Privacy policy

Last updated: [date]

The short version

You don't need an account, email or phone number. Tynix gives your phone a random ID. An account (Sign in with Apple or Google) is optional and free.
Your tasks are stored so they sync and are backed up. We don't read them, sell them or use them for ads.
If you share a list, the people you invite see that list's tasks and your name.
No ads and no advertising trackers. Anonymous usage statistics only if you say yes, and never your tasks.
Crash reports only if you say yes, and they never contain your task titles or notes.
You can export everything, and delete everything, from Settings.

Who we are

Tynix is made by [company name], [registered address] ("we"). We are the controller of your data as described here. Contact: [privacy contact email].

We are not established in the European Union or the United Kingdom. Our representative for questions from people in the EU and EEA (GDPR Article 27) is [EU representative: name, address, email], and in the UK [UK representative: name, address, email]. You can contact them instead of us about anything in this policy.

What we collect

Data	Why	Where it's kept
A random user ID, created when you first open the app (anonymous sign-in). No name, email or phone number.	To keep your data separate from everyone else's and sync it.	Google Firebase Authentication
Account details, only if you create an account with Apple or Google: your name and email address as Apple or Google give them to us. With Apple you can hide your email, and we then get a private relay address.	To keep your tasks when you change phones, and so people you share a list with see your name.	Google Firebase Authentication (name and email); your name also on your profile in Cloud Firestore
Your content: tasks (title, notes, due date and time, repeat rule, Life Area, list, done or not), lists, your settings, and how many tasks you completed each day (for the private Momentum streak).	To provide the app: save, sync and back up your tasks.	On your phone, and in Google Cloud Firestore (Europe multi-region, eur3)
Shared lists and Handoff, only if you use them: who is in your circle and the name each person goes by there, who a list is shared with (each member's name as they entered it, their role, and which invite link they joined with and when), invite links (the owner's name, the role, an expiry date of 7 days and the names of any lists the link shares; finished links are deleted 30 days after they were answered or expired), the private label you give an invite (only you see it), who a task is handed to, when they first opened and started it, and their notes and completion.	To let you share lists, hand tasks to other people and see how they're getting on.	Google Cloud Firestore
Your plan: if you have Tynix Circle, a record of it and its size, and whether it came from a purchase, a gift code you redeemed (which code, and when), or test access the Tynix team gave you. The app store handles any payment; we never see your card details. Purchases go through RevenueCat, which receives your user ID and what you bought from the App Store or Google Play. With an App Store purchase we also keep its transaction number, to match a refund request to it.	To give you what you paid for, on every phone you sign in on.	Google Cloud Firestore; RevenueCat
Refund requests (iPhone), only if you turn this on (on the Tynix Circle screen or in Settings → Refund requests): when you ask Apple for a refund, how much of Tynix Circle you used, as a percentage worked out from the people you shared with and the handoffs you made (see the Terms of use), and that you had a free plan to try it first. You can turn it off at any time; nothing is sent while it's off.	To help Apple decide on a refund you asked for.	Sent to Apple, which keeps it under its own privacy policy (ask Apple to see or delete it at privacy.apple.com); a note that we answered stays in our team's records.
A device record: a push-notification token, your phone's platform (iOS or Android), its time zone, and whether reminders can currently reach you (OK / warning). No task content.	So a daily background message can keep your reminders topped up, to send you the notifications below, and to measure how reliably reminders work overall.	Google Cloud Firestore
Feedback you send from Settings, and our replies, with a screenshot if you attach one (re-saved on your phone first, which removes its location and other photo data). If you turn on "Include diagnostics": app version, phone system and version, and Reminder Health Check results and counts. Never your tasks.	To read and answer your feedback and fix problems.	Google Cloud Firestore
Notifications about other people's actions: when someone assigns you a task, finishes a task you handed them, joins your list, or when we reply to your feedback, a short message such as "Olive assigned you a Tynix task." with that person's name and the task's or list's ID. Never the task's title or notes. To avoid repeats, we note who was notified about what for one day. Choose which ones you get in Settings → Notifications.	So you know when something needs you.	Sent through Cloudflare and Apple's or Google's push service; the one-day note in Google Cloud Firestore
Reports and blocking, only if you use them: what you reported (a list, a task or a person), why, your own words if you add any, and a copy of what was reported (the list's name, the task's title and notes, or the person's name) so we can review it. The person you report never sees who reported them. People you block, so they can't rejoin your lists.	To keep shared lists safe, and to act on abuse.	Google Cloud Firestore
Crash reports and performance data, only if you allow crash reports when Tynix asks (you can change it in Settings → Share crash reports), and in release versions of the app only: what went wrong and where in the app, device model, system version, app version, how long the app takes to start and to sync, and your random user ID. Error reports contain only where the error happened and its type, never your task titles or notes.	To find and fix crashes and keep the app fast.	Google Firebase Crashlytics and Performance Monitoring
App integrity checks: a short-lived token from Apple (App Attest / DeviceCheck) or Google (Play Integrity) confirming requests come from the genuine app.	To block automated abuse of our servers.	Google Firebase App Check
Usage statistics, only if you allow them when Tynix asks (you can change it in Settings → Share usage statistics): which features are used (finishing onboarding, adding a task and whether Tynix understood a date or time in it, completing a task, exporting), plus a random app-instance ID, device model, system and app version, language and approximate country. Never your tasks, notes or list names, and not linked to your user ID or account.	To learn which features help people, so we know what to improve.	Google Analytics for Firebase (advertising features off)

