Privacy Policy for Dusted

Introduction

This Privacy Policy describes how Dusted ("we", "our", or "us") handles information when you use our app for iPhone, iPad, Mac and Apple Watch. We are committed to protecting your privacy and being transparent about our practices.

Information We Collect

Dusted collects and stores the following types of information to provide its functionality:

• Account Information: When you sign in with Apple, we receive your Apple ID identifier and display name (if you choose to share it)
• Routine Data: The routines, tasks, and schedules you create within the app
• Activity Data: Your routine completion history and streaks
• Social Data: Your public profile (display name and bio), friend connections, groups, comments and reactions. When you are signed in and finish a routine that is Visible to Friends (the default for new routines; see Privacy on the routine), a summary of that run (routine name, duration, steps and journal note) is shared with your friends. Set Visible to on a routine to Private to keep its runs to yourself
• Preferences: Your app settings and notification preferences

How We Store Your Data

All your data is stored securely using Apple's iCloud and CloudKit infrastructure:

• Private Data: Your routines, tasks, and personal activity are stored in your private iCloud database, accessible only to you
• Public Data: Your profile, shared activity, friends, groups, comments, reactions and feedback are stored in the app's public CloudKit database, linked to your account ID, so other people using Dusted can see them
• Local Storage: Some preferences are stored locally on your device for performance

Your routines and activity are stored in Apple's secure iCloud infrastructure, subject to Apple's privacy policies and security measures. A few optional features use small services on this website, described below.

Email (Optional)

During onboarding or in Account → Email Preferences you can choose, separately and only if you want to:

• Feedback replies: let the team email you about feedback you sent
• Product updates: receive occasional emails about new features

Both are off by default. If you opt in, your email address (and your app user ID) is stored with our email provider, Resend, and used only for these purposes. It is never shown in the app or shared with anyone else. Every email has an unsubscribe link, and turning both options off — or deleting your account — removes your address.

Feedback and Beta Chat

The in-app Feedback board is public: anyone using Dusted can read feedback items and comments, together with the display name they were posted under, and everyone can post feedback, comment and vote. Beta Chat is only for TestFlight beta testers and the team. You can report any item or message and block its author; a report is seen only by you and the team, who review it and remove content that breaks the rules.

• Edit history: When you edit a feedback item, its earlier title and description stay in the item's public history
• Deleting feedback the team worked on: If you delete a feedback item the team has already started on (it has a status, a plan or a shipped version), or delete your account, your personal data is removed: your name and user ID, device details, screenshot, logs, and the words you wrote. In its place the team keeps a short anonymous record, written by the team and not by you: "Request by a deleted user", a one-line summary in the team's words, the item's tag, its status history and the version that shipped it. It contains no personal data and no hashed or pseudonymous ID. We keep it so the public record of what changed in the app and why stays complete (legitimate interest, GDPR Art. 6(1)(f)). Items no one has worked on are deleted completely
• Logs and screenshots: Used only as evidence for a report; only you and the team can export an item's logs

In TestFlight builds, Beta Chat messages (your display name and text) are mirrored to a public Matrix room so testers can also chat from Beeper or any Matrix app. The app also reads build status (version and build numbers, release notes titles) from this website; that request contains no personal data.

Feedback Assistant (Anthropic)

When you send new feedback with "Grill Me" chosen, the title and text of your draft (and its type and app area) are sent, through our website, to Anthropic, our AI service provider, which suggests up to three follow-up questions. Your name, email address and account ID are not sent. Under Anthropic's commercial terms, API data is not used to train its models. Choose another option to send feedback without this step.

Analytics

The app sends anonymous usage signals (for example, that a screen was opened or a purchase completed, with the app version, iOS version and device model) to TelemetryDeck, a privacy-focused analytics service based in the EU. Signals carry a hashed, random identifier that is not linked to your name, email or account, are never used to track you across apps or websites, and are used only to improve Dusted.

