SelfPathEffective October 10, 2026 · Version 2026-10-10
Privacy Policy
This English document is the governing version for the SelfPath service operated by Self Path, Israel.
Information we process
We process account details, verified email, connected login providers, profile settings, goals, actions, reviews, usage events, support requests, and the content you choose to submit to AI features.
Why we process it
We use data to authenticate you, operate and secure your private workspace, send transactional messages, provide requested AI features, support exports and deletion, prevent abuse, and meet legal obligations.
Optional usage analytics
With your permission, Microsoft Clarity uses cookies and records page visits, clicks, scrolling, device/browser information, and masked session replays to help us improve SelfPath. Text is masked; we do not send account names, email addresses, or goal and journal content as analytics identifiers or custom events. Analytics storage is enabled only after you choose Allow analytics; advertising storage remains denied. Decline or withdraw permission at any time using the controls below or in account settings. Microsoft processes this usage data under its privacy statement (https://privacy.microsoft.com/privacystatement). With the same permission, Google Analytics through Google Tag Manager measures visits to site pages and basic browser and device information. We send page paths without URL queries, account identifiers, goal titles or journal content. Google processes this usage data under its privacy policy (https://policies.google.com/privacy).
Google OAuth and Brevo
Google OAuth provides verified identity attributes when you choose Google sign-in; the sign-in flow does not retain Google access or refresh tokens. SelfPath Meet creates conference rooms without connecting an external meeting account. Brevo sends transactional verification, password-reset, and email-change messages. We do not enroll you in marketing email through registration.
Optional Google Calendar integration
Connecting Google Calendar requires separate consent from Google sign-in. With your permission, SelfPath reads your calendar list and selected calendars' events, including titles, descriptions, locations, dates, times, time zones and recurrence, and creates, updates or deletes events when you request it. We use this access to provide the calendar integration and background synchronization. We store the connected Google account identity, calendar settings, synchronized event data and synchronization state on our servers; access and refresh tokens are encrypted at rest. Disconnecting removes local tokens, synchronized event data and synchronization state without deleting your events in Google Calendar. Account deletion also cleans up the integration. You can separately revoke SelfPath's access in your Google Account settings. SelfPath's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements (https://developers.google.com/terms/api-services-user-data-policy).
Storage, security, and retention
SelfPath uses server-backed storage, protected cookies, CSRF controls, and account-scoped access. We retain account data while your account is active and remove user-scoped data when you complete immediate account deletion, except where limited retention is legally required.
Your choices and rights
Depending on your location, you may access, correct, export, delete, restrict, or object to processing of personal data. Use account settings or contact [email protected]. You may also complain to your local data-protection authority.
International use and age
SelfPath is a global service operated by Self Path in Israel. Data may be processed across borders with appropriate safeguards. The service is not available to children under 13; users who require parental consent under local law must obtain it before registering.
Contact
Self Path, Israel is responsible for this service. Privacy and support requests may be sent to [email protected].