Privacy Policy

1. Data Controller & Core Commitments

MAGIFY is operated by Scott Walker (sole trader, trading as On When Out) in the United Kingdom. Personal and operational memory belongs exclusively to the person or organisation that created it. We do not sell your data, we do not build advertising profiles, and we do not permit third-party surveillance inside our platform.

2. Information We Collect

When using the MAGIFY Librarian and public services, we collect only the minimal data required to provide continuous memory services:

• Account Credentials: Email address and authentication tokens via Google Firebase Authentication used to verify your identity.
• Continuity Records: Operational timeline events, notes, update threads, and situational tags you explicitly submit.
• Evidence Files: Documents, receipts, quotes, and photographs you upload and attach to your continuity records.
• Early Access Requests: Name, email address, continuity focus, and notes provided voluntarily when requesting access via email.

3. Cloud Infrastructure & Account Isolation

User records and uploaded files are hosted on Google Cloud Firebase infrastructure (Firestore and Firebase Storage) governed by strict security rules. Records are scoped strictly to your authenticated account ID, preventing access from other users. We do not use third-party cryptographic blockchain or ledger anchoring; attachments are preserved in account-scoped storage connected to your timeline records.

4. Sensitive Personal Data Notice

During the gated Early Access evaluation phase, users must not upload special category personal data, including medical or clinical records, banking passwords, or government identity documents. Health continuity capabilities remain restricted pending clinical governance review.

5. Zero Advertising & No Marketing Trackers

We do not partner with ad exchanges, data brokers, or behavioral tracking networks. No Google Analytics, Meta pixels, or advertising tracking scripts are loaded on MAGIFY web pages or application screens.

6. Your Rights: Export & Deletion

Under UK GDPR and applicable data protection legislation, you retain full rights to request an export of your operational data (available in open JSON and Markdown formats) or complete deletion of your records and attached files. To exercise these rights or discuss privacy governance, contact Scott Walker at feedback@magify.co.uk.