Privacy isn't a feature. It's the design.
- No account needed — the app is fully usable without one.
- No tracking: no advertising ID, no ATT prompt, nothing sold — ever.
- Reminders and history stay on your phone. Optional sync is end-to-end encrypted: our servers store ciphertext we cannot read.
- Anonymous, self-hosted analytics only — never linked to you, and you can switch it off.
- Ads (outside the EEA, UK and Switzerland only) are contextual and never track you. In the EEA, UK and Switzerland the app shows no ads at all — a design decision, not a legal accommodation.
App Store privacy label: “Data Not Linked to You · Not Used to Track You.”
The complete privacy policy will be published here before launch.