Reminders are scheduled on your phone itself. When a reminder shows, it shows only on your device; turn on "Private notifications" in Settings to hide task titles on the Lock Screen.

App lock: if you turn on the app lock, Face ID, Touch ID or your fingerprint is checked by your phone. We never receive any biometric data.

We do not collect your contacts, location, photos, advertising ID, or browsing activity, and we don't use advertising SDKs. Usage statistics are off until you allow them.

What other people see

People you invite: whoever joins your circle with your invite link sees your name, the tasks you hand them (with their steps) and the lists you share with them: each list's name and its tasks. Anyone who has the link can join while it is valid (7 days), so send it only to people you mean. You can remove people at any time.
Lists shared with you: the owner and other members see the name you enter when you join and the tasks you complete or add notes to.
Tasks you hand off: the person you hand a task to sees it, gets its reminders, and can mark it done and add notes, which you see. You also see when they first opened it and started it.

Legal bases (EU / UK)

Providing the app you asked for (contract): your user ID, content, settings and device record, notifications, and, if you use them, your account details, shared lists, Handoff and your plan.
Our legitimate interests in a reliable, safe and secure app: app integrity checks, reports and blocking, and keeping a record of what our team does with accounts. You can object at any time by contacting us.
Your consent: usage statistics, crash reports and performance data, the optional diagnostics attached to feedback, and telling Apple how much of Tynix Circle you used when you ask for a refund. You can withdraw it at any time in Settings.

We don't sell or rent your data, and we don't share it with advertisers or data brokers. We use these service providers, who process data on our behalf:

Google (Firebase: Authentication, Cloud Firestore, Cloud Messaging, App Check; Crashlytics and Performance Monitoring only if you allow crash reports, and Google Analytics for Firebase only if you allow usage statistics), under Google's data processing terms. Google signals and ad personalisation are off.
Apple and Google sign-in, if you create an account with them.
RevenueCat to process purchases of Tynix Circle: it receives your user ID and your purchases from the App Store or Google Play.
Cloudflare (Workers), under its Data Processing Addendum, runs the small services that send the notifications above and our team's account tools. It receives your app's sign-in token (your user ID), the ID of the task or list involved, and, like any web service, your IP address.
Apple (push notifications and App Attest on iPhone) and Google (Firebase Cloud Messaging and Play Integrity on Android) to deliver notifications and verify the app.

Your tasks are stored in the EU. Some of these services, such as crash reporting, may process data in other countries, including the United States, under safeguards such as the EU Standard Contractual Clauses. We may also disclose data if the law requires it.

How long we keep it

Your content, settings, device records, account details and feedback: until you delete them or delete your account.
If you use Tynix without an account (no Apple or Google sign-in) and don’t open it for 180 days, we may delete that unused data and its user ID. Nobody can sign back into it, so it can’t be recovered. Data on your phone stays until you delete the app.
Shared lists: your name stays on a list you joined until you leave it, the owner removes you, or you delete your account. Invite links stop working after 7 days.
Free plan allowance: how many handoffs you've made and how many different people you've shared with, kept under a pseudonymous ID of your Apple or Google account, also after you delete your Tynix account, so the free allowance can't be started over. It's two numbers: no tasks, names or email. You can ask us to delete it.
Usage statistics: kept by Google Analytics for 2 months, then deleted.
Crash reports: kept by Crashlytics for up to 90 days. Performance data: aggregated, kept by Google according to its retention terms.
Device records: deleted when a phone hasn't been in touch for 60 days, or the push service says the app is gone. Notes of who was notified about what: one day.
Feedback screenshots: deleted 30 days after the conversation is closed.
Reports: 12 months after we close them. Our team's record of account actions (who did what, when, to which user ID): 12 months.
If you uninstall the app without deleting your account, your data stays on our servers (except as described for accounts without Apple or Google sign-in above).

