Sign in with Apple. We receive your name and email address as provided by Apple (if you use Apple's "Hide My Email" option, we receive only your private relay address — that works fine with Eights). You then create a profile: a handle, a display name, and optionally an avatar photo. We use your email address only to send you notices about your account and about changes to this policy and our Terms, and to reply when you contact us — never for marketing, and it is never shown to other people in Eights. Accounts created before November 2026 were not asked for an email address, and we hold none for them.
Your content. The 8-second videos and the photos (up to eight to a memory) you take or add from your library, their captions, comments you write, capsules and groups you create or join (like a capsule, a group is visible to everyone in it: its members can see each other and are told when they are added), any private group lists saved by earlier versions of the App (visible only to you; the people in them were not told), and the people you manually tag in memories. Five details worth knowing:
- Speech transcripts. Each video is transcribed on your device (never on Apple's or our transcription servers) so your memories are searchable by what was said. The resulting text is uploaded and stored with the memory in our database. A transcript is visible to exactly the same people who can see the memory itself.
- Image labels and on-screen text. When you post a memory, your device also looks at a few of its frames, or at its photos, and derives short labels for what is visible in them, and reads any text that appears in the shot — a sign, a menu, a shirt — so your memories are searchable by what was in them and not only by what was said. This runs entirely on your device using Apple's built-in Vision framework; the frames themselves are never sent anywhere to be analysed. As with transcripts, only the resulting text is uploaded and stored with the memory, and it is visible to exactly the same people who can see the memory. This is not face recognition and does not identify people — see Section 2.
- Previews. The small animated previews in your archive are generated on your device.
- The date of a video you add, from your photo library. Every memory is dated from when it was actually shot. Most videos carry that date inside the file itself; when one doesn't — common for a video that reached you through another app — Eights asks permission to find that video in your photo library and read the date recorded there, so the memory keeps a real date instead of the day you posted it. Permission is asked for only at that moment, and never when you record a video or add one that already carries its own date. The date is the only thing read: Eights does not otherwise browse your photo library, and nothing is uploaded from it that you did not choose to post.
- Photos, and where they were taken. Photos usually carry hidden details from the camera, including the place they were taken. Before a photo leaves your device, Eights makes a fresh copy of it at most 2048 pixels across with none of those details — no location, no camera model, no other metadata. The one thing read first is when the photo was taken, so the memory carries that date. Choosing photos from your library asks for no permission at all: Eights sees only the photos you pick.
Sharing information. When you share a memory or capsule, we process the sharing relationship (who you shared with and capsule membership) so we can deliver it. Recipients can save shared memories for offline viewing on their own devices — see Section 5 for what that means for deletion.
Friendships and invite links. Who your friends are is visible to you and to each of those friends, and to nobody else — with one deliberate exception. When one of your friends looks at another person's profile, or searches for them, Eights shows them which of their own friends are also friends with that person. So a friend of yours can learn that you know someone they know too; nothing is ever disclosed about friendships between people they are not friends with. To add people, you can create an invite link in the App. The link carries a code tied to your account; anyone who opens it sees your display name, handle, and avatar and can send you a friend request, which you still accept or decline. A link expires after 90 days or 25 uses, and you can replace it with a new one at any time, which retires the old one immediately.
Push notifications. If you enable notifications, we store your device's push token (Apple Push Notification service) to deliver them. The content of a notification — for example, a friend's name and the text of their comment — necessarily passes through Apple's push service on its way to your device.
Purchase information. Your Eights+ subscription status: its expiry date, and the identifier Apple assigns to the transaction it rests on. We keep that identifier for one reason — so a single purchase can unlock exactly one Eights account (or, with Eights+ Family, one account per member of the family group) and cannot be replayed into another. Apple's signed transaction is verified and then discarded; we store no receipts. If you receive Eights+ through Apple's Family Sharing, Apple tells us only that the subscription is shared with you, not who in your family bought it. Payment is handled entirely by Apple — we never see your payment card details. We also count your posts against the free tier's monthly budget, using the timezone your device reports.
