Privacy Policy

This policy describes what Chunkable (“the app”, “we”, “us”) does with your information. It is written to match what the app actually does. If something here ever stops matching the app's real behavior, that is a bug in this document.

Chunkable is made by Lavenderx, who is the data controller for the purposes of the GDPR. For questions about this policy or your data: chunkableapp@gmail.com.

The short version

• No account, no login, and the app never asks for your email address. There is nothing to sign up for. We only see your address if you choose to email us.
• Everything you write stays on your device. Your brain dumps, steps, routines and settings are stored locally, not on a server we run. Android's own backup may copy them into your own Google Drive, which is covered in section 1.
• What leaves your device. The text you ask the AI to work on, a brain dump or a step you split, sent to an AI provider. Your voice while you dictate, which your phone's speech service turns into text. And a purchase record, if you buy Pro. Beyond those, the app sends nothing; anything else goes only if you choose to send it yourself, like an email to us or a Google Play rating.
• We don't sell or share your data. No ads, no analytics, no trackers, no data brokers.
• Voice input uses your phone's own speech service, which on most Android phones is Google's and receives your voice while you talk. We never receive, record or store audio.
• Deleting your data is immediate. “Delete everything” in Settings erases it on the spot. There is no account of ours for it to survive in. Android's own backup copy is replaced the next time your phone backs up, and you can delete that yourself from your Google account.

1. What Chunkable stores, and where

Everything below is stored locally on your device. It is not uploaded to a server we operate and not synced to any account of ours:

• Brain dumps: the text you type or dictate, and when.
• Steps: your checklist items, whether they are done, their order, and their time estimates.
• Routines: any breakdown you chose to save and reuse.
• Settings: your appearance, reading, focus, timer and sound preferences.

Android's own backup. Your phone, not Chunkable, may copy this data into a private folder in your own Google Drive. This is Android Auto Backup, on by default for apps on Android 6 and later, and it is how your brain dumps come back when you set up a new phone. It does not use your Drive storage. On Android 9 and later it is end-to-end encrypted with your device's PIN, pattern or password, so Google cannot read it. We never see it, cannot access it, and are not sent it. You can switch it off in your phone's Settings, under Google, then Backup.

Chunkable's optional home-screen widgets read this same local data and write back to it when you tick a step. They send nothing anywhere and create no account or identifier.

2. What leaves your device

Breaking down a brain dump. When you ask Chunkable to turn a brain dump into steps, the text of that brain dump is sent over an encrypted connection to an AI provider, which returns a list of steps. Two optional preferences go with it, both about how the breakdown should be written rather than about you: whether you prefer smaller or bigger steps, and a short custom instruction if you are a Pro user and have written one. The steps come back to your device and are stored as described in section 1.

We do not store the text of your brain dumps on any server of ours, and we do not log it. Before a brain dump is sent, it is checked for language suggesting a mental health crisis; if it matches, the text is not sent to any AI provider at all and the app offers support information instead.

Splitting a step. When you tap “Make this smaller” on a single step, the text of that one step is sent the same way, and comes back as two or three smaller steps. Nothing else about your list goes with it.

Nothing else sends anything. Running a timer, taking a break, starting a routine, browsing your history, using a widget and changing any setting are all entirely on-device.

Voice input. Dictating a brain dump uses your phone's own speech recognition, the same one your keyboard's dictation uses. While you are dictating, your phone sends your voice to that speech service to turn it into text. On most Android phones the service is Google's, and it runs under Google's and your device's terms, not ours. We do not operate or pay for any transcription service, we never receive audio, and no audio is recorded to a file. We receive only the resulting text, which sits in an editable box and goes nowhere until you choose to break it down.

Purchases. Pro is a subscription (monthly or yearly, your choice), handled by Google Play and RevenueCat. We never see or receive your card number or payment details. It renews automatically until you cancel it in Google Play; you keep Pro until the period you already paid for ends. RevenueCat receives an anonymous purchase record so the app can tell whether Pro is active and so “Restore Purchase” works on a new device.

Notifications. The running-timer notification and the optional weekly note are both scheduled by the app on your own phone. There is no push service, no device token, and no server involved in either. Nothing about them leaves your device.

3. Who else processes your data

These are every third party involved, what they receive, and why. There are no others.

