That's So Done1. The short version
This policy explains what the That's So Done iPhone app (including its widgets, Live Activities and Siri shortcuts, together the “App”) and this website do with information. It's written to be read, but it is also our formal privacy notice.
2. Who we are
The App is made by Chris and Sara and operated by the makers of That's So Done (“we”, “us”). For the purposes of data protection law, we are the controller of the limited personal data described below. Contact us any time at info@thatssodone.com.
3. Data that stays on your iPhone
Everything you create in the App is stored locally on your device, in a private storage area (an “App Group”) that the App shares only with its own widgets and Siri shortcuts. This includes:
- goals, milestones and goal plans;
- habits, habit check-ins, streaks and routines;
- to-dos, categories, notes and due dates;
- your pet, its name, stats and items;
- your pet chat history, Lock In sessions and settings, such as your theme.
We can't see this data. It is not synced to our servers or to iCloud by the App. Your normal iPhone backup (iCloud Backup or a computer backup) may include it, under Apple's terms. If you delete the App, or use the erase option in Settings, this on-device data is deleted.
To tell AI requests apart without an account, the App creates a random install ID the first time it's needed. It's a random string that isn't derived from your device, Apple ID or any personal detail, and it resets if you delete and reinstall the App.
4. Permissions you control
The App asks for these iOS permissions only when you use a feature that needs them. You can change them anytime in iOS Settings.
| Permission | What it's used for | Leaves your iPhone? |
|---|---|---|
| Calendars | Showing your events next to your plan, two-way sync, and placing tasks on your calendar if you turn that on. | No. Event titles, times, locations and attendees are never sent to us. The AI planner only receives a rough summary of how many minutes are busy on each weekday and which parts of the day are free (see section 5). |
| Reminders | Turning to-dos with due dates into Apple Reminders, if you ask. The App only edits reminders it created. | No. |
| Notifications | Local reminders and nudges scheduled on your device. | No. We don't use push notifications or a notification server. |
| Photos (add only) | Saving a picture of today's list so you can use it as a Lock Screen wallpaper. The App can't read your library. | No. |
| Live Activities and widgets | Showing Lock In timers and your list on the Lock Screen and Home Screen. | No. |
5. AI features (opt-in)
The AI goal planner, plan rebalancing and pet chat use a large language model. These features stay off until you read a short explanation in the App and tap Agree. You can turn AI off again anytime under Settings → Planner → AI planning and pet chat, and everything else in the App keeps working without it.
What's sent
When you use an AI feature, the App sends the minimum needed to answer, over an encrypted HTTPS connection, to our server (a Cloudflare Worker), which forwards it to Anthropic's Claude API:
- Goal planner: the goal you describe, its deadline, short or long term, your minutes per day, your off weekdays, any baseline note you add, your theme, and a summary of how busy each weekday is (busy minutes and free parts of the day, with no event details).
- Rebalance: the current plan and the titles of tasks you've done and not done.
- Pet chat: your recent messages with the pet (up to the last 12), the pet's name and species, your theme and streak, today's open items, and progress on your goals.
- With every AI request: your random install ID, the App version, whether chat sharing (section 6) is on, and, if you have Pro, Apple's signed transaction record (section 8).
Please don't include sensitive details, such as health conditions, account numbers or other people's personal information, in goals or chats.
How it's used
Your content is used only to generate the reply or plan you asked for. Our server doesn't store your AI content unless you've turned on chat sharing. Anthropic processes it as our service provider under its commercial terms, which prohibit training its models on API data. Anthropic may keep API data for a limited time for trust and safety; see Anthropic's Privacy Center. Plans and suggestions are only added to your App after you review and confirm them.
Our server keeps operational logs for reliability and cost control. They contain a one-way hashed identifier, the feature used, the model, token counts and whether the request succeeded, not your messages or goals.
6. “Help improve the pet” (optional, off by default)
If you turn on Help improve the pet, we save AI exchanges so we can improve That's So Done's own AI, for example its prompts, its pet personalities and how useful its suggestions are. This is separate from Anthropic and never shared with them for training.
- What's saved: the context sent with the request (as listed in section 5), your recent messages, the reply, any suggested cards and whether you added or dismissed them (or rated a reply), plus the App version, theme and pet species.
- How it's protected: rows are keyed by a one-way hash of your install ID, not the ID itself. No name, email or account is attached, and email addresses and phone numbers are automatically redacted before storage. Data is stored in a Cloudflare D1 database that only we can access.
- How long: 12 months, after which an automatic daily job deletes it.
- How to stop or delete: turn the switch off anytime in Settings. Tap Delete my chat data in Settings to delete everything saved from your install. Because the data is tied only to your install ID, please use that button before deleting the App, as we have no other way to find your rows.
Our legal basis for this processing is your consent, which you can withdraw at any time without affecting the rest of the App.
7. Usage limits and abuse prevention
To keep AI fair and affordable, our server counts how many AI requests you make each month. The counter is stored in Cloudflare KV under your install ID (for Free) or Apple's original transaction ID (for Pro), together with the month and feature. It contains only a number.
To prevent abuse, the server also keeps a short-lived request counter keyed by a one-way hash of your IP address over a 10-minute window. We don't store your raw IP address, and we don't use it to locate or profile you. Cloudflare, as our hosting provider, necessarily processes IP addresses to deliver traffic and protect its network.