Viewing activity. When you watch a memory, we record that you watched it, when, and how many times it looped — and, for memories we bring back into your feed, when we last resurfaced it. We use this to choose which of the memories you can already see, your own and ones shared with you, to bring back into your feed: the ones you have watched most, or that have the most conversation on them, are likelier to return. We also use it to avoid showing you the same memory too often. These counts are never shown to anyone — not to other viewers, and not to the person who created the memory. There are no likes, no view counts, and no follower numbers anywhere in Eights. When a memory resurfaces, you can tell us not to bring that one back again. You can also mark a memory as a favourite so it returns more often, or save it to your device for offline viewing; which memories you favourite, hide, or save is stored with your account and is likewise never shown to anyone, including the memory's creator.
Feedback you send us. If you use Send Feedback in the App (Profile → menu → Send Feedback), we store what you write, whether you marked it as a problem or an idea, and when you sent it — and, unless you switch it off on the form, which shows exactly what will be sent, the App's version and build number, your iOS version, and your device's model identifier (for example, "iPhone17,3"). It is linked to your account so we can understand it in context, it is read only by our team, and it is never shown to anyone in Eights. You can send up to ten a day. We can't reply inside the App, so if you need an answer, email support@eightsapp.com.
Diagnostics. The App contains no analytics or tracking SDK. If you have chosen to share diagnostics with app developers in your device settings, we may receive crash reports through Apple's opt-in developer diagnostics; that choice, and what those reports contain, are governed by Apple.
We do not collect your location (photos have it removed on your device before upload — see "Photos, and where they were taken" above), your contacts, your browsing history, or advertising identifiers, and we do not track you across other companies' apps or websites.
2. How We Use Your Information
We use personal information to: provide the Services (store your memories, sync them, deliver what you share, power search over your own captions, transcripts, image labels, and tags; choose which of the memories you can already see to bring back into your feed); process and manage your subscription; provide customer support, and read and act on feedback you send us; maintain safety and security (processing reports, enforcing blocks, preventing fraud and abuse); fix bugs and improve the App using aggregated or de-identified diagnostics; count, in aggregate only, how many people use Eights and how much they post — totals per day, built from activity the App already records, never a record of any one person's use; and communicate with you about the Services.
We do not sell or rent personal information, use your content for advertising, or use your content to train machine-learning models. People-tagging in Eights is manual only — we do not run automated face recognition.
3. How Your Content Is Protected
Your content is encrypted in transit (TLS) and at rest (AES-256). Who can see a memory is enforced in our database itself — a memory is visible only to its creator and the people it was explicitly shared with. Our media storage is designed to be "blind": video and photo bytes travel directly between your device and storage via short-lived signed links, and our servers never read or decode your videos or photos in normal operation.
An honest limit: Eights is not end-to-end encrypted. Like most consumer apps, we hold the keys to our storage, which means we are technically able to access stored content — and may need to, for example to review an abuse report or respond to a lawful request. We describe our practices accurately and will never claim otherwise.
4. Who Processes Your Information
We use a small number of service providers ("sub-processors") under contractual confidentiality and security obligations:
- Supabase — our database, authentication, and application backend (account data, captions, transcripts, comments, sharing relationships, feedback you send)
- Cloudflare — encrypted storage for video, photo, preview, and avatar files (R2); hosting for eightsapp.com (Pages)
- Apple — Sign in with Apple, App Store subscriptions, and push notification delivery
- Resend — email delivery, for two things: the account notices we send you (your email address and the text of the notice pass through Resend to reach you, with no open or click tracking); and our internal moderation alerts — when you file a report, that report (including the display names and handles of the accounts involved, a snapshot of any reported text, and anything you wrote in the report) is emailed to our moderation inbox so we can act on it
Depending on these providers' data-centre locations, information may be stored or processed outside your province or outside Canada (including in the United States), where it may be subject to the laws of those jurisdictions. Beyond these providers, we share personal information only with people you choose (recipients of your shares), and with authorities where required by law or necessary to protect the rights and safety of our users or others. If Eights App Inc. is involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction, subject to this policy and notice to you.
