Privacy Policy

Last updated 6 October 2026

Draft for review before launch. Items in [BRACKETS] are to be filled in by the publisher; have this checked by someone qualified in UK data-protection and consumer law.

Since I've Done is built so that we learn as little about you as possible. There is no account, no sign-in and no advertising. This policy explains exactly what happens with data in the app and on this website.

Who we are

Since I've Done is published under the name KENOS by [PUBLISHER'S LEGAL NAME], [ADDRESS], who is the data controller under UK GDPR. Contact: [CONTACT EMAIL].

What stays on your phone

Everything you track (habits, events, urges, notes, reasons and photos) is stored on your iPhone only. We have no server copy of it and no way to see it. Photos you add are reduced in size on the phone and their metadata (such as location) is removed before they are saved.

Backup to your own iCloud

If you choose iCloud backup, the app saves an encrypted copy of your data to the app's private folder inyour iCloud Drive. It is encrypted on the phone with a key stored in your iCloud Keychain (or recoverable with your recovery code). Apple stores the encrypted file; neither Apple nor we can read it. You can choose "Keep on this phone only" instead, in which case nothing is backed up.

Share links

If you create a report link, the report is encrypted on your phone with a new key. Only the encrypted report is sent to our server (Cloudflare Workers), stored until the expiry you chose (24 hours to 90 days) and then deleted automatically. The key is part of the link after the "#" and is never sent to our server, so we cannot read reports. You can update or revoke a link at any time. For each link we store: its id, a one-way hash of its revoke token, when it was created and expires, and how many times it was opened and when it was last opened (time only, never who or from where).

Anonymous statistics (optional, off by default)

If you switch on "Weekly counts", the app sends one snapshot a week containing, for each tracker: its category (for example "smoking"), its goal type, a streak band (0–7, 8–30, 31–90 or 90+ days) and how often each replacement helped. It contains no name, no account, no device or install identifier. Custom tracker names are only included if you also switch on "Include custom names"; they are first stripped on your phone of numbers, email addresses and @names and cut to 40 characters, and on our side they are deleted after 90 days and only ever reported when at least 5 snapshots share the same name. You can see exactly what is sent in Settings › Anonymous stats.

Website and server logs

This website loads no third-party scripts, fonts or trackers. We do not store IP addresses. Our server does not keep request logs; a short-lived rate limiter counts requests per connection in memory to prevent abuse, without storing anything.

Notifications

Reminders are scheduled on your phone. They use neutral wording unless you choose otherwise. Nothing is sent to us.

Processors

Cloudflare, Inc. hosts this website and the encrypted share links (as a processor). Apple provides iCloud storage for backups under your own Apple account.

Legal basis and your rights

Share links and backups exist because you ask for them (performance of the service). Anonymous statistics are sent only with your consent, which you can withdraw at any time in Settings. Because we hold no data that identifies you, we usually cannot find "your" data on our side; you can delete share links yourself at any time. You have the right to complain to the Information Commissioner's Office (ico.org.uk).

Children

[AGE POLICY: minimum age and how the app follows the UK Age Appropriate Design Code.]

Changes

We'll update this page and its date if anything changes.