8. Purchases
Purchases and subscriptions are processed entirely by Apple through the App Store and StoreKit. We never receive your name, email, payment card or billing address. The App receives Apple's signed transaction record, which includes a transaction ID, the product, its dates and whether it's active. When you use AI with Pro, the App sends that signed record to our server, which verifies Apple's signature and uses the original transaction ID to apply Pro limits. Apple's handling of your purchase data is covered by Apple's Privacy Policy.
9. Service providers
| Provider | Role | Data |
|---|---|---|
| Cloudflare, Inc. | Hosts our AI server (Workers), usage counters (KV), opt-in chat logs (D1) and this website. | AI requests in transit, counters, opt-in logs, IP addresses as a network provider. |
| Anthropic, PBC | Provides the Claude model that powers AI features. | AI request content (section 5), only after you agree. |
| Apple Inc. | App distribution, payments, and iOS services such as Calendar and Reminders. | Governed by Apple's own policies. |
We don't use any other third-party SDKs for analytics, advertising, crash reporting or attribution.
10. What we don't do
- We don't sell your personal information or “share” it for cross-context behavioral advertising.
- We don't show ads or track you across other companies' apps and websites, so the App never asks for tracking permission.
- We don't build advertising profiles or make decisions with legal or similarly significant effects about you.
- We don't use your data to train third-party AI models.
11. Retention
| Data | How long |
|---|---|
| On-device diary | Until you delete it, erase it in Settings, or delete the App. |
| AI request content | Not stored by our server after the reply is returned (unless chat sharing is on). Anthropic's retention follows its commercial terms. |
| Opt-in chat logs | 12 months, or until you tap Delete my chat data. |
| Monthly usage counters | A number per month and feature. We keep these only as long as needed to apply limits and will delete stale counters periodically. |
| IP rate-limit counter | A hashed key with a count, reset every 10 minutes. |
| Operational logs | Short-term, per Cloudflare's log retention. |
| Emails you send us | As long as needed to help you, then deleted. |
12. Your choices and rights
- Turn AI on or off in the App's Settings.
- Turn chat sharing off and delete your chat data in Settings.
- Revoke permissions such as Calendars, Reminders, Notifications and Photos in iOS Settings.
- Delete your on-device data by erasing it in Settings or deleting the App.
Depending on where you live, you may also have the right to access, correct, delete or port your personal data, to object to or restrict processing, and to withdraw consent. Because we don't have accounts, we can only find server-side data linked to an install ID or transaction ID. The fastest way to delete opt-in chat data is the Delete my chat data button in Settings. For any other request, email info@thatssodone.com; if we need to locate data, we may ask you to send a Pro purchase's order ID or to use an in-app option, because we have no account to look you up by. We'll respond within the time the law requires, usually 30 days for GDPR requests and 45 days for California requests. We won't discriminate against you for exercising your rights.
13. EEA, UK and Swiss users
We rely on these legal bases:
- Contract: to provide the App and Pro features you request.
- Consent: for AI processing and for optional chat sharing. You can withdraw it anytime in Settings.
- Legitimate interests: to secure our service, prevent abuse with rate limits, and keep AI costs under control. These interests don't override your rights, given the minimal, hashed data involved.
- Legal obligation: where we must keep or disclose information by law.
You have the right to lodge a complaint with your local data protection authority, such as the UK Information Commissioner's Office or the supervisory authority in your EU country.
14. California residents (CCPA/CPRA)
In the past 12 months, we have collected the following categories of personal information, only when you use AI features: identifiers (a random install ID, an Apple transaction ID, and a hashed IP address); commercial information (Pro purchase status); and other information you provide (goal and chat content for AI responses, and opt-in chat logs). We use them only for the business purposes described in this policy. We do not sell or share personal information, and we don't knowingly collect personal information from consumers under 16. We don't use sensitive personal information to infer characteristics about you. You may exercise your rights to know, delete and correct, or appoint an authorized agent, by emailing info@thatssodone.com.
15. International transfers
We're based in the United States. Cloudflare runs a global network, and Anthropic processes data in the United States. If you're outside the US, your AI requests are transferred to and processed in the US and possibly other countries. Where required, we rely on safeguards such as the European Commission's Standard Contractual Clauses, the UK Addendum and our providers' data processing terms.
16. Security
We keep data to a minimum and protect what we handle: on-device data uses iOS data protection; all traffic to our server uses HTTPS; Pro receipts are verified against Apple's signing certificates; identifiers in logs are hashed; and access to our cloud accounts is restricted to the founders. No system is perfectly secure, but we'll notify you and authorities of a breach as required by law.
17. Children
The App is a general-audience productivity app and is not directed to children under 13. We don't knowingly collect personal information from children under 13, or under 16 in the EEA and UK where a higher age applies. AI features are intended for users who meet those ages. If you believe a child has sent us personal information, email info@thatssodone.com and we'll delete it.
18. This website
thatssodone.com is a static site hosted on Cloudflare Pages. It uses no cookies, no analytics, no advertising pixels and no third-party fonts or scripts. Cloudflare processes standard request data, such as IP addresses, to deliver and protect the site. If you email us, we use your email only to reply.
19. Changes to this policy
If we change how we handle data, we'll update this page and the date at the top. For material changes, such as a new use of your data, we'll tell you in the App and, where required, ask for your consent again.
20. Contact
Questions, requests or concerns: info@thatssodone.com. We read every message.