5. Retention and Deletion
Deleting a memory is a hard delete: the database record is removed (which revokes everyone's access) and the stored video or photo files are deleted. Removing a photo from a memory when you edit it deletes that photo's file the same way. You can delete your entire account from within the App (Profile → menu → Delete Account). Before it proceeds, the App asks your device to confirm it is you — with Face ID, Touch ID, or your passcode. That check is performed by iOS: Eights receives only whether it succeeded, and never sees or stores biometric data. Deleting your account removes your content, profile, any feedback you sent, and authentication record (including revoking your Sign in with Apple token with Apple), sweeps everything stored under your account's media prefix — including stray artifacts of uploads that never completed — and clears local caches on your device. Residual copies leave encrypted backups within 90 days, and internal notification-delivery logs are deleted after at most 90 days as well. We retain reports as moderation records (see Section 6) and other limited records where required by law. Deleting your account does not cancel an Eights+ subscription — that is managed by Apple, and the App reminds you to cancel it in Settings before you confirm.
One honest caveat about shared copies: if someone you shared with saved a memory for offline viewing, that copy lives on their device. When their device reconnects, deleted or unshared memories are purged from their offline shelf automatically — but a device that stays offline keeps its copy until it reconnects. Deletion across other people's devices is honest-best-effort, not instantaneous.
6. Safety, Reports, and Blocking
You can report any memory, comment, or person in the App; reports come to our team and are actioned promptly (see our Support page for the current commitment). A report is a moderation record: we keep it — including a snapshot of any reported text — even if the reported content, the reported account, or the reporting account is later deleted; it is unlinked from deleted accounts rather than destroyed. Blocking someone severs the friendship, all shares in both directions, shared capsule membership, search visibility, and mentions. If a breach of security occurs that creates a real risk of significant harm, we will notify you and the Office of the Privacy Commissioner of Canada as required by PIPEDA. We may report content involving the exploitation of minors to relevant authorities. When we remove content for that reason, or because the law otherwise requires us to keep it, we do not destroy it: we keep a copy as evidence, inaccessible to anyone in the App — its creator included — for as long as the law requires, even if the account it came from is later deleted. When a memory is reported to us as a child-safety concern, we also keep a copy of it from the moment of the report while we review it, so that deleting it in the meantime does not destroy the evidence; if we find no violation, we delete that copy. This is the one exception to deletion being permanent (Section 5). When we remove content or suspend an account for any reason, we keep a record of what we did and why.
7. Children
The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, contact us at privacy@eightsapp.com and we will delete it.
8. Your Rights
Subject to applicable law, you may: access the personal information we hold about you; correct inaccurate information; delete your content and account (see Section 5); export your data (contact us — currently a manual process we complete within 30 days); withdraw consent to our collection and use of your information (which may mean you can no longer use the Services); and complain — we'd rather hear from you first at privacy@eightsapp.com, but you also have the right to complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca) or your provincial privacy regulator.
If you are in Quebec, you have additional rights under Law 25, including data portability; requests can be sent to our privacy officer at the address below. If you are in the European Economic Area or UK, you may have rights under the GDPR/UK GDPR, including access, rectification, erasure, and portability; our legal basis for processing is the performance of our contract with you and our legitimate interests in operating the Services.
9. Person Responsible for Privacy
Privacy Officer, Eights App Inc. 375 University Avenue, Unit 102, Suite 3379 Toronto, ON M5G 2J5, Canada privacy@eightsapp.com
10. Changes to This Policy
We may update this policy from time to time. If a change is material, we will notify you in the App or by email before it takes effect. The "Last updated" date at the top always reflects the current version.