• OpenAI, as our AI provider: the text of a brain dump or of a step you split, in order to generate steps. Under OpenAI's standard API terms, data sent this way is not used to train their models by default, though they may briefly retain requests to monitor for abuse under their own policy.
• Cloudflare, as our hosting provider: your request passes through its network in transit, the same as any web request through any host.
• Google Play and RevenueCat, for purchases: an anonymous record that a purchase happened. No payment details reach us.
• Google Play Integrity, on every request to our AI provider: a check that the request is coming from a genuine, unmodified copy of this app running on a real device, not from a script. It does not identify you and creates no account or profile; we only ever see a pass/fail-style result, never anything that names or tracks you individually.
• Your phone's speech service, only if you use voice input: the audio of what you say while dictating, in order to turn it into text. On most Android phones this is Google, acting under its own terms with you rather than on our behalf. We never receive the audio.
• Google Play, only if you rate or review Chunkable: your rating and review, which Google handles under its own terms. The app shows Google's rating card at most once (erasing everything with “Delete everything” resets that, along with everything else), and is never told whether you rated or what you wrote.
• Google (Gmail), only if you email us, including through “Send feedback” in Settings: your message, your email address, and the version line the email starts with (the app and Android version, which you can delete before sending), so we can reply. Your own email app sends it, not Chunkable.

International transfers. These providers process data on servers in the United States and other countries, so a brain dump you break down, or your voice while you dictate, may be processed outside your own country, including outside the UK or EEA. Where that involves personal data, the transfer relies on the providers' own transfer safeguards, such as the European Commission's Standard Contractual Clauses.

4. Our legal basis for using your data

• Performing our contract with you (Article 6(1)(b) GDPR) for sending a brain dump to an AI provider and for handling a purchase. These are the things you asked the app to do, and it cannot do them otherwise.
• Our legitimate interests (Article 6(1)(f) GDPR) for the safety check described in section 2, in keeping the service secure and preventing abuse, and for reading and answering an email you choose to send us.

There is no processing here that relies on consent, because there is no analytics, advertising, profiling or automated decision-making that produces legal or similarly significant effects.

5. How long it's kept

• On your device: until you delete it, either individually or with “Delete everything” in Settings. Uninstalling the app clears the copy on the phone. It does not delete Android's backup copy in your Google Drive, which is controlled by your Google account and removable there.
• On our side: we keep no copy of your brain dumps, steps or settings. The one exception is an email you choose to send us: it stays in our inbox for up to a year after our last reply, then we delete it, or sooner if you ask.
• With our AI provider: only for as long as OpenAI's own abuse-monitoring policy requires, which is currently up to 30 days.
• With your phone's speech service: under that service's own terms, which on most Android phones are Google's.
• Purchase records: kept by Google Play and RevenueCat for as long as they need them to support restores, refunds and their own legal obligations.

6. Your rights

Because Chunkable holds no account or profile about you, the two rights people most often need are things you can exercise yourself, instantly, without asking us:

• Access and portability: Settings → “Export everything as text”.
• Erasure: Settings → “Delete everything”, which is immediate and permanent.

If you are in the UK or EEA you also have the right to rectification, to restrict or object to processing, and to withdraw consent where processing relies on it. Since your data lives on your own device and we hold no copy, most of these you can act on directly by editing or deleting it in the app; for anything you cannot, email chunkableapp@gmail.com. If you are in California, you have the right to know what is collected, to delete it, and to opt out of its sale or sharing. We do not sell or share personal information, so there is nothing to opt out of.

Complaints. If you think we have handled your data improperly, you can lodge a complaint with your local data protection authority. In the UK that is the Information Commissioner's Office (ico.org.uk); in the EEA it is the supervisory authority for the country you live in.

7. No accounts, no analytics, no ad tracking

• There is no login, no account creation, and no way to identify you personally within the app.
• Chunkable includes no analytics SDK, no crash-reporting SDK, no advertising SDK, and no third-party tracker of any kind. We do not know how often you open the app or what you typed.
• We do not sell, rent or share your data with data brokers, advertisers or anyone else.

8. Children's privacy

Chunkable is not directed at children and we do not knowingly collect information from anyone under 13, or the relevant minimum age where you live. Task-initiation paralysis is not limited to adulthood, so this is not an adults-only app, but since it requires no account and collects no personal information through the app (the only personal information we ever see is an email someone chooses to send us), there is no mechanism by which we would knowingly collect a younger child's data in the first place.

9. Changes to this policy

If this policy changes in a way that affects what data is collected or how it is used, we will update the “Last updated” date above and, for any material change, make a reasonable effort to surface it in the app before it takes effect.