Myfield Privacy Policy

1. Overview of Myfield

Myfield builds local-first products and infrastructure for user-controlled digital spaces. Myfield is designed around persistent user-owned data, device-based authorization, and privacy-preserving services rather than temporary sessions, platform-owned profiles, or background data collection.

Myfield products may be delivered through browser extensions, web apps, mobile apps, desktop apps, APIs, or other clients. Turn Field is one current product in the Myfield product family.

Across Myfield Services, the core privacy principles are user control, local storage by default, minimal permissions, and explicit user-invoked processing. Myfield does not treat a user's private workspace as platform-owned data.

2. Local-First Architecture and Data Processing

Myfield Services are designed around a local-first architecture and limited data processing principles. User content remains on the user's device by default unless the user explicitly invokes a cloud-based feature such as sync, backup, sharing, publication, or AI-powered processing.

Different Myfield products may save, organize, refine, sync, publish, or process different types of user-selected content.

Myfield Services are designed to minimize unnecessary data collection, background monitoring, and remote storage. Saved user content remains on the user's device by default and is not uploaded to Myfield servers unless the user explicitly chooses a cloud feature such as encrypted sync or Myfield AI for user-selected content.

3. Information We Collect and Process

Myfield Services do not require traditional account registration and do not collect users' names, email addresses, phone numbers, or similar identity information to use local-first features.

Myfield Services may generate technical identifiers through the browser's local secure storage, device secure storage, operating system keychains, passkeys, local cryptographic keys, or Myfield Keychain mechanisms. These identifiers are used solely to operate and secure the Services, including local storage, device authorization, encrypted sync, and optional Myfield AI access.

User-saved content is stored locally on the user's device by default and is not uploaded to Myfield servers unless the user explicitly requests cloud, sync, or AI-powered processing for selected content.

When encrypted sync is enabled, supported object payloads are encrypted before they are uploaded to the cloud sync service. App-level content is not sent to the sync service as plaintext, but the sync service still processes limited protocol metadata needed to route, store, authorize, and reconcile encrypted updates.

For AI features, Myfield only receives content when the user explicitly requests an AI-powered action. Product-specific rules may limit which content can be sent. Submitted data may include user-selected content, prompts or instructions, source references, and related request metadata needed to generate the requested result.

When the user enables Myfield AI or other authorized cloud features, Myfield may create or use a Myfield Keychain and passkey-based authorization. This may create technical authorization records, device identifiers, public key material, and encrypted recovery or authorization metadata. These records are used to verify that the device is authorized to use the requested Myfield feature and do not require the user's name, email address, or phone number.

Myfield Services may also process limited technical information necessary for operation and security, including:

• Browser, app, operating system, or extension version
• Basic diagnostics and error logs
• Limited usage, quota, billing, and reliability metadata where necessary to operate requested features

Myfield Services do not collect users' browsing history unrelated to user-requested functionality and do not continuously monitor user activity.

4. How We Use Information

Information processed by Myfield Services is used only for purposes related to providing, securing, operating, and improving the Services, including to:

• Provide and maintain features requested or enabled by the user
• Operate local-first, authorization, sync, AI, publication, or other user-invoked workflows
• Maintain reliability, security, abuse prevention, quota enforcement, and service integrity
• Diagnose issues, respond to support requests, and improve product stability
• Comply with applicable legal obligations

Submitted content is used only to generate the user-requested result. Myfield does not retain submitted content after AI processing beyond transient processing required to provide, secure, debug, or operate the requested service, analyze it for unrelated purposes, sell it, share it with advertisers or data brokers, or use it to train AI models. Infrastructure and AI service providers may process request data according to their applicable confidentiality, security, abuse-prevention, and legal compliance obligations.

5. Data Sharing

Myfield does not sell user data.

Information may only be shared with trusted infrastructure, storage, security, payment, support, or AI service providers strictly as necessary to provide the requested functionality.

These providers are contractually required to handle data securely and only for the purpose of providing the requested service.

We may also disclose information if required to comply with applicable laws, regulations, legal processes, or enforceable governmental requests.

6. Human Access to Data

Myfield personnel do not access user-submitted content except:

• When explicitly requested by the user for support purposes
• When necessary to investigate abuse, fraud, reliability, or security issues
• When required by applicable law

7. Browser Extension, App, and Client Privacy

Myfield clients are designed to comply with applicable browser extension, mobile app, desktop app, web app, application marketplace, and platform privacy requirements where applicable.

User data is only used to provide or improve the user-facing functionality explicitly requested by the user.

Myfield Services are designed around a local-first architecture and limited data processing principles. User data is processed only as necessary to provide the functionality explicitly invoked by the user.

Myfield Services do not use user data for advertising, profiling, or cross-site tracking purposes.

8. Permissions Usage

Myfield browser extensions, web apps, mobile apps, desktop apps, and related applications request only the minimum permissions necessary to provide their functionality.

Permissions may be used to access user-selected content, save content locally, process selected content for user-invoked features, store local preferences or app data, and authorize cloud features selected by the user.

Active-page, file, document, or equivalent content access is used only when the user invokes functionality that needs that access, such as saving the current page, opening a Myfield client on selected content, or processing user-selected content. Myfield Services do not use extension, browser, mobile, desktop, or application permissions to track users across websites, applications, or services, or to collect unrelated browsing activity.

9. Data Security

Myfield uses industry-standard security measures to protect information, including:

• Encrypted network transmission
• Access controls and authentication safeguards
• Security monitoring and abuse prevention systems

While we work to protect information securely, no method of electronic storage or transmission is completely secure. Users are responsible for protecting their devices, browsers, operating system accounts, passkeys, local storage, and recovery materials.

10. Data Retention

Myfield Services do not store submitted content as a persistent user record after processing AI-powered requests. Infrastructure and AI service providers may process request data transiently as necessary to provide, secure, and operate the requested service. Myfield requires such providers to process data in accordance with applicable confidentiality and security obligations.

Locally saved user content remains under the user's control on the user's device unless deleted by the user or removed by the browser, device, operating system, or application storage behavior.

Encrypted sync data may remain in Myfield cloud storage while sync is enabled or while needed to provide synchronization, recovery, conflict resolution, security, or continuity for authorized devices.

Limited technical logs, authorization records, quota records, billing records, and security-related records may be temporarily retained for operational, legal, accounting, and security purposes.

11. Your Rights and Choices

Depending on your jurisdiction, you may have rights to:

• Request access to information associated with your anonymous identifier
• Request deletion of applicable records
• Object to certain processing activities
• Withdraw consent where applicable

Because Myfield Services do not generally rely on name- or email-based account information, requests may require anonymous or technical identifiers associated with the relevant Service to locate applicable records.

Support requests are initiated by the user. Myfield feedback or support flows should not automatically attach saved content, prompts, AI completions, session credentials, passkey material, or Keychain secrets unless the user explicitly chooses to include them.

For privacy-related requests, contact:

support@myfield.one

12. Children's Privacy

Myfield Services are not intended for children under 13 years of age, or under the minimum age required by applicable law in their jurisdiction. We do not knowingly collect personal information from children under that age. If we learn that such information has been collected through the Services, we will take reasonable steps to delete it.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Updated versions will be posted on this page with a revised "Last Updated" date.

Continued use of the Service after changes become effective constitutes acceptance of the updated policy.

14. Contact

If you have questions about this Privacy Policy or Myfield's privacy practices, please contact:

OPENTECH AI PTE. LTD.

Website: https://myfield.one

Email: support@myfield.one