Privacy Policy

Last updated: 13 October 2026

This policy explains what personal data we process when you visit cinfold.app, join the waitlist or use the Cinfold app, why we do it, and what rights you have.

1. Who is responsible

Interlace GmbH
Auguststraße 1, 10117 Berlin, Germany
Managing director: Andreas Stefan Peters
Email: info@interlace.software

We have not appointed a data protection officer because we are not legally required to. For all privacy questions, write to the address above.

2. Summary

• We only process the data needed to run the website, the waitlist and the app.
• We don't use analytics, tracking or advertising cookies, and we don't sell data.
• Your goal is private to the world and open to your inner circle (up to 8 people you invite). Nobody else sees it. Your mood is only shared if you choose to.
• Our data is hosted in the EU (Frankfurt, Germany).
• You can delete your account and all your personal data at any time in the app.
• The app currently doesn't use AI. Earlier versions had optional AI features; see section 5.

3. Visiting the website

When you open cinfold.app, our hosting provider automatically processes technical data that your browser sends: IP address, date and time, page requested, referrer, browser and operating system. This is required to deliver the website and keep it secure.

• Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure, working website).
• Retention: server logs are deleted automatically after a short period, at most 30 days, unless needed to investigate a security incident.

Fonts and all other website files are served from our own domain. No data is sent to Google or other font providers.

4. Waitlist

If you join the waitlist, we store:

• your email address,
• the email addresses of the friends you enter,
• the time of sign-up and the language of the page.

We use this to invite you (and, together with you, your inner circle) to the test phase and to understand how many people are interested. After you sign up you get one confirmation email; when it's your turn, one invitation email.

• Legal basis for your email: Art. 6(1)(a) GDPR (your consent by submitting the form). You can withdraw consent at any time by emailing us; your entry is then deleted.
• Friends' email addresses: you may only enter people who agree to be contacted about Cinfold. We store their addresses only to group you as an inner circle. We do not send them marketing emails. If we contact them at all, it is a single invitation that you asked us to send, and we delete their address if they don't respond or object. Legal basis: Art. 6(1)(f) GDPR.
• Retention: until the waitlist is closed or you withdraw, at most 12 months after sign-up.

5. Using the app

Account and login

To create an account and log in we process your email address and your password. You log in with your email and password, or with a one-time link sent to your email ("magic link"). Your password is stored only as a secure, irreversible hash by our login provider; we cannot see it.

Profile

Your display name, optionally a profile photo and location. The people in your inner circle see your name and photo.

Your goal, check-ins and chapters

Your one active goal: its title, the deadline you chose, optionally why it matters, and when you set or changed it. Your weekly check-in: the status of your goal (on track, watch, off track) and, if you write one, a short note for your inner circle. When a goal ends, you mark it as achieved, missed or dropped and can add one sentence on what you learned; it then stays on your profile as a chapter.

Goals, pyramids, areas and other planning data from earlier versions of Cinfold are kept in your account but hidden. Nobody else can see them.

Import from your own AI assistant (optional)

You can copy a prompt into an AI assistant you use (for example Claude or ChatGPT) and paste its answer into Cinfold. That exchange happens between you and your assistant's provider under their terms; we are not involved. We only receive what you paste or upload. Before anything is saved you see every item and decide what to keep. We store only the items you keep (values, themes, blind spots, questions, suggestions for your areas); the text you pasted is not stored.

• Legal basis: Art. 6(1)(a) GDPR and, where the content reveals special categories of data, Art. 9(2)(a) GDPR (your consent by importing). This import was part of an earlier version and is no longer offered. If you imported a profile then, you can delete it in the settings at any time.

Mood

You can log your mood from 1 to 10, daily or weekly – your choice. We store one entry per day with the date and whether it is shared. This is voluntary. You decide each time and in the settings whether your inner circle can see it; unshared moods are visible only to you.

Challenge links

You can send a challenge as a link. Anyone who opens the link sees your display name and photo, your goal and its deadline, your statement and your question – nothing else. A link works once and expires after 14 days.

The person who opens it can answer without an account: they enter a first name, a score from 1 to 10 and an answer. We store these together with the time; only you (the person who asked) can see them. If they then create an account with the same link, the answer moves to their account and they join your inner circle. Answers given without an account are deleted when you delete your account.

