This Privacy Policy explains how Eights App Inc. ("Eights," "we," "us") collects, uses, and protects your personal information when you use the Eights mobile application (the "App") and the website at eightsapp.com (together, the "Services"). We are a Canadian company and comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.
The short version: your memories are private by design. They are visible only to you and the people you explicitly share them with — there is no public feed and no broadcast option, ever. We collect only what we need to run Eights, we don't sell your personal information, and we never use your content for advertising or to train AI models.
Account information. You sign in with Sign in with Apple. We receive your name and email address as provided by Apple (if you use Apple's "Hide My Email" option, we receive only your private relay address — that works fine with Eights). You then create a profile: a handle, a display name, and optionally an avatar photo.
Your content. The 8-second videos you record or import, their captions, comments you write, capsules you create or join, and the people you manually tag in memories. Two details worth knowing:
Sharing information. When you share a memory or capsule, we process the sharing relationship (who you shared with, group membership, capsule membership) so we can deliver it. Recipients can save shared memories for offline viewing on their own devices — see Section 5 for what that means for deletion.
Push notifications. If you enable notifications, we store your device's push token (Apple Push Notification service) to deliver them.
Purchase information. Your Eights+ subscription status (active plan and expiry). Payment is handled entirely by Apple — we never see your payment card details. We also count your posts against the free tier's monthly budget, using the timezone your device reports.
Usage and device information. Basic technical data such as device model, OS version, app version, language, and diagnostic data (for example, crash logs) so we can keep the App working well.
We do not collect your location, your contacts, your browsing history, or advertising identifiers, and we do not track you across other companies' apps or websites.
We use personal information to: provide the Services (store your memories, sync them, deliver what you share, power search over your own captions, transcripts, and tags); process and manage your subscription; provide customer support; maintain safety and security (processing reports, enforcing blocks, preventing fraud and abuse); fix bugs and improve the App using aggregated or de-identified diagnostics; and communicate with you about the Services.
We do not sell or rent personal information, use your content for advertising, or use your content to train machine-learning models. People-tagging in Eights is manual only — we do not run automated face recognition.
Your content is encrypted in transit (TLS) and at rest (AES-256). Who can see a memory is enforced in our database itself — a memory is visible only to its creator and the people it was explicitly shared with. Our media storage is designed to be "blind": video bytes travel directly between your device and storage via short-lived signed links, and our servers never read or decode your videos in normal operation.
An honest limit: Eights is not end-to-end encrypted. Like most consumer apps, we hold the keys to our storage, which means we are technically able to access stored content — and may need to, for example to review an abuse report or respond to a lawful request. We describe our practices accurately and will never claim otherwise.
We use a small number of service providers ("sub-processors") under contractual confidentiality and security obligations:
Depending on these providers' data-centre locations, information may be stored or processed outside your province or outside Canada (including in the United States), where it may be subject to the laws of those jurisdictions. Beyond these providers, we share personal information only with people you choose (recipients of your shares), and with authorities where required by law or necessary to protect the rights and safety of our users or others. If Eights App Inc. is involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction, subject to this policy and notice to you.
Deleting a memory is a hard delete: the database record is removed (which revokes everyone's access) and the stored video files are deleted. You can delete your entire account from within the App (Profile → Delete Account); this removes your content, profile, and authentication record, and clears local caches on your device. Residual copies leave encrypted backups within 90 days. We may retain limited records where required by law.
One honest caveat about shared copies: if someone you shared with saved a memory for offline viewing, that copy lives on their device. When their device reconnects, deleted or unshared memories are purged from their offline shelf automatically — but a device that stays offline keeps its copy until it reconnects. Deletion across other people's devices is honest-best-effort, not instantaneous.
You can report any memory, comment, or person in the App; reports come to our team and are actioned promptly (see our Support page for the current commitment). Blocking someone severs the friendship, all shares in both directions, shared capsule membership, search visibility, and mentions. If a breach of security occurs that creates a real risk of significant harm, we will notify you and the Office of the Privacy Commissioner of Canada as required by PIPEDA. We may report content involving the exploitation of minors to relevant authorities.
The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, contact us at [email protected] and we will delete it.
Subject to applicable law, you may: access the personal information we hold about you; correct inaccurate information; delete your content and account (see Section 5); export your data (contact us — currently a manual process we complete within 30 days); withdraw consent to our collection and use of your information (which may mean you can no longer use the Services); and complain — we'd rather hear from you first at [email protected], but you also have the right to complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca) or your provincial privacy regulator.
If you are in Quebec, you have additional rights under Law 25, including data portability; requests can be sent to our privacy officer at the address below. If you are in the European Economic Area or UK, you may have rights under the GDPR/UK GDPR, including access, rectification, erasure, and portability; our legal basis for processing is the performance of our contract with you and our legitimate interests in operating the Services.
Privacy Officer, Eights App Inc. 375 University Avenue, Suite 3379 Toronto, ON M5G 2J5, Canada [email protected]
We may update this policy from time to time. If a change is material, we will notify you in the App or by email before it takes effect. The "Last updated" date at the top always reflects the current version.