privacy policy

This Privacy Policy explains how Simple ("the App", "we", "us", "our") collects, uses, and protects your information. The App is developed by Pawel Dembski ("the developer"), and this policy applies to your use of the Simple iOS app and its widget.

If you have any questions, contact us at support@deepskyapps.com.

Summary: Simple stores your tasks, activities, and focus data on your device. It is not kept on our servers and does not automatically sync to your other devices. We use a small set of trusted providers for sign-in, subscriptions, AI features, crash reporting, and analytics. We do not sell your personal data, and we do not track you across other companies' apps or websites.

1. Who is responsible for your data

The data controller for the App is:

• Pawel Dembski
• Contact: support@deepskyapps.com

2. Information we collect

We only collect what the App needs to work. The categories below describe what may be collected depending on the features you use.

2.1 Account information

If you create an account, we collect:

• Your email address (when you sign up with email and password), or
• The identifier and name provided by Sign in with Apple (which may be a private Apple relay email if you choose to hide your address).
• An optional display name and profile picture you add.

Authentication is handled by Firebase Authentication (Google).

2.2 Content you create

• Tasks, subtasks, activities, notes, tags, task lists, focus sessions, and profile/gamification data are stored only on the device where you create them, using Apple's on-device storage (shared with the App's home-screen widget on that same device). This content is not uploaded to our servers, not backed up to our cloud, and not synchronized between your devices.
• Because this data lives only on the device, signing in to your account on a different device (for example another iPhone, an iPad, or a Mac) will not display the tasks or activities you created elsewhere. Your account identifies you and manages your subscription; it does not transfer this on-device content between devices.
• Feature requests and comments you choose to submit are stored in Firebase Firestore (cloud) so they can be reviewed and displayed in the App.

2.3 AI feature data

When you use the AI Assistant or AI-powered features (task parsing, scheduling suggestions, daily plans), the text you provide (for example, the task or activity description you type) is sent to our AI provider to generate a response. AI requests are relayed through AIProxy to OpenAI and processed by their models. Per OpenAI's API policy, data sent through the API is not used to train their models.

Please avoid entering sensitive personal information you do not want processed by an AI service.

2.4 Subscription and purchase information

If you buy a subscription, purchases are processed by Apple through the App Store. We use RevenueCat to manage subscription status. RevenueCat receives a pseudonymous app user identifier and purchase/receipt information so we can unlock premium features and restore purchases. We do not receive or store your full payment card details; those are handled by Apple.

2.5 Calendar data (optional)

If you enable calendar sync, the App uses Apple's EventKit to read events from your device calendar and display them on your timeline. This access requires your permission and can be revoked at any time in iOS Settings. Calendar data is processed on your device.

2.6 Notifications

The App uses local notifications on your device (for reminders and coaching prompts). We do not operate a push-notification server and do not collect device push tokens for marketing.

2.7 Usage and diagnostics

To keep the App reliable, we use:

• Firebase Analytics: aggregated usage events and general device information (such as device model, operating system version, and app version).
• Firebase Crashlytics: crash reports and diagnostic data to help us fix bugs.

2.8 Marketing attribution

If you install the App after tapping an Apple Search Ads advertisement, the App collects Apple's AdServices attribution token and shares it with RevenueCat to measure which campaigns lead to installs and subscriptions. This uses Apple's privacy-preserving attribution and does not use the advertising identifier (IDFA). The App does not track you across other companies' apps or websites and does not present an App Tracking Transparency prompt.

3. How we use your information

We use the information above to:

• Provide, maintain, and improve the App's features;
• Create and secure your account and restore your data across sessions;
• Generate AI-powered suggestions and plans you request;
• Process and manage subscriptions and restore purchases;
• Diagnose crashes, fix bugs, and understand which features are used;
• Measure the effectiveness of our advertising;
• Respond to your support requests and feature submissions;
• Comply with legal obligations.

4. Legal bases for processing (EEA/UK users)

Where the UK GDPR or EU GDPR applies, we rely on the following legal bases:

• Performance of a contract: to provide the App and its core features to you.
• Consent: for optional features such as calendar access and analytics, where required. You can withdraw consent at any time.
• Legitimate interests: to keep the App secure, prevent abuse, fix crashes, and understand aggregate usage, balanced against your rights.
• Legal obligation: where we must process data to comply with the law.

5. Third-party providers (processors)

We share data with the following service providers only to the extent needed to run the App. Each processes data under its own privacy policy:

• Google / Firebase: authentication, Firestore (feature requests), analytics, and crash reporting. Privacy policy
• RevenueCat, Inc.: subscription management and attribution. Privacy policy
• AIProxy: secure relay for AI requests. Privacy policy
• OpenAI, L.L.C.: processing AI requests to generate responses. Privacy policy
• Apple Inc.: Sign in with Apple, App Store payments, and Search Ads attribution. Privacy policy

We do not sell your personal information, and we do not share it with third parties for their own advertising.

6. International data transfers

Some of our providers are located outside your country, including in the United States. Where personal data is transferred internationally, we rely on the safeguards offered by those providers (such as Standard Contractual Clauses and equivalent mechanisms) to protect your information.

7. Data retention

• Content on your device remains until you delete it or uninstall the App.
• Account data is retained while your account is active.
• Feature requests and comments are retained while they remain relevant to product planning.
• Analytics and crash data are retained according to our providers' standard retention periods.

When you delete your account, we delete or anonymize the personal data associated with it, except where we are required to retain it by law.

8. Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you;
• Correct inaccurate data;
• Delete your data ("right to be forgotten");
• Restrict or object to certain processing;
• Port your data to another service;
• Withdraw consent at any time.

To exercise any of these rights, contact support@deepskyapps.com. You also have the right to lodge a complaint with your local data protection authority (in the UK, the Information Commissioner's Office).

California residents

If you are a California resident, you have rights under the CCPA/CPRA, including the right to know, delete, and correct your personal information, and to opt out of "sale" or "sharing." We do not sell or share your personal information as those terms are defined under California law.

9. Deleting your account and data

You can delete your account and its associated data at any time from within the App (Settings → account management), or by emailing support@deepskyapps.com. Deleting the App from your device also removes the content stored locally on that device.

10. Data security

We use industry-standard measures to protect your information, including encryption in transit (HTTPS) and access controls with our providers. No method of transmission or storage is completely secure, but we work to protect your data using reasonable safeguards.

11. Children's privacy

Simple is not directed to children under the age of 13 (or the minimum age required in your country, such as 16 in parts of the EEA/UK). We do not knowingly collect personal data from children under this age. If you believe a child has provided us with personal data, please contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you in the App. Your continued use of the App after changes take effect constitutes acceptance of the updated policy.

13. Contact us

If you have questions or requests regarding this Privacy Policy or your data, contact:

Pawel Dembski, by email at support@deepskyapps.com, or via get-simple.app.