Eightify

GDPR overview

There is no GDPR implementation to report. The privacy policy never mentions the GDPR, and it never mentions the CCPA either; no legal basis for processing is stated anywhere in the document. No EU representative under Article 27 is named, no data processing agreement is published or offered, no subprocessor list exists, and no hosting country or region is declared. International transfers and standard contractual clauses are not addressed at all. What the policy does grant is a set of practical rights: users can review, change or delete their personal information by writing to support. The governing law is that of Delaware, United States, with disputes routed to arbitration or mediation. For a European buyer, the usual documentation trail is absent rather than partially covered.

Who owns the data?

Eightify is published by Rational Expressions Inc., a company based in Dover, Delaware, United States, and it is that company that holds the data. Sign-up collects a name and an email address; the service also logs derived data automatically, including IP address, browser type, operating system and access times, alongside in-app usage. Rights are exercised manually, through a single channel: users can review, change or delete their personal information by emailing support@eightify.app, and iOS users can delete their profile from within the app. The privacy policy in force is dated 16 October 2025.

Reuse rights

The privacy policy states that information is used to manage the account, produce anonymized analytics and ensure the functionality of the services. Cookies are described as serving the core functions of the site and of the service, and the only third-party cookie declared is the one set by the embedded YouTube player. Users who consent also receive personalized emails based on their summary history, with an unsubscribe link in each message. Two silences are worth noting rather than reading either way: the policy never mentions training AI models on customer data, and it never mentions selling or otherwise sharing data commercially.

Data retention & training

Hosting summary

No hosting location is declared. The privacy policy names no country or region where data is stored, and no infrastructure provider is identified anywhere on the site. The only technical element observable from the outside is that the domain is served behind Cloudflare (AS13335) on anycast IP addresses, which tells you how the site is delivered rather than where the data ends up. The one piece of jurisdictional information available is the publisher itself: Rational Expressions Inc. is established in Dover, Delaware, United States, and the terms of use place the governing law in Delaware. A European buyer should therefore assume US jurisdiction by default and treat the storage location as undocumented, since nothing published confirms it either way. No data processing agreement, no subprocessor list and no transfer mechanism are published to fill the gap.