7F Energy Balance

Who runs this service

MMFP Solutions LLC operates a self-hosted instance of 7F Energy Balance. It runs on a server the operator controls, with its own database — not on a third-party platform. There is nothing to buy, no subscription and no advertising. MMFP Solutions LLC is named here because somebody has to be accountable for how your data is handled, and that is who.

You can download a copy of your data, or delete your account, yourself from your account page. For anything else about your data, write to info@mmfpsolutions.io.

What is stored

From your Google account, when you sign in

Sign-in uses Google. Only the basic profile and email scopes are requested, and only these are kept:

Your email address.
Your name, as Google gives it, used to greet you.
Google's account identifier for you. Accounts are linked on this rather than on your email address, because an address can be given up and reissued to somebody else and an identifier cannot.

Your Google password is never seen by this service. Sign-in happens on Google's own pages.

What you write

Your weekly entries: the score you give each of the seven areas, and the notes about what drained and energized you. This is the content of the service and it is stored so it can be shown back to you week after week.

Your settings

Colour theme, background, which day your week starts on, and your timezone — the last so that "this week" means the same thing on every device you use.

Your sign-ins

For each device you are signed in on: when the session started, when it was last used, the browser's user-agent string, and the IP address it connected from. These appear on your account page so you can recognise a session that is not yours and end it. They are kept for that purpose.

Invitations

Signing up requires an invitation. Where an invitation is addressed to a particular person, that email address is stored with it, along with who issued it and whether it has been used.

Who can see your entries

Nobody but you. Not other people using this instance, and not the operator through the application.

The service has an administration page, used to issue invitations, see which accounts exist, and check which version is running. It deliberately cannot reach journal entries at all: no administrative feature reads them, counts them, or reports when one was last written. That is enforced in the code rather than left to good behaviour.

One honest limit: the operator runs the server and the database, so they have the access any system administrator has. The application gives them no way to read your entries, and they undertake not to. If that is not a trust you want to extend, this is the right moment to know it.

What is not done

Nothing is sold, rented, or shared with anyone.
There is no advertising and no profiling.
There are no analytics and no tracking of any kind — no Google Analytics, no pixels, no third-party scripts.
No third-party services are contacted while you use the app. Fonts are served from this server rather than a font network, there is no content delivery network, and the site's content security policy permits the browser to load resources only from this origin.
Your entries are never used to train anything.

Google is involved only at the moment you sign in, which happens on Google's own pages under Google's privacy policy.

Cookies

One cookie, which records that you are signed in. It is essential to the service — without it there is no way to stay signed in between pages. It holds a random session identifier and nothing about you, it is not readable by scripts, and it is not used for tracking. There are no other cookies.

How long things are kept

Your entries and settings: until you delete your account. Deleting removes them from the app straight away.
Backups: a nightly backup of the database is kept for 30 days and then removed. For those 30 days after you delete your account, a copy of it may still exist in a backup. Backups are only ever used to recover from a failure.
Sign-in sessions: they expire on their own after a period of disuse, and you can end any of them yourself from your account page at any time.
Invitations: they expire, and can be revoked before that.

Your choices

See everything about you that is stored, on your account page.
Sign out of one device, or all of them, at any time.
Download a copy of your data, as a file you can keep, from your account page.
Delete your account and everything in it, from your account page. It cannot be undone. If you can no longer sign in, write to info@mmfpsolutions.io instead.
Disconnect this app from your Google account at any time, in your Google account permissions.

Changes to this policy

If what is stored or how it is used changes, this page changes with it, and the date below changes too. A change that materially affects what is collected will be mentioned in the app rather than only here.