1. Summary
SELFLEX processes visited domains, page titles, URLs, search queries, and visible usage time to provide digital wellbeing insights. Records are stored by default in the browser’s extension-specific storage.local area. SELFLEX has no remote user database or analytics server. Records leave the device only if you turn on the optional SELFLEX Sync feature, and then only into your own iCloud account (see section 5).
2. Data processed
- Visited URL and domain
- Page title and favicon address
- Visible-tab duration and visit time
- Queries on supported search engines
- Custom categories, exclusions, and privacy preferences
- Screen-sharing detection state
3. Purpose
Data is used only to calculate dashboard metrics, category distribution, weekly and hourly patterns, search topics, and break reminders. SELFLEX does not build advertising profiles or sell data.
4. Storage and transfer
Browsing records remain on your device by default. A network request may be made to a visited website to display its favicon; this is not a request to a SELFLEX collection server. Safari native messaging stays between the extension and its containing macOS app. Apart from that, SELFLEX Sync is the only case in which records leave the device.
5. SELFLEX Sync and iCloud
SELFLEX Sync is optional and disabled by default. When you enable it, the data groups you select are encrypted on the device and written into the private iCloud database of your own Apple account, never to a SELFLEX server. The encryption key is held in your iCloud Keychain, so the payload cannot be decrypted or queried by Apple, and SELFLEX has no access to these records. Page titles, full URLs, and search queries are separate groups that can be switched on and off individually. What is transferred, who can reach it, and what the encryption does not cover are defined in the SELFLEX Sync Data Processing Statement. iCloud storage, account security, and recovery keys are subject to Apple’s terms.
6. Your controls
- Privacy mode permanently removes paths, titles, and search queries.
- Specific websites can be excluded from measurement.
- One domain or all local records can be deleted.
- Data can be exported and restored through a local JSON file.
- Sync can be turned off entirely or per group, and “Delete cloud copy” removes the iCloud record while the data on your device stays.
7. Permissions
SELFLEX requests storage, tabs, alarms, notifications, and Safari nativeMessaging. It runs on HTTP(S) pages to measure time. See the Transparency Center for details.
8. Children’s privacy
SELFLEX is not directed at children and does not collect age information. The device owner is responsible for installing the extension and managing its data.
9. Changes
Material policy changes will be noted in the changelog and reflected in the update date above.