Privacy Policy

Last updated: October 12, 2026

Sixty-Six ("66") is designed to work entirely on your own iPhone and Apple Watch. This policy explains, plainly, what that means for your data.

Short version

• 66 does not collect, transmit, sell, or share any personal data.
• 66 has no account, no sign-in, and no server. The app makes no network requests at all.
• Everything you enter (challenges, activities, history, statistics) stays stored locally on your device.
• The only files that ever leave the app are the ones you export yourself: a backup of your data, or a diagnostic report. You choose where they go; we never receive them automatically.
• No analytics, advertising, or tracking SDKs of any kind are included in the app.

What stays on your device

All the information 66 works with, meaning your 66-day challenges, the activities you create, your history and statistics, is stored locally on your iPhone, using Apple's on-device storage. None of it is uploaded anywhere by the app.

Like the data of most apps, it may be included in the backup of your iPhone itself (iCloud or a computer) if you have turned that on. That backup is made and protected by Apple under your own settings; 66 has no access to it and no part in it.

Your backup file

At your request, 66 can export all of your data (challenges, activities, history and free sessions) into a single file, so that you can keep a copy outside your iPhone and bring it back into a freshly installed 66.

• The file is created on your device and handed to the iOS share sheet. You choose where it goes: Files, iCloud Drive, AirDrop, an email to yourself, or anywhere else.
• 66 keeps no copy of it and sends it nowhere by itself. We never receive it.
• The file is not encrypted. It contains, in readable text, the names of your activities and any reason you wrote when stopping one. Keep it somewhere you trust.
• Once the file is outside the app, it is covered by the service or device you saved it to, not by 66.
• Restoring a backup reads the file on your device only. Nothing is sent anywhere.

Importing a session

Your activities and session files are processed on your device. 66 does not upload them or include analytics or advertising tools. A file stored in iCloud or another service may be downloaded by iOS when you select it.

An imported session supplies text, durations and repetitions. 66 does not execute code or open links from it. File size, structure, permitted fields and timing limits are checked before adding an activity. Unexpected fields and certain invisible or text-direction characters are rejected.

A valid 66 signature verifies the file’s origin and that its signed contents have not changed. An invalid signature blocks import. Personal files without this signature remain importable and are marked as unverified; they pass the same format checks.

These checks do not guarantee that the text is trustworthy or the session suits you. Review every phase and its timing. Names may be spoken when voice is enabled; overly long names must be shortened first. Importing does not start the session or add it to a challenge automatically.

Apple Watch

If you use 66 with an Apple Watch, your iPhone and Watch exchange the current state of your challenge directly with each other, device to device, using Apple's WatchConnectivity framework. This exchange happens only between your own paired devices. It does not pass through any server operated by us.

Notifications, alarms, and voice announcements

66 can remind you of a scheduled activity, ring an alarm, and speak the phases of a timed sequence out loud. These features use Apple's own frameworks (Notifications, AlarmKit, speech synthesis) directly on your device. None of it involves sending anything about you or your activity off the device.

Music you start from 66

You can give an activity its music: a link, or music from the Music app on your iPhone. 66 starts it when you tap a button or say a word to Siri.

• Your music library is read only when you choose a playlist or titles, after iOS has asked for your permission. 66 keeps, on your device, the name and the identifier of what you chose. Nothing of your library is sent anywhere.
• Music from the Music app is played by Apple's own player. What the Music app does to play it, including any network use, is Apple's and is covered by Apple.
• A link is handed to iOS, which opens the app it belongs to, YouTube for instance. From there that app applies its own privacy policy. 66 itself makes no network request and receives nothing back.
• 66 never uses the microphone. A word you say to Siri is heard and processed by iOS.
• 66 downloads no music and converts no video.
• The music you chose is part of the backup file you export: the link, or the name and identifier of the playlist or titles.

Diagnostics you choose to export

66 can generate a local diagnostic report to help troubleshoot a problem, at your request. It does not contain your activity names or your stop reasons. This report is created on your device and only leaves it if and when you personally choose to share it, for example by attaching it to an email you send us. We never receive it automatically.

Children's privacy

Because 66 does not collect any personal data from anyone, this applies equally to children as to adults: nothing is gathered, regardless of age.

Changes to this policy

If this policy ever changes, for instance if a future version of 66 adds an optional account or backend feature, this page will be updated first, with a new "last updated" date, before that feature ships.

The website, separately from the app

The statements about local data above concern the 66 app. Visiting sixty-six.app is separate: AWS hosts the website and processes your IP address to deliver pages, estimate the country of the network connection and protect the service.

To understand website use and improve it, we count successful page requests and session-file download responses. The website reporting configuration records only a country, network number (ASN), general device and operating-system categories, a browser-language preference among the site's supported languages (without the full language header), whether the request came from a browser displaying a page, requested path, date and technical response information. Country, device and language categories are grouped to compare requests. It does not store your IP address, full browser identifier, cookies, query parameters or referring page in our access logs. No analytics cookie, visitor identifier, fingerprint or advertising tracker is used.

The network number can indicate hosting infrastructure rather than a residential connection. It does not establish your identity or prove VPN use. No VPN or proxy list is currently used by these reports. Location reflects the network exit country, not your precise location. Counts do not prove a download was saved or imported.

Access logs are private and retained for up to 33 days, aggregate weekly reports for 90 days, and function diagnostics for 7 days; storage expiry may take additional time to complete. Reports and their local map are available only to the site operator through authenticated AWS access, with summary emails to support@sixty-six.app. AWS is our hosting provider; the configured hosting region is the United States. No visitor data is sold or used for advertising.

These server-side measurements and security checks serve the operation, protection and improvement of this site. For information, an objection or a request concerning your data, contact support@sixty-six.app. Site measurements never include the activities stored in your 66 app.

Contact

Questions about this policy or your data can be sent to support@sixty-six.app.