SelfFirst Privacy Policy

Last Updated: September 11, 2026

Next4AI Technology Limited ("Next4AI," "Company," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the SelfFirst mobile application ("Service," "App," or "Application").

We use Your Personal Data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. Opening the App and continuing past the nickname screen creates an anonymous account.

1. Interpretation and Definitions

Interpretation

Words with an initial capital letter have the meanings defined below, whether used in the singular or the plural.

Definitions

For the purposes of this Privacy Policy:

• You means the individual accessing or using the Service. Under GDPR, You may be referred to as the Data Subject or the User.
• Company (the Company, Next4AI, we, us, or our) refers to Next4AI Technology Limited. For GDPR, the Company is the Data Controller.
• Application means the software program named SelfFirst provided by the Company.
• Service refers to the Application.
• Account means the unique anonymous account created for You to access the Service.
• Personal Data is any information that relates to an identified or identifiable individual, including an identifier such as a nickname, user ID, device token, or IP address.
• Device means any device that can access the Service, such as an iPhone.
• Usage Data refers to data collected automatically from use of the Service or its infrastructure (for example, app version, locale, product events).
• Data Controller means the Company as the legal person that determines the purposes and means of processing Personal Data.
• Service Provider means any person who processes data on behalf of the Company (for example hosting, analytics, or Apple’s push and payment systems).

2. Collecting and Using Your Personal Data

Types of Data Collected

Personal Data

While using our Service, we may ask You to provide certain information. SelfFirst has no email, password, SMS, Apple Sign-In, or Google Sign-In. Personally identifiable information may include:

• Account Information: nickname (1–20 characters); a random device secret stored in the iOS Keychain; user ID and session token issued after registration
• Communication Data: optional feedback text you send in Settings (please do not include personal details you do not want stored)
• On-device content You type: daily-duration numbers and apply-chat choices (reason and duration). These stay on this Device (App Group) and are not uploaded as a Screen Time report
• Purchase identifiers: if You subscribe, Apple original transaction ID and subscription status so we can verify VIP with Apple. We do not receive Your card number

Usage Data

Usage Data is collected automatically when using the Service, including:

• Device / App Information: iOS version as needed for support, app version, language (locale), time zone as provided by the system
• Network Information: IP address at registration (abuse rate-limit only). We do not collect precise GPS
• Push token: Apple Push Notification service (APNs) device token if You allow notifications, so we can send service messages. This is not IDFA
• App Usage: product funnel events (for example finished onboarding, saved a block list, completed an apply, saw the paywall, purchased) tied to Your anonymous user ID

Notifications: required. Local notifications on this Device remind You to open SelfFirst from the shield and apply; that path is not Apple Push. Remote push (APNs) is used for service messages we send (for example product updates). Granting notification permission lets us register an APNs device token. Turning notifications off in iOS Settings stops remote alerts; deleting Your Account deactivates the token on our server.

We do not collect email, phone number, precise GPS, contacts, camera, photo library, payment card numbers, IDFA, or other advertising IDs. We do not show App Tracking Transparency because we do not track You across other companies’ apps or websites for advertising.

Your Consent and Our Use of Your Personal Data

By creating an Account or using our App, You expressly agree to:

• The collection and processing of anonymous account data for service provision
• Use of Screen Time APIs on this Device for blocking You set Yourself
• Registration of an APNs device token if You allow notifications, and receipt of service messages
• Use of analytics data (PostHog Cloud US) for app improvement, tied to Your anonymous user ID
• If You subscribe, sharing of transaction identifiers with Apple to verify subscription status

Except as provided in this Privacy Policy, we will not transfer Your Personal Data to third parties without Your explicit consent.

3. How We Use Your Information

The Company may use Personal Data for the following purposes:

• To provide and maintain our Service: including anonymous account, blocking You configure, scorecard on device, and customer support
• To manage Your Account: registration, session, nickname display, and deletion
• For the performance of a contract: the purchase contract for subscriptions You buy through the App Store
• To contact You: by push notifications or in-app notices regarding updates, security, or the Service, when necessary or reasonable
• To provide You with news about the Service: product updates similar to features You already use, unless You have turned off notifications
• To manage Your requests: feedback and privacy requests
• For business transfers: to evaluate or conduct a merger, sale of assets, or similar transaction
• Analytics and Improvement: to understand funnels and improve SelfFirst
• Security and Fraud Prevention: rate limits, abuse detection, and technical issues

4. Information Sharing and Disclosure

We do not sell, trade, or rent Your Personal Data. We may share information in the following situations:

• With Service Providers: hosting (including servers in Singapore), PostHog Cloud US for analytics, and Apple for In-App Purchase, App Store Server API, and APNs
• For business transfers: in connection with a merger, financing, or sale of all or part of our business
• With Affiliates: if we share with affiliates, they must honor this Privacy Policy. SelfFirst data is not mixed into SnapLedger accounts
• With Your consent: for any other purpose You agree to
• Legal Requirements: when required by law, legal process, or public authorities
• To protect rights and safety: when we believe disclosure is necessary to protect the Company, our users, or others

5. Data Security

The security of Your Personal Data is important to us, but no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect Your Personal Data, we cannot guarantee absolute security.

We implement appropriate technical and organizational measures including:

• Encryption: HTTPS / TLS in transit for production APIs
• Access Controls: restricted access to production systems and databases
• Secure Infrastructure: cloud hosting with industry-standard practices
• On-device storage: Keychain and App Group for credentials and scorecard data
• Incident Response: we will take prompt remedial action if we become aware of a breach affecting Your data

6. Data Retention

The Company will retain Your Personal Data only for as long as is necessary for the purposes in this Privacy Policy, to comply with legal obligations, resolve disputes, and enforce our policies.

