Privacy Policy

Last updated: 2026-08-01

1. What we collect

Nothing.

More specifically:

• No user accounts. You never sign up, never sign in.
• No backend server. There is nothing on our end that stores your data.
• No third-party analytics SDKs (no Firebase Analytics / Mixpanel / Amplitude / Sentry).
• No third-party crash-reporting SDKs. If you opt in to Apple's system-level MetricKit, Apple aggregates and anonymizes reports before delivering them to us — we can't identify individual users.
• No advertising SDKs.
• No tracking SDKs.
• We do not read your contacts, calendar, health data, photos, location, or microphone.

Your decision journal — every title, pre-mortem, note, review, and principle — never leaves your device unless you enable iCloud sync or export the data yourself.

2. What is stored locally

The following is saved to the app's sandbox in a CoreData database:

• Decision titles, pre-mortem text, mental-cost estimates you enter
• Tags you pick (four preset tags plus any custom tags you create)
• Review scores, "would repeat" answers, extracted principles
• Field notes you add during the settlement period
• App preferences (theme, notifications, onboarding flag, Pro purchase state)

3. iCloud sync

If you enable iCloud sync in the app's Settings, your data is synced across your own devices (iPhone / iPad / Mac) via Apple's official CloudKit private database.

• Apple end-to-end encrypts data in the CloudKit private database.
• The developer cannot see, read, or access your CloudKit data. Apple does not grant us access.
• If you sign out of iCloud or turn off iCloud sync in the app, no data leaves your device.

4. Exports

You can export your decisions as Markdown, JSON, or a printable "My Principles" PDF booklet (Pro tier).

• Exports are generated locally on your device.
• You decide where the exported file goes (AirDrop, Files, another app, email). We aren't part of that transfer.

5. In-app purchase

The Pro tier is a one-time non-consumable purchase, processed via Apple's StoreKit 2.

• Apple handles all payment and receipt data.
• The developer receives from Apple only the fact that a purchase was made (so we can restore it on your other devices).
• The developer does not receive your Apple ID, payment card, or any other personal detail.

6. Future AI features (not shipped yet)

Verdict v1.0 has no AI features. If any are added later, they will use one of these two paths:

• Apple Intelligence · On-device: runs locally on your device via Foundation Models. Nothing leaves your device.
• BYOK (Bring Your Own Key): you paste an API key you own (Claude / OpenAI / Gemini) into the app's Settings. When you invoke AI, your data is sent directly from your device to the API provider you chose. We do not proxy, log, or store any of this. We do not see your key.

This policy will be updated when those features ship.

7. System permissions

The app may request the following permissions:

• Local notifications: to remind you when a decision's settlement date arrives. Notifications are scheduled and delivered locally by iOS — no network involved.
• Siri / App Intents: so you can say "record a decision" or "record a moment" through Siri. Apple handles the voice and intent; the developer never receives raw audio or transcripts.

8. Children

The app is rated 4+. We do not knowingly collect data from anyone, of any age. Because the app does not connect to the internet and does not collect data, there is no path by which children's information could be transmitted externally.

9. Changes to this policy

If we update this policy, we'll bump the "Last updated" date at the top and describe what changed. Because we don't collect data, future changes will primarily be clarifications — not new data collection.

10. Contact

For any question about this Privacy Policy:

• Email: same4869@163.com