Privacy Policy

1. What We Collect

Here’s the kind of data we handle when you use Stupido:

• Account info: You don’t need an account to use Stupido. If you choose to link your Apple ID, we get a unique Apple ID identifier. We may also get your name and email if you share them during your first sign-in. This is stored securely on your device’s Keychain.
• Subscription & purchase info: Data from Apple’s App Store and RevenueCat (our subscription manager) so we can check if you have a “Smart” subscription and apply the right features.
• Your content: Audio you record to create todos. Text transcripts generated from your audio. Your todo details — titles, categories, statuses, schedules, created/modified dates, and list order. When you record, we send a snapshot of your current todos (titles, categories, statuses, schedules) so the AI can suggest edits, merges, or new todos.
• Preferences & usage: Counters (like how many seconds of recording you’ve used this month), sort counts, language preference, theme, and whether features like auto-categorization are on.
• Diagnostics & performance data: Crash reports, app hangs, error details, and request details such as which provider/model was used for AI or transcription, how long it took, and whether it succeeded or failed. These include basic device info (model, iOS version, app version).
• Notification info: If you allow notifications, a push token for your device so we can deliver reminders and nudges.
• Ad measurement info: App events such as installs, app opens, and purchases, along with basic device info (model, iOS version, language, time zone) and an anonymous app-specific ID. We don’t collect your device’s advertising identifier (IDFA) and we don’t ask to track you across other companies’ apps and websites.

We do not sell your personal data.

2. Where the Data Comes From

• Directly from you (audio, text, in-app actions, preferences).
• From Apple (Sign in with Apple info, CloudKit sync status, and your Reminders if you turn on Reminders sync).
• From purchase platforms (Apple/RevenueCat subscription data).
• Automatically from the app and backend for syncing, reliability, and performance.

3. How We Use It

We use your data to:

• Let you record audio, transcribe speech, and create/categorize/sync todos.
• Run AI features that update or suggest todos based on your voice input.
• Check your subscription status and apply usage limits for free accounts.
• Sync todos to your private iCloud.
• Sync scheduled todos with Apple Reminders, if you turn that on.
• Send reminders and other notifications, if you allow them.
• Monitor stability, fix bugs, and improve performance.
• See how features are used in aggregate to make Stupido better.
• Measure how well our ads work, for example how many people install Stupido after seeing an ad.

4. Who We Share It With

We only share data with partners who help us run Stupido:

• Cloud hosting — Our backend runs on Cloudflare Workers. Your audio and transcripts may pass through here for transcription and AI processing.
• AI & transcription providers — We send your audio, transcript, and a snapshot of your todos to third-party AI and speech-recognition providers for processing. While you record, audio may stream directly from your device to one of these providers for live transcription. You can ask us for the current list of providers at any time.
• Crash & error reporting — We use Sentry to receive crash reports and error details so we can fix problems. These reports don’t include your audio or todo text.
• Notifications — We use OneSignal to deliver push notifications. OneSignal receives your device’s push token and basic device info.
• Advertising measurement — We use Meta’s SDK to measure how our ads perform. Meta receives app events (installs, app opens, purchases), basic device info, and an anonymous app-specific ID — never your audio, transcripts, or todos.
• Apple services — Sign in with Apple, CloudKit for iCloud sync, App Store for billing.
• RevenueCat — For subscription and entitlement management.
• Legal — If required by law or to protect our rights, users, or the service.

Each of these providers processes data under their own privacy terms.

5. Device Permissions

• Microphone — to record audio for todos.
• Notifications — to send reminders and nudges.
• Reminders — to sync your scheduled todos with the Apple Reminders app.
• Siri & Shortcuts — to run Stupido actions with your voice or from Shortcuts.

All of these are optional except the microphone, which is needed to record.

6. Where Processing Happens

Some partners may process data in the United States or other regions. We use industry-standard protections like:

• TLS encryption in transit
• Keychain for sensitive identifiers on your device
• Apple’s CloudKit security for iCloud sync

7. How Long We Keep It

• Audio files — Used just long enough to process your request, then deleted.
• Transcripts — Used to create your todos. Our backend logs may include transcripts for a limited time so we can troubleshoot problems; they aren’t kept beyond that.
• Todos — Stay on your device. If you sync with iCloud, they’re also in your private iCloud. If you turn on Reminders sync, scheduled todos are also saved to the Apple Reminders app.
• Account identifiers — Stored securely on your device while you use the app.
• Telemetry, crash reports & ad measurement data — Kept for a reasonable period to help with performance and reliability, and by our partners under their own retention policies.

8. Your Choices

• Use Stupido without iCloud sync by signing out of iCloud or turning it off for Stupido in your device settings.
• Turn notifications, Reminders access, and Siri access on or off in your device settings.
• Turn off auto-categorization in settings.
• Reset local data and delete synced data in settings.
• Use Stupido without linking your Apple ID, or stop using Sign in with Apple in your device settings.

9. Your Rights

Depending on where you live, you may have rights to access, correct, delete, or export your data, or to restrict certain processing. Email us at sharif@stupido.com to make a request. We’ll verify and respond as the law requires.

10. Security

We take reasonable steps to protect your information:

• TLS encryption for network requests
• Device-level Keychain storage
• CloudKit for private iCloud sync

No method of transmission or storage is 100% secure, but we work to protect your data.

11. Children’s Privacy

Stupido isn’t for children under the age required by local law (usually 13–16). We don’t knowingly collect personal data from children without proper consent.

12. Changes to This Policy

We may update this policy to reflect changes in how we handle data. If it’s a big change, we’ll let you know in the app. Continuing to use Stupido after changes means you accept the new policy.

13. Contact Us