Privacy Policy

This policy describes what Chunkable (“the app”, “we”, “us”) does with your information. It is written to match what the app actually does. If something here ever stops matching the app's real behavior, that is a bug in this document.

Chunkable is made by Lavenderx, who is the data controller for the purposes of the GDPR. For questions about this policy or your data: email chunkableapp@gmail.com.

The short version

• No account, no login, no email address collected, ever. There is nothing to sign up for.
• Everything you write stays on your device. Your brain dumps, steps, routines and settings are stored locally, not on a server we run.
• One thing leaves your device: the text of a brain dump, sent to an AI provider to turn it into a checklist. Nothing else you do in the app sends anything anywhere.
• We don't sell or share your data. No ads, no analytics, no trackers, no data brokers.
• Voice input uses your phone's own dictation. We never receive, record or store audio.
• Deleting your data is immediate and complete. “Delete everything” in Settings erases it on the spot, and there is no account elsewhere for it to survive in.

1. What Chunkable stores, and where

Everything below is stored locally on your device. It is not uploaded to a server we operate, not synced to any account, and not backed up to a cloud by us:

• Brain dumps: the text you type or dictate, and when.
• Steps: your checklist items, whether they are done, their order, and their time estimates.
• Routines: any breakdown you chose to save and reuse.
• Settings: your appearance, reading, focus, timer and sound preferences.

Chunkable's optional home-screen widgets read this same local data and write back to it when you tick a step. They send nothing anywhere and create no account or identifier.

2. What leaves your device

Breaking down a brain dump. When you ask Chunkable to turn a brain dump into steps, the text of that brain dump is sent over an encrypted connection to an AI provider, which returns a list of steps. Two optional preferences go with it, both about how the breakdown should be written rather than about you: whether you prefer smaller or bigger steps, and a short custom instruction if you are a Pro user and have written one. The steps come back to your device and are stored as described in section 1.

We do not store the text of your brain dumps on any server of ours, and we do not log it. Before a brain dump is sent, it is checked for language suggesting a mental health crisis; if it matches, the text is not sent to any AI provider at all and the app offers support information instead.

Splitting a step. When you tap “Make this smaller” on a single step, the text of that one step is sent the same way, and comes back as two or three smaller steps. Nothing else about your list goes with it.

Nothing else sends anything. Running a timer, taking a break, starting a routine, browsing your history, using a widget and changing any setting are all entirely on-device.

Voice input. Dictating a brain dump uses your phone's own speech recognition, the same one your keyboard's dictation uses, under Android's and your device's terms. We do not operate or pay for any transcription service, we never receive audio, and no audio is recorded to a file. We receive only the resulting text, which sits in an editable box and goes nowhere until you choose to break it down.

Purchases. Buying Pro is handled by Google Play and RevenueCat. We never see or receive your card number or payment details. RevenueCat receives an anonymous purchase record so the app can tell whether Pro is active and so “Restore Purchase” works on a new device.

Notifications. The running-timer notification and the optional weekly note are both scheduled by the app on your own phone. There is no push service, no device token, and no server involved in either. Nothing about them leaves your device.

3. Who else processes your data

These are every third party involved, what they receive, and why. There are no others.

• OpenAI, as our AI provider: the text of a brain dump, in order to generate your checklist. Under OpenAI's standard API terms, data sent this way is not used to train their models by default, though they may briefly retain requests to monitor for abuse under their own policy. Changed September 9, 2026. This previously named Google as a second AI provider, and that was accurate then: the app tried Google's Gemini first and fell back to OpenAI. Gemini has been switched off, because its free tier was never actually available to us, so it is no longer called and receives nothing.
• Cloudflare, as our hosting provider: your request passes through its network in transit, the same as any web request through any host.
• Google Play and RevenueCat, for purchases: an anonymous record that a purchase happened. No payment details reach us.

International transfers. These providers process data on servers in the United States and other countries, so a brain dump you break down may be processed outside your own country, including outside the UK or EEA. Where that involves personal data, the transfer relies on the providers' own transfer safeguards, such as the European Commission's Standard Contractual Clauses.

4. Our legal basis for using your data

• Performing our contract with you (Article 6(1)(b) GDPR) for sending a brain dump to an AI provider and for handling a purchase. These are the things you asked the app to do, and it cannot do them otherwise.
• Our legitimate interests (Article 6(1)(f) GDPR) for the safety check described in section 2, in keeping the service secure and preventing abuse.

There is no processing here that relies on consent, because there is no analytics, advertising, profiling or automated decision-making that produces legal or similarly significant effects.

5. How long it's kept

• On your device: until you delete it, either individually or with “Delete everything” in Settings. Uninstalling the app also removes it.
• On our side: nothing is retained. We keep no copy of your brain dumps, steps or settings.
• With our AI provider: only for as long as OpenAI's own abuse-monitoring policy requires, which is currently up to 30 days.
• Purchase records: kept by Google Play and RevenueCat for as long as they need them to support restores, refunds and their own legal obligations.

6. Your rights

Because Chunkable holds no account or profile about you, the two rights people most often need are things you can exercise yourself, instantly, without asking us:

• Access and portability: Settings → “Export everything as text”.
• Erasure: Settings → “Delete everything”, which is immediate and permanent.

If you are in the UK or EEA you also have the right to rectification, to restrict or object to processing, and to withdraw consent where processing relies on it. Since your data lives on your own device and we hold no copy, most of these you can act on directly by editing or deleting it in the app; for anything you cannot, email chunkableapp@gmail.com. If you are in California, you have the right to know what is collected, to delete it, and to opt out of its sale or sharing. We do not sell or share personal information, so there is nothing to opt out of.

Complaints. If you think we have handled your data improperly, you can lodge a complaint with your local data protection authority. In the UK that is the Information Commissioner's Office (ico.org.uk); in the EEA it is the supervisory authority for the country you live in.

7. No accounts, no analytics, no ad tracking

• There is no login, no account creation, and no way to identify you personally within the app.
• Chunkable includes no analytics SDK, no crash-reporting SDK, no advertising SDK, and no third-party tracker of any kind. We do not know how often you open the app or what you typed.
• We do not sell, rent or share your data with data brokers, advertisers or anyone else.

8. Children's privacy

Chunkable is not directed at children and we do not knowingly collect information from anyone under 13, or the relevant minimum age where you live. Task-initiation paralysis is not limited to adulthood, so this is not an adults-only app, but since it requires no account and collects no personal information from anyone, there is no mechanism by which we would knowingly collect a younger child's data in the first place.

9. Changes to this policy

If this policy changes in a way that affects what data is collected or how it is used, we will update the “Last updated” date above and, for any material change, make a reasonable effort to surface it in the app before it takes effect.