Location, Contacts, Photos and Health

• Location: If you allow it, the Home greeting asks Apple's WeatherKit for the weather near your approximate location, and location reminders are watched on your device. We never receive or store your location
• Contacts: If you allow it, addresses from your contacts are suggested when you set a location reminder. They are read on your device and never uploaded
• Photos: Only a screenshot or image you choose to attach to feedback is uploaded, and only you and the team can see it
• Apple Health: If you allow it, completed routines can be saved to Apple Health as Mindful Minutes on your device. We never receive Health data

Studio (Image Generation)

Studio (Account › Apps & Research) shows app screenshots and image Sets that everyone can view. Signed-in beta testers can generate new images in a Set. Before your first image, the app asks for your permission, and nothing is generated until you tap Allow.

• What is sent to OpenAI: When you generate an image, the text you type (the subject and any details) is sent, through our website, to OpenAI, our service provider, together with the Set's style description and reference images, to make the image. Your name, email address and account ID are not sent; OpenAI only receives a one-way hashed identifier it uses to detect abuse
• How OpenAI handles it: Under OpenAI's API terms, data sent through the API is not used to train its models by default, and may be kept for up to 30 days to monitor for abuse before it is deleted. See OpenAI's API data controls and privacy policy
• What is public: The text you typed, the generated image, your display name and the reactions people give it are public in Studio, visible to everyone using Dusted. Our website checks your text and the image with automated moderation, and nothing is published if either is flagged
• Usage limits: To keep within a weekly limit and the team's budget, our server counts how many images each account made this week and what they cost, stored by account ID only
• Reporting and removal: Every image has Report and Block. A reported image is hidden for everyone until the team reviews it. To have an image you made removed, report it or email us (below), and we will remove it

Public Routine Catalog

The iOS app downloads a public catalog of routine templates from this website (/api/v1/templates.json) so we can publish new templates without shipping an app update. The request is anonymous — it contains no account information, no device identifiers, and no user content. The catalog itself is identical for every user and contains no personal data.

Crash and Performance Diagnostics

TestFlight and App Store builds send this website the anonymous crash, hang and performance reports that Apple's MetricKit gives the app (call stacks, durations, memory and launch times, the iOS version and device model), with the app version and build number. They contain no account information, no device name or identifier and no user content, are used only to find and fix bugs, and are kept for 60 days.

Information We Don't Collect

We want to be clear about what we don't do:

• We do not track you across other companies' apps or websites, and the app contains no advertising
• We do not collect health or fitness data
• We do not sell or share your data with third-party advertisers
• We do not collect your location
• We do not upload your contacts or your photo library

Third-Party Services

Dusted integrates with the following Apple services:

• Sign in with Apple: For secure authentication; your email is only used if you opt in to emails (see above)
• iCloud/CloudKit: For secure cloud storage and sync across your devices
• Apple Music: If you choose to attach music to routines, the app accesses your Apple Music library (requires separate permission)
• Notifications: For routine reminders (requires your permission)

We also use these service providers: TelemetryDeck for anonymous analytics, Anthropic for the feedback assistant, OpenAI for Studio images, Resend for optional emails, and Vercel to host this website and its small services (each described above).

Your Rights (GDPR)

You have full control over your data:

• Access: All your data is visible within the app
• Delete: You can delete any routine, task, or activity record at any time. Deleted data is removed from iCloud
• Export: Your data is stored in your personal iCloud account
• Account Deletion: You can delete your account and all associated data through the app settings. Feedback the team has already worked on stays as an anonymous team-written summary, as described under Feedback and Beta Chat

Data Sharing

Dusted includes optional social features:

• You can choose to share routines with friends or make them public
• You can choose to make your activity visible to friends
• These sharing features are entirely optional and controlled by you
• You can remove shared content or revoke access at any time

Children's Privacy

Dusted is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us to have it removed.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this Privacy Policy periodically.

Contact Us

If you have any questions about this Privacy Policy or Dusted, please contact us:

• Email: josdyr@gmail.com
• Developer: Jostein Dyrseth