Privacy Policy

Last updated: 26 September 2026

Who is responsible

NUTOOKA SOLUTIONS SRL, Str. II. Rakoczi Ferenc nr. 84, Odorheiu Secuiesc 535600, Romania. Company registration number: 94730640. Contact: hello@sortyours.com.

We are the data controller for the processing described here. Apple also processes App Store and payment data under its own terms and privacy policy.

The short version

Your captures, tasks, projects, goals and habits are stored on your device. There is no account login and no app-managed iCloud database sync. Optional cloud planning sends selected text and relevant context through our server to Anthropic, after you allow this on your device.

The app also communicates automatically with our server and RevenueCat to check subscriptions and planning credits. A randomly generated app identifier links those records. It does not contain your name or email, but it is a persistent identifier, not a guarantee of anonymity. Text you choose to send may itself identify you or other people.

The app has no advertising or cross-app advertising tracking. Our website uses Vercel Web Analytics for aggregated visit statistics.

What stays on your device

Your main database and local activity history stay on your device. The widget and share extension use local shared storage. Content captured there may later be included in a cloud request you choose to make.

Speech recognition runs on your device. We do not upload your audio. Microphone permission is requested by iOS and can be withdrawn in iOS Settings. Reminders are scheduled locally; we do not operate a push-notification server for them. The current app does not offer a location-permission request or send coordinates to our server.

Your own iCloud or computer backups may include app data, depending on your Apple settings. This is separate from app-managed sync. Deleting the app does not erase existing backups, cancel an App Store subscription, delete server records, or necessarily remove the identifier stored in Keychain.

Optional cloud planning

Before the first cloud request, the app explains what will be sent and asks you to allow sharing with Anthropic through our server. You can decline and continue using local capture and manual planning. The permission is stored on this device with the notice version and acceptance date. A materially changed sharing notice requires a new choice.

Depending on the feature, a request contains the captured text, a project or goal title and outcome, relevant project and habit names, life areas, the current draft and your edits or answers. A weekly summary also contains activity totals, habit completion counts, and names and carry-over counts of slipping steps. Your app identifier and the type of request go to our proxy at sortyours-proxy.vercel.app. The proxy sends the prompt context to Anthropic; it does not include your app identifier in the model prompt.

We do not send audio, coordinates or a complete database export. We do not persist your request text in our own application database. The request and response pass through Vercel and Anthropic so they can provide the service.

Under Anthropic's commercial API terms, requests are not used for model training by default. Its standard retention is up to 30 days. Safety-policy violations and legal requirements can lead to longer retention; Anthropic currently describes up to two years for flagged inputs/outputs and up to seven years for related safety classifications. See Anthropic's retention explanation.

Cloud planning produces drafts for you to review. It does not make decisions about you with legal or similarly significant effects. Avoid including other people's private information or sensitive information that is unnecessary for your request.

Queued requests and turning sharing off

A request you made may be stored locally when the connection or available allowance prevents it from running. Once authorised, it may retry when the app opens, the connection returns or the allowance becomes available. This can send the saved text later, without another tap at that moment. Rewrites are not queued.

In Account → Privacy you can turn cloud sharing off, resume paused requests or discard queued requests. Turning sharing off blocks new cloud requests and cancels work still in progress on this device; it cannot recall data already received by a provider. Requests from before the sharing notice, or paused after withdrawal, require an explicit resume action. Discarding a request keeps your captures and existing plans.

Automatic credit and subscription requests

When the app opens or subscription state changes, it checks your subscription and planning allowance using your app identifier. For earned credits, it reports the dates of days and weeks you closed. It does not include the tasks or notes from those days in the credit report.

To limit abuse, the earning endpoint stores an IP-address counter with a 26-hour expiry. Network providers also necessarily receive technical request information, such as IP addresses and request times, when handling connections.

The app creates a random identifier and stores it in synchronisable Keychain storage. It can follow you to other devices when iCloud Keychain is available. RevenueCat uses it for subscription management; our proxy uses it for credit balances and earned-credit records. You can find your app reference in Account → Privacy.

Purchases and RevenueCat

Apple processes App Store purchases. We do not receive your payment card details or billing address. RevenueCat processes subscription and purchase information for us, including the app identifier, receipts/transaction history, subscription status and dates, and technical information such as device/OS details and last-seen activity. The app and proxy use this to determine entitlements and allowances.

RevenueCat's processing of app-user data is governed by our agreement and its Data Processing Addendum. Its general privacy notice about its own customers is not a promise that your app subscription data is deleted six years after your subscription ends. Contact us to request access or deletion of records relating to this app.

This website and the waitlist

When you request a launch notification, your email address goes to Resend to deliver a confirmation email. It is not added as an active mailing-list contact until you open the link and explicitly confirm. The encrypted confirmation token expires after seven days. Sending the confirmation email is itself processing of your address, even if you never confirm.

