MyGuys Privacy Policy

Last updated: October 2, 2026

MyGuys (“the app”) is provided by MyGuys Marketing and Automation Inc., an Ontario, Canada company (“we”). This policy is governed by Canada’s PIPEDA and, where it applies, Quebec’s Law 25. Home

What we collect

• Google sign-in data. You sign in with Google through Supabase Auth. We receive your name, email address and profile picture (avatar) from your Google account to identify your account and show who you are in the app.
• Microsoft sign-in data. If you sign in with Microsoft, you do so in your browser through our authentication provider Supabase’s Azure (Microsoft Entra) integration. We receive your name, email address and Microsoft account ID.
• Sign in with Apple data. If you use Sign in with Apple, we receive your name (on your first sign-in only), your email address or Apple’s private relay address (whichever you choose to share), and your Apple user ID.
• Apple refresh token. For Apple accounts we keep an Apple refresh token on our server only (never on your device) so we can revoke MyGuys’ access with Apple when you delete your account. It is deleted after revocation.
• Email and password accounts. When email sign-up is enabled, you can create an account with an email address and password. Supabase stores the password hashed, never in readable form.
• Push notification tokens. To deliver notifications we store a push token for each of your devices.
• Tester allowlist entry. While the app is in testing, access is limited to an allowlist of email addresses. Your email is on that list if you were invited.

Why we collect it

• Microsoft sign-in data (name, email, account ID): to sign you in and identify your account.
• Apple sign-in data, email and password: to sign you in and identify your account.
• Apple refresh token: only to revoke access with Apple when you delete your account.
• Name, email and avatar: to sign you in, identify your account and display your profile.
• Push tokens: to deliver notifications to your devices.
• Allowlist entry: to control who can use the app during testing.

Where it is stored and who processes it

• Supabase provides our database and authentication. Your data is stored in Canada (ca-central-1).
• Google Firebase Cloud Messaging delivers push notifications. Firebase Cloud Messaging may process data outside Canada. On iOS, push notifications are delivered via Apple Push Notification service.
• Apple (Push Notification service) delivers push notifications to iOS devices.
• Google provides sign-in (Google Sign-In).
• Apple provides Sign in with Apple.
• Microsoft provides sign-in (Microsoft account, via Azure / Microsoft Entra).
• Resend sends our account emails (such as sign-up confirmation and password reset), when email sign-up is enabled. Resend receives your email address and the message content.
• Google Cloud Run, in a Canadian region, runs the token service that handles the Apple refresh token and revokes it on deletion.

Artificial intelligence

App release notes are generated by Anthropic’s Claude from developer commit messages only. No user data is sent to Anthropic. We will update this policy before any in-app AI feature launches.

Deleting your account

You can delete your account in the app. Deleting it removes your account, your sign-in identity (including any Google, Apple or Microsoft sign-in identity), your profile (name, email, avatar), your Apple refresh token (revoked with Apple first, then deleted) and your push tokens for all your devices. The one exception: a tester allowlist entry (email) is kept until removed by an admin.

How long we keep it

We keep your data while your account is active. After you delete your account, your data is permanently removed from backups and logs within 30 days.

What we do not do

• We do not sell your personal data.
• We do not show ads.
• We do not track you across other apps.

Children

MyGuys is not intended for anyone under 16.

Contact

For privacy questions or deletion requests, contact admin@myguys.work.