Privacy Policy

Last updated: 27 October 2026

AimYear ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our mobile application and the AimYear server that AI agents connect to (MCP, at mcp.aimyear.com). The server has its own section below.

Information We Collect

Data You Provide

• Aims and Goals: The yearly aims you create and track
• Daily Marks: Your daily check-ins (good/bad/nothing) and optional notes
• Account Information: Email address if you create an account for cloud sync (Premium only)

Automatically Collected Data

• Anonymous Identifier: When you use the app, a random anonymous identifier is created via Firebase Authentication. This ID does not contain your name, email, or any personal information — it is used solely to manage your session and enforce usage limits.
• Analytics: Anonymous usage data via Google Analytics (can be disabled)
• Crash Reports: Technical error reports via Firebase Crashlytics
• Device Information: Device type, OS version, app version

How We Use Your Data

• To provide and maintain the app functionality
• To sync your data across devices (Premium users)
• To run the AI goal-setting assistant when you open it (all users, with daily limits on the free plan; see AI Features below). The insights and weekly summaries in the app and on the MCP server are computed from your own records, without any AI provider.
• To improve the app and fix bugs
• To send reminder notifications (if enabled)

Data Storage

Free Users: All your data is stored locally on your device only. We do not have access to it.

Premium Users: Data is encrypted and stored securely on Google Firebase servers. You can delete your cloud data at any time from Settings.

Data Sharing

We do not sell, trade, or share your personal data with third parties, except:

• Service providers necessary for app functionality (Firebase, RevenueCat, AI providers such as OpenAI, Anthropic, or Google)
• When required by law
• With your explicit consent

AI Features

AimYear offers an AI-powered goal-setting assistant that helps you formulate your yearly goals. When you use this feature:

• What is sent: Your conversation messages (the text you type in the AI chat) are sent to our server and processed by a third-party AI provider to generate responses. No other app data (your existing goals, daily marks, or notes) is sent unless you include it in your message.
• AI providers: We may use one or more third-party AI services, including OpenAI, Anthropic, and Google (Gemini). The active provider may change over time.
• No training: Your conversation data is not used to train AI models. All providers are configured with zero data retention for training purposes.
• No storage: Conversations are not stored on our servers. Each chat session is processed in real-time and discarded after the response is delivered.
• Free and Premium users: The AI goal-setting assistant is available to all users, with daily usage limits for free users.
• You can choose not to use AI features — they are entirely optional and not required for core app functionality.

AimYear Server for AI Agents (MCP)

AimYear v2 works through a server that your own AI agent connects to: Claude, Claude Code, ChatGPT or another MCP client. This section covers that server.

Sign-in

• You sign in on an AimYear page with Google, Apple or email through Firebase Authentication. We receive your account ID and your email address.
• Your agent gets an access token after you approve it. We store sign-in codes and tokens only as SHA-256 hashes, never in readable form.
• Guest (anonymous) accounts can't be connected.

What we store

• What your agent saves through AimYear's tools: your yearly aim, its stages and steps, projects, daily plans and checks, focus sessions with their times and the short summaries your agent writes, your weekly commitments and your settings, such as your timezone.
• For devices where you turn on notifications: the device's push token, its platform and when it was last seen.
• If you connect WIP or Bluesky (Pro): for each network, its name, your public account name there (WIP username, Bluesky handle), when you connected it, and the credential you gave (WIP API key, Bluesky app password), stored encrypted so it is not readable in the database and never returned by any tool. Disconnecting the network deletes it.
• For each progress post you ask AimYear to make: the date, the network, the exact text posted and whether it succeeded, one record per day and network.

Posting your progress to WIP and Bluesky (Pro)

• AimYear posts only when you ask: through the add_post tool, the Post action of the evening notification, or a reply to the evening email. It never posts on its own, and at most once per day per network.
• The text is drawn from your day's record: the title of your aim and its progress, the title of your main step and whether it is done, your minutes on the aim, and your routines, with the line "Tracked with aimyear.com". Your agent can replace it with text of its own, up to 4,000 characters. Whatever is posted appears publicly under your own account on that network, under that network's terms, and stays there until you delete it there.
• Before posting, the server reads your own latest posts on that network to skip the day if you already posted there yourself. It reads nothing else from the network and stores none of it.

• This data is stored in Google Cloud Firestore in the European Union (multi-region eur3). The server itself runs on Google Cloud Run in the United States.

What we don't receive

• Your conversation with your agent. Your messages stay with your agent's provider (for example Anthropic or OpenAI) under that provider's own privacy policy. AimYear receives only the tool calls your agent sends.
• No AI runs on the MCP server, on any plan. What your agent saves is stored and computed over; it is sent to no AI provider by us and used to train no model. The only AI feature AimYear runs itself is the goal-setting assistant in the app, described under AI Features above, and it receives only the messages you type into that chat.

Logs

For each tool call the server writes one log line: the method and tool name, whether it succeeded, an error code, how long it took, your account ID and your client's name (for example "claude-code"). Argument values are never logged, so your tasks, plans and summaries don't appear in logs; only the argument names and their total length do. Logs are kept in Google Cloud Logging for 30 days and are used to find bugs and see which tools are used.

Deleting your data

Email privacy@aimyear.com from the address you signed in with, and we will delete your account and all its server data within 30 days. You can also ask for a copy of your data the same way. You can disconnect an agent at any time in that agent's settings.

Website Analytics

This website (aimyear.com) uses Plausible Analytics to count visits. Plausible sets no cookies, collects no personal data and does not track you across other sites, so we don't ask for cookie consent. The website uses no other analytics or advertising trackers.

Your Rights

You have the right to:

• Access your data
• Export your data
• Delete your data
• Opt out of analytics
• Disable AI features

Children's Privacy

AimYear is not intended for children under 13. We do not knowingly collect data from children under 13.

Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via the app or email.

Contact Us

If you have questions about this Privacy Policy, please contact us at:

Email: privacy@aimyear.com