Privacy

The short version

No account, no name, no email. No ads, no tracking, and we never sell anything about you.

Your tasks and recordings are stored on your phone. Backups, if you turn them on, are encrypted on your phone first, with a key only you hold.

To sort a task, our server sees one line of text with names, numbers and emails blanked out. It answers and keeps none of it.

What stays on your phone

Everything you add: the words, any voice recordings, and what you finish or skip. Recordings are deleted after 30 days; the words stay until you delete them. Details of what you finished or skipped are kept for 180 days so picks can learn from them.

The app keeps its data out of your phone’s own iCloud and Android backups, so nothing is copied to the cloud behind your back.

The home screen widget shows your current task, so its title is stored where the widget can read it. That stays on the phone too.

Your voice

Recordings are turned into words on your phone. We never receive audio.

On iPhone this uses Apple’s speech recognition. Most iPhones do it on the device. On models that can’t, Apple’s servers do it, under Apple’s privacy policy.

On Android the app runs its own speech model on the phone. It downloads that model once (about 140 MB), and only if you agree.

What reaches our server

Sorting and smarter picks are part of Pro and the free trial. Without them, the app sends none of your words anywhere.

To sort something you’ve added, the app sends that one item’s text, up to 280 characters. To pick what’s next, it sends up to 15 task names (60 characters each), your energy level, the time of day, and how often you finish quick, medium and big tasks. Dates, notes and recordings are never sent.

Before anything is sent, the app blanks out names, phone numbers and email addresses. This is rule-based and can miss things, such as a name written in lowercase, so it’s best not to put anything into a task that must never leave your phone.

Our server passes the text to Laya, the AI service that does the sorting, and returns the answer. We don’t store the text or write it to logs.

What we keep

A random ID for your installed app, and a scrambled (hashed) copy of its access key. They aren’t linked to you, your name or your phone number.

Whether you have Pro and when it ends, as the app store reports it.

For the free trial: a hashed identifier for your phone, when the trial started, and how many sorts it used today, so each phone gets one trial. It stays after you delete the app, so reinstalling doesn’t start a new trial. It holds nothing else.

To stop abuse, a hashed copy of your IP address and a count of sign-ups from it, for an hour at most.

Backups

Backups are off until you turn them on. They go to your own iCloud or Google Drive, into a private app folder.

Your phone encrypts them (AES-256-GCM) before upload. The key stays in your phone’s secure storage, and you get a recovery code for a new phone. Neither we, Apple nor Google can read them. If you lose the recovery code and your phone, the backup can’t be opened, by you or by us.

Signing in to Google Drive happens on your phone. We never see your Google or Apple login.

Payments

The App Store or Google Play takes payment; we never see your card. RevenueCat, a subscription service, tells us whether you have Pro, keyed only by your app’s random ID.

This website

No cookies and no trackers.

Who else is involved

Cloudflare hosts this website and our server, and sees IP addresses as part of delivering them. Laya sorts the masked text described above. RevenueCat keeps track of subscriptions. Apple and Google run the app stores, speech recognition on iPhone, and your backups if you turn them on. Each handles data only to provide its service to us or to you.

Your choices

Export: Account → Export data saves everything you’ve added as a file.

Delete: Account → Delete account removes what our server holds for your app, your cloud backup and everything on your phone. Deleting the app removes what’s on your phone; the trial marker described above stays.

Questions or requests about your data: email hello@heydecide.app. Because we don’t know who you are, we may need your help to find what’s yours.

Children

Hey Decide isn’t made for children under 13, and we don’t knowingly collect anything from them.

Changes

If this policy changes, we’ll update it here and change the date at the top. If a change means more data leaves your phone, the app will ask you first.

Contact

Contribr.com. Email hello@heydecide.app.