Privacy Policy

Further is built and operated by Alexandru Efros, through Afterframe Studio, in Romania.

For questions about this policy or about your data, write to hello@afterframe-studio.com.

Everything you create in Further is stored first in the app's own storage on your device, and it stays there whether or not you have an account. The app is designed to work with no account and no connection, and nothing you write waits on a network before it is saved.

What is stored there may include the reflections and letters you write, the identity profile the journey builds from your answers, the photographs you choose for your Vision board, your position in the journey and the days you have completed, the meditation and movement sessions you have completed, habits and habit-related information, your answers in the money check-in, anything you mark as a favourite or add to Today, and settings such as your name, your reminder time, haptics and reduced motion.

If you create an account, some of that is also copied to a server so it survives a lost phone. The next section says exactly which parts, who holds them and how to remove them. If you do not create one, nothing you write leaves the phone except through your own phone backup, described below.

Further does not use advertising identifiers, advertising or behavioural tracking, and does not sell anything to anybody. It does use crash reporting and a small number of counted events, described in their own section below. It does not request access to your contacts, location, calendar or health records. It asks for the photo library only when you choose a picture for your Vision board, and for the microphone only when you dictate.

An account is optional. Further works fully without one, and nothing in the app is locked behind signing in. What an account buys is a copy of your journey that survives a lost phone.

You create it with an email address and a password. We store the address so the account can exist and so you can sign in again; we never see your password.

When you are signed in, these are copied to the server as you write them: your reflections and letters, the identity profile the journey builds, your position in the journey, the days and practices you have completed, and the photographs you chose for your Vision board. Your device settings, your habits and your money check-in stay on the phone only.

The copy is held on our behalf by Supabase, on servers in Frankfurt, Germany, inside the European Union. Access is restricted to your own account by a rule the database enforces on every read and every write, so no other user of Further can reach your rows or your photographs.

Your Vision photographs are kept in private storage rather than public, and they are the pictures you chose from your own phone. They are never shown to anyone else and never used for anything but showing them back to you.

It is kept until you delete it. Deleting the account removes the email address, every row and every photograph belonging to it, and the app does not clear anything on your phone until the server has confirmed the deletion, so a failed attempt cannot cost you your journey twice.

You delete it from inside the app, in Settings. https://afterframe-studio.com/further/delete-account sets out the steps and what happens, including for somebody who has already uninstalled.

When Further crashes, a crash report is sent to Sentry so the fault can be found and fixed. It carries the technical details of the crash, the device model and the app version. It does not carry your reflections, your name, your email address or anything you wrote.

Further also counts six things, and the list is closed rather than illustrative: the app being opened, an act of the opening story being reached, onboarding being finished, a day of the journey being seen, a day being completed, and a chapter being completed. The three that name a day carry a chapter name and a day number and nothing else, and the one that names an act carries the act's name and its place in the sequence. These go to PostHog.

Both are tied to an installation identifier that Further generates itself: thirty two random characters, created on the device, not the Android advertising identifier and not linked to your email address or your account. Reinstalling the app produces a new one. Its only purpose is to tell forty people opening the app once from one person opening it forty times.

This exists so we can tell whether the journey is working, which day people stop on, and whether a crash is affecting one phone or all of them. It is not advertising, it is not sold, it is not shared with anyone else, and it is never used to build a profile of you.

Because that identifier is not linked to your account or your email, nobody, including us, can look up which events came from a particular person. That is a property to state rather than a service to offer: it means we cannot find and remove your events on request, and it also means there is nothing there that points back at you.

Android includes app data in the backup your phone makes to your Google account. That feature is called Auto Backup, it is switched on by default on most phones, and it covers Further the same way it covers other apps you have installed.

This means a copy of what you write in Further may exist in your own Google account backup, up to the size limit Android applies. That copy belongs to you and is protected by your Google account rather than by us. Afterframe Studio has no access to it.

You control this in your phone's own settings, not in Further. On most Android phones the path is Settings, then Google, then Backup. Turning phone backup off stops Further being included, and it also stops your other apps being included.

It is worth knowing in both directions. Without an account it is the only thing that lets a journey survive a new phone, since Further has no export. It is also the reason uninstalling the app is not by itself a guarantee that every copy is gone.

The photographs are packaged inside the app, so every screen draws with no connection at all.

The meditation recordings are not, since version 1.1. Each one is downloaded the first time you play it and kept on your phone afterwards, so a meditation you have listened to once plays again with the wifi off. They come from public storage and the request carries nothing about you: it is the same address for everybody, with no account and no identifier attached, so which meditation you played is not knowable from it.

The other three reasons Further uses the internet are the ones described in their own sections: your account, if you have one; crash reports; and the six counted events.

Further does not use your reflections or other stored journey data for advertising, profiling, or training any model.

If a future version changes what is sent or who holds it, this policy will be updated before those changes take effect.

