Privacy policy

Effective date: [GAP: date of publication]

This policy explains what information Stridelist collects, why, who helps us process it and the choices you have. Stridelist is made by [GAP: full registered legal name of Phil's LLC, e.g. "PWG ... LLC", and its state of registration] ("PWG", "we", "us").

The short version

• We collect only what Stridelist needs to work: your account, the things you add to it, and a bank connection if you choose to add one.
• We do not sell your data, share it for advertising, or track you across other services and websites.
• The bank connection is read-only. Stridelist can see balances. It cannot move money.
• You can delete your account and your data from inside Stridelist at any time.

What we collect

Account information. Your email address, so you can sign in and so we can contact you about your account. We also create an account ID to keep your data separate from other users' data.

Profile photo (optional). If you add a profile photo, we store it so it appears in your account. Stridelist only gets the photo you choose. It does not get access to the rest of your photo library.

Your content. The to-dos, calendar items, shopping lists, routines and journal entries you create in Stridelist. We store them so they sync between your devices.

Voice notes and journal audio. When you use the microphone, your speech is turned into text, on your device where your device supports it, otherwise by Apple's speech recognition service under Apple's privacy policy. [GAP: say whether journal audio recordings are saved, where, and for how long. If audio is never kept, say "We do not store the audio; only the resulting text is saved."]

Calendar (optional). If you allow access to your calendar, Stridelist reads your events to show them next to your to-dos. [GAP: say whether calendar events are only shown on the device or also copied to our servers.]

Financial information (optional, through Plaid). If you connect a bank account, we use Plaid Inc. ("Plaid") to get read-only information about that account: the account name, the last four digits of the account number, the account type, and current, available and pending balances. [GAP: confirm whether transaction details are also kept; the Plaid setup asks for the transactions product.] Stridelist cannot make payments, transfer money or change anything at your bank. We never see or store your bank username or password; you give those directly to Plaid. The access key Plaid gives us is stored encrypted on our servers and is never sent to your device.

Plaid's handling of your information is described in the Plaid End User Privacy Policy: https://plaid.com/legal/#end-user-privacy-policy. By connecting an account you allow Plaid to collect and process your information under that policy.

What we do not collect. We do not collect your precise location, contacts, advertising identifiers or browsing history. We do not use analytics or advertising tools that track you. [GAP: confirm this is still true at launch, for example that no crash reporting tool was added.]

How we use it

• To run Stridelist: sign you in, store and sync your content, show your schedule and balances.
• To suggest tasks: when you speak or type a note, the text may be sent to an AI model to turn it into well-formed to-dos with dates. We use Cloudflare Workers AI for this. [GAP: confirm the provider. The current build calls Anthropic's API instead; name whichever provider the shipped Stridelist uses, or both.] Your text is used only to produce the suggestion and is not used to train models by us. [GAP: confirm the provider's data use and retention terms support this sentence.]
• To keep accounts secure and fix problems.
• To contact you about your account, such as security notices or changes to this policy. We do not send marketing email unless you opt in. [GAP: confirm whether any marketing email is planned.]

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

Who helps us (service providers)

These companies process data only to provide their service to us:

• Cloudflare, Inc. hosts Stridelist's servers and stores your account and content, and runs Workers AI for task suggestions.
• Plaid Inc. connects your bank account, read-only, only if you choose to.
• Apple Inc. provides speech recognition when it cannot run on your device, plus distribution through its store and notifications.
• [GAP: Anthropic, PBC, if the shipped Stridelist still sends notes to Anthropic for task suggestions]
• [GAP: email delivery provider, if sign-in or account email is sent through one]

We may also share information if the law requires it, to protect someone's safety, or as part of a sale or merger of PWG, in which case this policy continues to apply to your data.

Where your data is stored

Your data is stored on Cloudflare's infrastructure. [GAP: region or "in the United States and other countries where Cloudflare operates"; if you serve EU or UK users, name the transfer safeguard you rely on.]

How long we keep it

We keep your account and content while your account is open. When you delete your account, we delete your account information, content, profile photo and any saved audio, and we disconnect your bank link through Plaid, within [GAP: number of days]. Backups may hold copies for up to [GAP: number of days] before they are overwritten.

Deleting your account

You can delete your account at any time in Stridelist under [GAP: exact path, e.g. Account › Delete account]. You can also email us at [GAP: contact email] to ask for deletion. Deleting your account removes your data as described above and cannot be undone.

You can disconnect your bank at any time without deleting your account, from [GAP: where in Stridelist or dashboard].

Your choices and rights

• You can view and edit your content in Stridelist at any time.
• You can turn microphone, speech recognition and calendar access on or off in your device's Settings.
• Depending on where you live (for example California, the EU or the UK), you may have the right to access, correct, delete or get a copy of your personal information, and to object to some processing. To use these rights, email [GAP: contact email]. We will reply within [GAP: response time, e.g. the legal deadline that applies to you]. We will not treat you differently for using them.

Children

Stridelist is not meant for children under [GAP: minimum age; confirm with the age rating], and we do not knowingly collect information from them. If you think a child has given us information, contact us and we will delete it.

Security

We use encryption in transit (HTTPS) for all traffic, store sign-in details in your device's Keychain, and encrypt bank access keys at rest. No system is perfectly secure, but we work to protect your information and will tell you if a breach affects you, as the law requires.

Changes to this policy

If we make material changes, we will tell you in Stridelist or by email before they take effect. The effective date at the top always shows the latest version.

Contact

[GAP: full legal name of the LLC]

[GAP: mailing address]

[GAP: contact email]