Check-in privacy details

More detail about information from optional check-ins.

Last updated: 18 October 2026

Check-ins are optional and available to people aged 18 or over. Your daily reading works without them. Your answers about how you feel, your energy and support needs can reveal things about your health, so we treat them, and health information worked out from them, as sensitive information.

What we use and why

If you explicitly agree, we store your feeling, energy and support-need answers and use them, together with information we work out from them, to personalise the You part of today's reading, provide today's Inner Compass and select a small step and a reflection question. If you repeatedly share difficult moments, we may show a link to support outside the app. This is reflection, not professional care; no one monitors your answers or responds to emergencies through NinePath. You may choose a feeling word on the result screen. It stays on your device for that screen and is not saved or sent to us. We record that explicit agreement before storing an answer. We never send your answers, or anything worked out from them, to an AI provider, and never use them to train AI. We do not use them for advertising or analytics. Choosing not to agree does not change your Free or Plus access, including any beta benefit.

Where information is stored

Our backend uses Google Cloud/Firebase to store and process this information for NinePath. Storage providers handle information on our behalf; the promise about AI providers does not mean that no provider handles your answers. Our production app database stores this information in Belgium, European Union, in Google Cloud's europe-west1 region. Google processes the check-in information on our behalf; its personnel and subprocessors may access information from other countries for support and operations. International transfers are covered by Google's data processing terms, including the EU Standard Contractual Clauses and the EU–US Data Privacy Framework. Our Privacy Policy gives more information about providers and international transfers.

How long we use it

We use each answer, and what we work out from it, for up to 30 days after you submit the answer. We then stop using and displaying both and delete them from our active systems within a further 24 hours. Information worked out from an answer has the same expiry as that answer; generating or updating it again does not restart the 30 days.

This also applies to any part of a saved You reading that contains information worked out from your check-ins. Keeping an ordinary saved reading does not extend the life of that sensitive information. "Active systems" means the systems we use to provide the app, including in-use databases, cached copies and saved personalised components.

Turning check-ins off

You can withdraw your consent at any time by turning check-ins off in Settings › Daily check-ins. We immediately stop using and displaying your saved answers and what we worked out from them, and delete both from our active systems within 24 hours. Turning check-ins back on requires your explicit agreement again and does not bring back deleted answers. Withdrawing does not change the lawfulness of processing that took place while valid consent applied.

Version history and backups

NinePath does not currently configure or maintain separate backups or exports of check-in information. Firestore version history and Google's internal infrastructure retention are described below. We have no backup schedules or exported backup copies, and extended point-in-time recovery is switched off.

Firestore keeps a short version history for one hour. After we delete information from active systems, deleted versions can remain in that history for at most one further hour. After that, NinePath cannot recover the deleted information through Firestore's version history. We do not use deleted versions to personalise your reading or bring back withdrawn or expired check-ins.

Google's own infrastructure deletion is handled per Google Cloud's data-deletion terms. The one-hour limit describes the version history available to NinePath; it is not a promise about Google's internal infrastructure deletion timelines.

If we ever enable backups, we will update this page first with their maximum retention period, how they are isolated from ordinary use and how we reapply deletions before restored information returns to use. Operational logs are kept for 30 days, and required audit logs for 400 days, without check-in content.

Your choices and rights

Contact support@ninepath.app to ask to access, correct or delete information we hold about your check-ins. Turning check-ins off is the direct way to withdraw consent; you do not need to contact us to do that. See our Privacy Policy for other rights and how to raise a concern.

We keep a limited record of your consent and withdrawal to show what you agreed to and when. We keep a record of your yes or no to check-ins for as long as you have an account, so we can prove consent if asked. It is deleted when you delete your account. It does not include check-in answers or health information worked out from them, and is not used to personalise your reading.

NinePath is provided by Chris nby Ninepath, Leuven, Belgium. Email: support@ninepath.app.