Your choices and rights

Export: Settings → Export all data gives you your tasks and lists (CSV, JSON or Markdown). For a copy of everything else we hold about you, contact us.
Usage statistics and crash reports: Settings → Share usage statistics and Share crash reports, each on or off at any time. Both are off until you say yes; turning crash reports off also deletes reports not yet sent from your phone.
Leave or stop sharing: leave a list shared with you, or remove people from yours, in the list's sharing screen.
Delete: Settings → Delete account and data removes your tasks, lists, invites, settings, streak data, device records, feedback, your account details and your user ID from our servers, takes your name off lists other people shared with you, and clears the app on your phone. If you signed in with Apple, it also ends Tynix's access to your Apple ID. Tasks other people handed to you belong to them and stay in their lists. You can also ask us to delete it: see Delete your account.
Notifications: choose which ones you get in Settings → Notifications, or switch them all off in your phone's settings.
Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing of your data, and to data portability. Contact us at [privacy contact email]; we answer within one month. If you didn't create an account we don't know who you are, so we may ask for the user ID shown at the bottom of Settings to find your data.
You can complain to the data protection authority where you live (in the UK, the Information Commissioner's Office).

If you are in the European Union, the EEA or the United Kingdom, the General Data Protection Regulation (GDPR, or the UK GDPR) applies to how we handle your data, even though we are based outside it. You have the right to:

Access your data and get a copy of it (Article 15). Settings → Export all data gives you your tasks and lists straight away; ask us for everything else.
Correct it (Article 16): most of it you can edit in the app; ask us for the rest.
Delete it (Article 17): Settings → Delete account and data, or ask us.
Restrict how we use it (Article 18), for example while we check a complaint.
Take it with you (data portability, Article 20), in a common machine-readable format (JSON or CSV).
Object to what we do on the basis of our legitimate interests (Article 21), such as app integrity checks. We then stop, unless we have compelling reasons that override yours, or need it for legal claims.
Withdraw your consent at any time, for what is based on it (usage statistics, crash reports, feedback diagnostics), without affecting what happened before.
Complain to a data protection authority, in particular in the EU country where you live or work, or to the Information Commissioner's Office (ICO) in the UK.

To use these rights, contact us or our representative (see Who we are). We answer within one month, free of charge; for complex requests we may need up to two more months and will tell you why. We may need to confirm it's your data first: if you didn't create an account, by the user ID at the bottom of Settings. We make no decisions about you by automated means that have legal or similarly significant effects (Article 22).

Transfers outside the EU. Your tasks and lists are stored in the EU (Google Cloud Firestore, Europe multi-region). Some providers above, and we ourselves, may access or process data in other countries, including the United States. Where those countries don't have an EU adequacy decision, we rely on the European Commission's Standard Contractual Clauses (and the UK addendum), or the EU–US Data Privacy Framework where the provider is certified. Ask us for a copy of the safeguards.

If there's a data breach

If personal data we're responsible for is lost, stolen, or seen or changed by someone who shouldn't have it, we will:

act at once to contain it, for example by revoking keys, closing access or pausing the affected feature;
work out what data and whose was affected, and how serious it is;
notify the competent data protection authority within 72 hours of becoming aware of it, unless it is unlikely to put anyone at risk (GDPR Article 33);
tell you without undue delay if it is likely to put you at high risk (Article 34): in the app, and by email if we have your address, with what happened, what it means for you, what we've done, and what you can do;
keep a record of every breach and what we did about it, even when no notification was needed.

If you think your data has been exposed, or you've found a security problem in Tynix, please tell us straight away at [security contact email].

What the Tynix team can see

A small number of authorised people at Tynix can, through an admin site that needs a Google sign-in and is checked by our database rules: look up an account (by its user ID or email), see its plan and the people in its shared lists, read feedback and reports, and disable, sign out, export or delete an account. They can't read your tasks or lists, except what was copied into a report about them. They do this only to run the service, answer you, or deal with abuse, and every action is recorded with who did it and when.

Security

Data is encrypted in transit and at rest by Google Cloud. Our database rules let only your own user ID read or change your data, except what you choose to share: members of a shared list can read it, and someone you hand a task to can only mark it and its steps done, add notes and say they've seen or started it. Only the genuine app can reach our servers. You can also lock the app with Face ID, Touch ID or your fingerprint.

This website

tynix.app uses no cookies, no analytics and no trackers, and its fonts are served from the site itself. It is hosted on Google Firebase Hosting, which keeps standard server logs (such as IP address and pages requested) to run and protect the service. Invite links pass their code only to the Tynix app on your phone; this site never stores it.

Children

Tynix is not directed at children under 16, and we don't knowingly collect data from them.

Changes

If we change this policy, we'll update the date above and, for important changes, tell you in the app before they apply.