• Account Data: until You delete Your Account in the App or request deletion by email
• APNs device token: while the Account is active and notifications are used; we deactivate it on delete or if Apple reports the token invalid
• Usage / analytics events: generally up to 2 years for product improvement, unless a shorter period is sufficient
• Subscription identifiers: as long as needed to honor an Apple subscription and accounting or legal duties
• Feedback: generally up to 3 years for support quality
• On-device scorecard and shields: until You delete the Account, clear them in the App, or uninstall (Keychain items may remain after uninstall until You delete the Account or reset the Device)

7. Your Rights

Depending on Your location, You may have the following rights:

• Right to Access: request what Personal Data we hold
• Right to Rectification: request correction of inaccurate data (nickname can be re-entered on a new Account after delete)
• Right to Erasure: Delete Account in Settings, or email us
• Right to Restrict Processing
• Right to Data Portability: receive Account data we hold in a structured, machine-readable format where technically feasible
• Right to Object
• Right to Withdraw Consent: for example turn off notifications in iOS Settings
• Right to Lodge a Complaint with Your local data protection authority

8. GDPR Privacy Rights

If You are a resident of the European Economic Area (EEA) or the United Kingdom, You have data protection rights under GDPR / UK GDPR. The Company is the controller of anonymous Account data. We aim to allow You to access, correct, delete, or limit the use of Your Personal Data.

If You wish to know what Personal Data we hold about You, or want it removed, contact privacy@next4.ai. We may ask You to verify Your identity (for example by confirming the nickname and that the request comes from the same Device / Account) before responding. We will try to respond within one month.

You have the right to complain to a Data Protection Authority about our collection and use of Your Personal Data.

9. CCPA Privacy Rights

Your Rights under the CCPA

If You are a California resident, You have the right to notice, to know / access, to delete, to opt out of sale, and not to be discriminated against for exercising these rights.

Do Not Sell My Personal Information

We do not sell Personal Data as defined under CCPA. We do not share Personal Data for cross-context behavioral advertising. To exercise CCPA rights, email privacy@next4.ai. We will respond to a verifiable request within 45 days (extendable once by 45 days with notice).

10. Children's Privacy

Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under 13. Screen Time blocking is for the person who authorized Family Controls on this iPhone (individual use), not for remotely managing a child’s device as a parent-control product.

If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us. If We become aware that We have collected Personal Data from anyone under 13 without verification of parental consent, We take steps to remove that information from Our servers.

11. Subscription Information

• Payment Processing: All payments are processed through the Apple App Store. We do not store or have access to Your payment card information
• Products: auto-renewable subscriptions com.next4.ai.selffirst.monthly and com.next4.ai.selffirst.yearly
• Pricing: the price Apple shows in Your App Store storefront (China reference: about ¥8 / month and ¥128 / year)
• Free trial: none. Any unused trial would be forfeited if You purchased a subscription; this App does not offer a trial
• Auto-renewal: the subscription automatically renews unless auto-renew is turned off at least 24 hours before the end of the current period. Your Apple ID account will be charged for renewal within 24 hours prior to the end of the current period
• Cancellation: You can manage subscriptions and turn off auto-renewal in iOS Settings → Apple ID → Subscriptions after purchase
• Refunds: handled by Apple according to Apple’s refund policy
• Account deletion: deleting SelfFirst does not cancel billing; cancel in Apple ID settings if You no longer want to pay

Privacy Policy: https://www.next4.ai/SelfFirstPolicyPrivacy.html
Terms of Use: https://www.next4.ai/SelfFirstTermsofService.html

12. International Data Transfers

Your information, including Personal Data, may be transferred to — and maintained on — computers located outside of Your state, province, country or other governmental jurisdiction where data protection laws may differ.

The Company is Next4AI Technology Limited. Account, subscription, and push-token data may be processed on our backend (including Singapore). Analytics events are processed in the United States by PostHog Cloud. If You are located outside Hong Kong and choose to provide information to us, You acknowledge that we may also operate from Hong Kong and other locations where we or our processors operate.

Your consent to this Privacy Policy followed by Your use of the Service represents Your agreement to that transfer. The Company will take steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Privacy Policy.

13. Third-Party Services

Our Service may contain links to other websites or services that are not operated by Us (for example research articles You open in the App). If You click a third-party link, You will be directed to that third party’s site. We strongly advise You to review the Privacy Policy of every site You visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Third-Party Services We Use:

• Apple Inc.: In-App Purchase, App Store Server API, APNs, and Screen Time / Family Controls APIs on device. Apple’s Privacy Policy: https://www.apple.com/legal/privacy/
• PostHog, Inc.: product analytics on PostHog Cloud US (https://us.i.posthog.com). We do not enable session replay or advertising tracking. PostHog privacy: https://posthog.com/privacy
• Cloud hosting: backend hosting (including Singapore) to run accounts, subscriptions, feedback, and push token storage

App Store privacy labels (not Tracking): Product Interaction and User ID for Analytics / App Functionality; Name (nickname) and Purchase History for App Functionality; Device ID (APNs token) for App Functionality.

14. Changes to Privacy Policy

We may update our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page and updating the “Last Updated” date. For material changes we will provide a prominent notice in the App or on this page prior to the change becoming effective.

You are advised to review this Privacy Policy periodically. Changes are effective when they are posted on this page. Continued use means You accept the updated policy.

15. Contact Us

For California Residents: additional rights under CCPA are in Section 9.
For EU/EEA/UK Residents: additional rights under GDPR are in Section 8.