You can speak a reflection instead of typing it. The microphone is used only while you are on a writing screen and only after you press the microphone control. Further does not use the microphone in the background and does not save your speech as an audio file.

When you use dictation, your speech is processed by the speech recognition service provided by your device or operating system. The exact service and the way it processes speech vary by device, operating system and your own settings, and on many phones that service sends the audio to its provider.

Further receives the text that service returns and stores it on your phone with the rest of your writing. Further does not receive or keep a separate audio recording.

Because that service is separate from Further, how it handles your voice is governed by its own privacy terms. If you would rather nothing left the device that way, type your reflection instead. A dictated reflection and a typed one are the same reflection once the text arrives.

Because it is what the app is for. Further needs to keep your reflections if you are to return to them, and it needs to keep your progress if the journey is to continue where you left it.

Some reflections may contain information about how you feel, your wellbeing, your relationships, your finances or other personal parts of your life. You choose what to write, so please do not enter anything you would not want stored on your device and in your own phone backup.

Further does not ask you for medical information and is not a medical or diagnostic service.

Your writing is not sold, not shown to other users, not used for advertising, and not used to train any model.

Without an account, Afterframe Studio cannot reach your journey at all, because no copy of it exists anywhere but your phone and your own phone backup.

With an account, a copy exists on servers Supabase operates for us in Germany, and it is technically reachable by us in the way any service operator can reach its own database. It is not read in normal operation, and the account rules stop any other user from reaching it. Supabase acts as our processor and does not use your content for its own purposes.

Three other things are worth naming rather than leaving to be discovered. Dictation, described above, where speech is handled by your device's own recognition service. Your phone's backup, described above, where a copy sits in your own Google account. And crash reports and counted events, described above, which carry nothing you wrote.

Anyone who can unlock your phone can open Further and read what is in it, so your phone's passcode, fingerprint or face unlock is the real protection on your journey.

Until you remove it. Nothing expires and nothing is deleted on your behalf because you have not opened the app for a while, since a journey that quietly forgot last month would be worse than useless.

You remove what is on the phone by clearing the app's data or by uninstalling Further. Your phone's own backup settings affect what happens to a copy in your Google account, so uninstalling on its own is not a guarantee that every copy is gone. https://afterframe-studio.com/further/delete-data explains both.

If you have an account, the copy on the server is kept until you delete the account, and uninstalling the app does not delete it. https://afterframe-studio.com/further/delete-account explains that half.

There are two things to delete and they are separate, because one of them may not exist for you.

What is on the phone you delete yourself, either by clearing the app's data from your phone's settings or by uninstalling Further, and then by checking your phone's backup settings if you want the copy in your Google account gone as well.

The account, if you made one, you delete from inside Further, in Settings. It removes the email address, every row and every photograph belonging to it. The app clears the phone only after the server has confirmed, so an attempt that fails leaves your journey where it was rather than removing it twice over.

https://afterframe-studio.com/further/delete-data sets out the first. https://afterframe-studio.com/further/delete-account sets out the second, including what to do if you have already uninstalled the app.

Crash reports and counted events cannot be deleted on request, because the installation identifier they carry is not linked to your account or your email and cannot be looked up by anybody, including us. Nothing in them names you or contains anything you wrote.

Depending on your circumstances and applicable law, including the GDPR, you may have the right to access your personal data, correct it, request its deletion, restrict or object to certain processing, request portability where applicable, and complain to a supervisory authority.

Without an account, most of these are already in your hands rather than in ours: what the app holds is what it shows you, you correct it by editing what you wrote, and you erase it by clearing the app's data or uninstalling it. There is no copy on our side that we could retrieve and send to you.

With an account, the same is true through the app itself, which shows you everything the server holds and writes your corrections back to it, and the account deletion in Settings is the erasure. If you would rather have a copy sent to you or a deletion carried out on your behalf, write to us and we will do it.

If you have a privacy question, or you believe Further is handling your information incorrectly, write to hello@afterframe-studio.com. You will get an answer within the applicable legal period, normally one month.

You may also complain to the Romanian supervisory authority, the National Supervisory Authority for Personal Data Processing, known as the ANSPDCP.

Further is designed for adults. It is not directed at anyone under 18 and is not designed for use by children, and we do not knowingly collect personal information from children.

If you believe a child has entered personal information into Further, write to hello@afterframe-studio.com.

This policy is updated when Further's features or data practices change. A material change moves the version number and the effective date at the top of this document.

Version 1.2, of 23 August 2026, adds a sixth counted event. Further's opening is a story now rather than a set of questions, and it counts which act somebody reaches, so the list above went from five to six. Nothing else about what is collected, who holds it or how long it is kept has changed.

Version 1.1, of 22 August 2026, is the update that added the optional account, crash reporting, the counted events and the downloaded meditation recordings. Version 1.0 described an app with none of those and was accurate when it was published.

The current version is always at https://afterframe-studio.com/further/privacy.

Alexandru Efros, Afterframe Studio, Bucharest, Romania. hello@afterframe-studio.com.