DeScheduled Privacy Policy
Effective date: July 24, 2026
DeScheduled ("we," "us") is built local-first and shame-free — and that extends to your data. This policy describes what we collect, why, and what we never do.
What we collect
- Account information. When you sign in with Google or Apple, we receive your email address and a unique account identifier from Supabase, our authentication provider. If you use Sign in with Apple's "Hide My Email," we only ever see the relay address.
- Your content. The schedules, routines, tasks, goals, meal names, and messages you type to the assistant. Most of this lives on your device; a copy of your profile and content may sync to our servers so your account works across reinstalls.
- Photos you choose to attach. If you attach a photo in the assistant (for example a note or a receipt you want turned into reminders), a reduced-size copy is sent through our server to Google's Gemini API to read its text. Location and device metadata (EXIF) are stripped on your phone before anything is sent, and we do not store the image on our servers — it is processed and discarded. Attaching photos is always your choice; the app never accesses your photo library on its own.
- Subscription status. If you subscribe, our payment partner RevenueCat processes your App Store purchase and tells us whether your subscription is active. We never see your payment card or banking details — Apple handles the transaction.
- Support email. If you email support, we receive what you send us.
What we don't collect
- No advertising identifiers, no cross-app tracking, no ad networks.
- No analytics SDKs profiling your behavior.
- No location, contacts, health data, or browsing history — and no access to your photo library beyond the single photos you explicitly attach.
- No selling or renting your data to anyone, ever.
How AI processing works
When you type, dictate, or attach something the app needs help understanding (like "gym Mon/Wed/Fri at 6pm"), the text or reduced-size image is sent through our own server to Google's Gemini API, which interprets it and returns structured schedule data. Our server relays only what is needed for the request and does not keep a copy of your photos. Our API agreement with Google does not permit them to use this data to train their models.
Where your data lives
- On your device (primary storage).
- Supabase (authentication) and Cloudflare (our server infrastructure and database) for account sync, subscription status, and error records.
- We retain server-side data only while your account exists.
Deleting your data
You can delete your account inside the app (Settings → Account → Delete Account). This removes your account and cascades deletion of your server-side data. You can also email us and we'll do it for you. Deleting the app from your phone removes all locally stored data.
Children
DeScheduled is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.
Your rights (GDPR / CCPA and similar laws)
Depending on where you live, you have the right to access, correct, export, or delete your personal data, and the right not to be discriminated against for exercising those rights. We honor these requests for everyone, not just where the law requires it: use the in-app deletion flow or email us. We do not "sell" or "share" personal information as those terms are defined under the CCPA.
Changes
If we change this policy, we'll update the effective date above and, for material changes, tell you in the app before they take effect.