We use the launch list to announce the app's launch, not for unrelated marketing. Launch/marketing emails provide an unsubscribe option. Unsubscribing stops those messages; it is not necessarily deletion of the contact, delivery history or suppression record. For deletion, contact hello@sortyours.com. Resend also processes email delivery and service records.

The website uses Vercel Web Analytics without analytics cookies. It distinguishes visits using a short-lived hash, with visitor sessions discarded after 24 hours, and provides aggregated statistics. Data points can include page URL, referrer, approximate region, browser, operating system and device type. We exclude confirmation routes and remove URL query strings and fragments from our analytics events. See Vercel's explanation.

Purposes and legal bases

Contract performance: providing the cloud planning you request, verifying subscriptions, and managing the planning allowance included with the service.

Legitimate interests: protecting the service and shared planning budget against abuse, resolving technical problems, handling support and maintaining necessary service records. We aim to minimise the data used for these purposes. You may object to processing based on legitimate interests.

Consent: sending the launch notification after confirmation. You can withdraw by unsubscribing or contacting us. Withdrawing does not make earlier lawful processing unlawful. The app also requires your separate permission before sharing text with the third-party AI service. An iOS microphone permission is a device-access control; it is not consent to send audio or text to an external AI provider.

Providing text for cloud planning and joining the waitlist are optional. Without cloud permission, local capture and manual planning remain available. Subscription and credit checks are necessary to provide those online service features.

Providers and international transfers

Anthropic generates cloud drafts; Vercel hosts the proxy and website; Upstash holds credit and anti-abuse records; RevenueCat manages subscriptions; Resend delivers emails and manages the waitlist. Each receives the data needed for its role as described above. Apple supplies the App Store, payments, Keychain, device backup and operating-system services under its own terms.

These providers may process data outside the EU/EEA, including in the United States. Transfers require an applicable adequacy decision, such as a relevant EU–US Data Privacy Framework certification, or appropriate contractual safeguards such as the European Commission's Standard Contractual Clauses. Contact hello@sortyours.com for the safeguards applicable to your data and a copy of relevant contractual safeguards.

Retention and deletion

Local app content remains until you delete it or remove the app's local storage. Keychain records and your backups have a separate lifecycle controlled by your device/Apple settings.

Our credit records use these expiry periods: daily counters about 26 hours; monthly subscription allowance counters about a day after the allowance period ends; cached positive subscription status one minute; rewrite-use counters approximately 30 minutes; earning IP counters 26 hours; earning dates approximately 18 days; weekly earning aggregates approximately 16 days. Your free credit balance and lifetime earned-credit total expire six years after each record is created. The long-lived counters prevent repeatedly obtaining the initial free allowance and enforce the lifetime earning limit.

Our application logs record operational events, request kind, model/prompt version, token counts, timing and credit information. The application does not deliberately log request content or app identifiers. Provider access, security, email-delivery and infrastructure logs are separate from these application logs.

For provider-held subscription, email, support and infrastructure records, retention depends on the service purpose, applicable processing agreement, deletion instructions and any legal or security requirement. We assess access and deletion requests across the providers concerned rather than treating app removal or marketing unsubscribe as deletion everywhere. Anthropic's retention and exceptions are described above.

Your rights and how to contact us

Under the GDPR, as applicable, you can request access, correction, erasure, restriction and portability, and object to processing. You can withdraw consent where processing relies on it. Write to hello@sortyours.com; Account → Privacy can prepare the email and provides a copyable app reference. This is available without a paid subscription.

The reference helps us locate records; it is not proof of identity by itself. We may request proportionate verification before disclosing or deleting data. We do not require a purchase receipt from a person who has never purchased. If we genuinely cannot identify the relevant records, we explain what additional information could help, rather than treating every free user as anonymous.

We cannot remotely access or erase your on-device database. We can handle requests concerning records we or our processors hold. Deletion can be subject to limited legal exceptions, which we explain where applicable. We respond within one month; if a lawful extension is necessary, we explain it within that month.

You can complain to a supervisory authority, including the authority where you live or work. In Romania: Autoritatea Naţională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, 010336 Bucharest; dataprotection.ro.

Children

The app is not designed specifically for children. The data flows described in this notice also apply if a child uses it: app identifiers and subscription/credit traffic can be processed without an AI request. Do not assume that nothing is collected until text is sent for a draft. If you believe a child's data needs attention or deletion, contact hello@sortyours.com.

Changes and contact

We update the date when this notice changes. Material changes to cloud sharing require a renewed in-app permission before the new sharing takes place. For privacy questions, contact hello@sortyours.com or NUTOOKA SOLUTIONS SRL at the address above.