• Legal basis: Art. 6(1)(b) GDPR for you; for the person answering, Art. 6(1)(f) GDPR (delivering the answer they chose to send).

Reminders

In the app you get at most one reminder a day: the weekly check-in, a daily mood reminder if you chose daily moods and used the app in the last 7 days, or – when your deadline has passed – a reminder to close the chapter. For a passed deadline we also send one email per goal.

When Cinfold changes substantially, we send people who already use it one information email about the change (for example when it became the one-goal app).

• Legal basis: Art. 6(1)(b) GDPR. You can unsubscribe from emails with one click in every email or in the settings.

Inner circle and challenges

Your connections to other users (via invite code or link) and who invited you, the challenges and requests you send (statement, open question and, if you give one, your own score from 1 to 10, which only you can see), and the answers you give (score 1–10 and text). An answer is visible only to you and to the person who asked. You can delete your own answers.

Notifications and usage

In the app you get notifications, e.g. when someone in your inner circle sets a new goal, closes a chapter, answers you, challenges you or joins your inner circle. They are stored in your account until you delete it. We also store when you last opened the app, and count activity (such as the number of goals, check-ins and answers) to see how Cinfold is used. We look at these numbers only in our own admin overview, never share them, and don't use any tracking or analytics service for this.

What we need this data for

To provide the app features you use: your goal and chapters, your inner circle, check-ins, moods, challenges, answers and notifications. We use the activity counts to run and improve Cinfold (legitimate interest, Art. 6(1)(f) GDPR).

• Legal basis: Art. 6(1)(b) GDPR (performance of the contract of use). Where you share mood data, Art. 6(1)(a) and Art. 9(2)(a) GDPR (your consent, which you can withdraw at any time via the settings).
• Retention: as long as your account exists. When you delete your account, we delete your profile, goals and chapters, check-ins, mood data and connections. Answers you gave to other people's challenges are deleted as well. Backups are overwritten within 30 days.

AI features (earlier versions)

The current version of Cinfold doesn't send any of your data to an AI provider. There is no AI-written weekly question any more; the weekly check-in reminder is created by fixed rules.

Earlier versions had optional AI features (a first-week summary, review reports and a weekly question) that ran only after you had agreed. Texts created back then stay in your account, visible only to you, until you delete your account. Anthropic deleted the data sent to it after the short retention period set out in its commercial terms.

Technically necessary storage on your device

The app stores a session token (to keep you logged in) and your language choice in your browser. This is strictly necessary to provide the service you requested (§ 25(2) no. 2 TDDDG). We use no other cookies or similar technologies.

6. Service providers

We use the following processors. Each is bound by a data processing agreement under Art. 28 GDPR.

Because these providers are US companies, access from the USA cannot be completely ruled out. Such transfers are based on the European Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR) and, where the provider is certified, on the EU-US Data Privacy Framework (Art. 45 GDPR).

7. Who else sees your data

• Your inner circle (up to 8 people you invite): your name and photo, your active goal with its deadline and reason, your weekly status and notes, your chapters (outcome and what you learned), your mood if you share it, and the challenges you send them. Challenge answers are visible only to the person who asked and the person who answered.
• Us, as operators: in an admin overview we see your name, email, when you joined and last opened the app, whether you have an active goal and its deadline, and the number of your chapters, check-ins, challenges and answers – not their content.
• Nobody else. We don't sell or rent data and don't pass it on for advertising. We only disclose data to authorities if we are legally obliged to.

8. Your rights

You have the right to:

• access your data (Art. 15 GDPR),
• rectification (Art. 16),
• erasure (Art. 17), which you can do directly in the app with "Delete account",
• restriction of processing (Art. 18),
• data portability (Art. 20),
• object to processing based on legitimate interest (Art. 21),
• withdraw consent at any time with effect for the future (Art. 7(3)).

To exercise these rights, email info@interlace.software.

You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin, www.datenschutz-berlin.de

9. Minimum age

Cinfold is intended for people aged 16 and over. When you create an account you confirm that you are at least 16; we store the time of this confirmation with your account. If we learn that someone younger has signed up, we delete the account.

10. Security

Data is transmitted encrypted (HTTPS). Access to data in our database is restricted by access rules, so users can only read what they own or what has been shared with them.

11. Changes

We update this policy when the app or the legal situation changes. The current version is always available at cinfold.app/privacy.