Privacy Policy — So Far

Effective date: August 14, 2026
Last updated: August 14, 2026

So Far is a personal goal-tracking app for iOS. Using the app requires an account — you sign in with Apple or Google. So Far is local-first: your goals and entries are stored on your device and work offline, and they also sync to your account so they’re available across your devices.

This policy explains what data So Far handles, where it lives, and the choices and rights you have. Plain language is used throughout on purpose.

1. Who we are

So Far is provided by Veronika Baraniuk, an individual entrepreneur (ФОП) registered in Ukraine, who acts as the data controller for your information. For any privacy questions or requests, contact us at hithereverohere@gmail.com.

2. Data we collect

So Far is designed to collect as little as possible. There are no ads, no analytics, and no tracking.

Content you create — stored on your device:

• Your goal(s) and log entries: text notes, dates, and to-dos.
• Media and attachments you add to entries: photos, videos, audio recordings, and files.
• App settings: your name, reminder on/off and time, appearance choice, and home-screen emoji.

Account identifier: Using So Far requires you to sign in with Apple or Google. The sign-in provider returns an identifier — an email address, or an Apple private-relay address (…@privaterelay.appleid.com) if you choose to hide your email. We use this only to create and identify your account, and we never receive your Apple or Google password.

3. Where your data lives

• On your device, always.
• Your goals, entries, and settings also sync to our backend so you can use them across devices. Our backend is hosted by Supabase on servers located in the European Union (Ireland). Your data is tied to your account and is never shared with other users.
• Your media files (photos, videos, audio) stay on your device and are not uploaded to our servers.

4. How we use your data

We use your data only to provide the app: to store and display your goals and entries, sync them across your devices, and send the local daily reminder if you turn it on. We do not use your content for advertising, profiling, or training.

5. What we don’t do

• No advertising.
• No selling or renting your data.
• No third-party analytics or cross-app tracking.
• We don’t use your content to train anything.

6. Notifications

If you turn on the daily reminder, So Far schedules a local notification on your device at the time you choose. We don’t send notifications from a server, and no personal data leaves your device for this.

7. Deleting your data

• Delete your account: in the app, go to Settings → Account → Delete account. This permanently deletes your account and all synced data from our servers, and wipes your goals, entries, and media from your device. This can’t be undone.
• You can also simply delete the app; its on-device data is removed with it.

8. Your rights

Depending on where you live, you have rights over your personal data — including to access, correct, delete, export (portability), and object to or restrict certain processing (for example under the EU GDPR), and rights under laws such as the California CCPA/CPRA. You can exercise the core rights directly in the app (view and edit your content, delete your account). For anything else, contact us at hithereverohere@gmail.com and we’ll respond within the time frames required by applicable law. You also have the right to lodge a complaint with your local data protection authority.

Legal bases (EU/EEA): we process your data to provide the service you request (performance of a contract) and, where relevant, on the basis of your consent (e.g. notifications) or our legitimate interests in operating and securing the app.

9. Security

Data in transit between the app and our backend is encrypted (HTTPS/TLS), and data at rest on our backend is encrypted. Access to your account is protected by Sign in with Apple or Google. No method of transmission or storage is completely secure, but we take reasonable measures to protect your information.

10. International data transfers

Our backend servers are located in the European Union. If you use So Far from outside the EU, your synced data is transferred to and stored in the EU. Sign-in is handled by Apple and Google under their own privacy policies.

11. Children

So Far is not directed to children under 13, and we don’t knowingly collect personal data from children under 13. If you believe a child has provided us data, contact us and we’ll delete it.

12. Third-party services

• Sign in with Apple and Sign in with Google — used only to authenticate you; governed by Apple’s and Google’s privacy policies.
• Supabase — our backend, database, and authentication provider (EU-hosted), acting as our processor.

13. Changes to this policy

We’ll update this policy as the app changes and revise the date at the top. Material changes will be reflected here.

14. Contact

Questions about this policy or your data? Email hithereverohere@gmail.com.