Privacy Policy
01
Overview
This Privacy Policy explains what personal data All Set: Routines & Checklists ("All Set", "the App") collects, why we collect it, and what rights you have over your data.
We have designed All Set with privacy in mind. Your routines, goals, and personal content are stored in your own iCloud account — not on our servers. We do use third-party services (Adjust, Firebase Crashlytics, RevenueCat) for analytics and crash reporting, which collect limited technical data as described in this policy.
02
Data We Collect
2.1 Data You Provide Directly
When you use All Set, you may create the following content, which is stored in your iCloud account:
| Data type | Purpose | Where stored |
|---|---|---|
| Routine names & descriptions | Core app functionality | Your iCloud (CloudKit) |
| Checklist items & notes | Core app functionality | Your iCloud (CloudKit) |
| Photos attached to items or goals | Visual context for your content | Your iCloud (CloudKit) |
| Voice memos attached to items | Audio notes for your routines | Your iCloud (CloudKit) |
| Location data (coordinates & address) | Location-based reminders (premium) | Your iCloud (CloudKit) |
| Goals & target dates | Goal tracking functionality | Your iCloud (CloudKit) |
| Completion history & timestamps | Progress tracking & statistics | Your iCloud (CloudKit) |
| XP, level & achievement badges | Gamification system | Your iCloud (CloudKit) |
2.2 Data Collected Automatically
We use a small number of third-party services that automatically collect limited analytics data to improve App stability and measure marketing effectiveness:
- Firebase Crashlytics — collects crash reports and diagnostics to help us fix bugs and improve stability.
- Adjust — collects app events (such as installs and subscription starts) for marketing attribution. With your permission via the App Tracking Transparency prompt, Adjust may also use your device's advertising identifier (IDFA).
- RevenueCat — processes purchase and subscription events to verify your entitlement. It does not receive your payment details.
See Section 4 for details on each provider, including links to their privacy policies.
2.3 Data We Do NOT Collect
- Your name, email address, or phone number
- Health or fitness data (we do not use HealthKit)
- Contacts or address book data
- Calendar events
- Precise or continuous background location (location triggers are handled locally by iOS)
- Photos from your photo library beyond those you explicitly attach to routines
- Financial or payment card data (payments handled entirely by Apple)
03
How We Use Your Data
Your content (routines, goals, photos, etc.) stays in your iCloud account and is only used to run the app — syncing across your devices, powering collaboration with people you invite, and sending the reminders you set up.
The analytics data collected by our third-party services (Adjust, Firebase, RevenueCat) is used solely to fix crashes, understand how the app is being used, and manage your subscription.
04
Third-Party Services
All Set integrates the following third-party services. Each service is governed by its own privacy policy:
Apple iCloud / CloudKit
Your routine data is stored in your personal iCloud account using Apple's CloudKit framework. Apple's iCloud servers are used for storage and sync. We do not have direct access to your CloudKit data. Apple's Privacy Policy applies: apple.com/legal/privacy.
Firebase (Google)
We use Firebase Crashlytics to collect crash reports and diagnostics. Firebase may collect device identifiers and error logs. Google's Privacy Policy applies: policies.google.com/privacy. Google is certified under the EU–US Data Privacy Framework.
Adjust
We use Adjust for mobile marketing attribution and analytics. Adjust tracks events such as app installs, routine completions, and subscription starts to help us understand how users discover and engage with All Set. Adjust collects your device's advertising identifier (IDFA) only if you grant tracking permission via the App Tracking Transparency prompt. Adjust's Privacy Policy: adjust.com/terms/privacy-policy. Adjust is certified under the EU–US Data Privacy Framework and uses Standard Contractual Clauses for international data transfers.
RevenueCat
We use RevenueCat to manage in-app purchases and subscriptions. RevenueCat receives anonymised purchase transaction data from Apple and uses it to verify your subscription entitlement. RevenueCat does not receive your payment details. RevenueCat's Privacy Policy: revenuecat.com/privacy.
Apple App Store & StoreKit
All payments are processed by Apple. We do not collect or store your payment card details. Apple's privacy policy governs payment data.
05
Data Storage & Security
Your content (routines, goals, photos, voice memos) is stored exclusively in your personal iCloud account via Apple's CloudKit. It is encrypted in transit and at rest by Apple. We never store your personal content on our own servers.
Analytics data collected by Adjust and Firebase is stored on their servers, which are located primarily in the United States and/or the European Economic Area. Both providers use appropriate safeguards for international data transfers (Standard Contractual Clauses or equivalent certification).
Retention: Your iCloud content is retained until you delete it or your iCloud account. Crash logs and analytics events are retained by Adjust and Firebase in accordance with their own retention policies (typically 90 days to 2 years). You may request deletion at any time — see Section 7.
We implement industry-standard security practices within our control, including secure API key management and following Apple's security guidelines. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
06
Data Sharing
We do not sell your personal data. We share data only in the following limited circumstances:
- Service providers: Firebase, Adjust, and RevenueCat receive only the data necessary to provide their services as described in Section 4.
- Collaboration: When you share a routine, collaborators you explicitly invite can view and interact with that routine's data via Apple's CloudKit sharing infrastructure.
- Legal obligations: We may disclose data if required by applicable law, court order, or legitimate governmental authority.
- Business transfers: In the unlikely event of a merger, acquisition, or asset sale, user data may be transferred to the successor entity, subject to the same privacy protections.
07
Your Rights
You have the right to access, correct, or delete your personal data at any time. Most of your content can be deleted directly in the App. To remove everything, delete the App and clear its data from iOS Settings → [Your Name] → iCloud → Manage Storage.
You can withdraw tracking consent at any time via iOS Settings → Privacy & Security → Tracking → All Set.
For any other requests, reach us at [email protected].
08
Children's Privacy
All Set is not directed to anyone under 13. We do not knowingly collect personal data from children — if you believe this has happened, contact us and we will delete it promptly.
09
App Tracking Transparency
In accordance with Apple's App Tracking Transparency (ATT) framework, we request your permission before tracking your activity across apps and websites owned by other companies. This tracking is used by Adjust for marketing attribution.
If you deny tracking: Adjust will operate in a privacy-preserving mode using only anonymised, aggregated data. The App's full functionality is unaffected.
You can change your tracking preference at any time in iOS Settings → Privacy & Security → Tracking → All Set.
10
Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you via an in-app notice. Your continued use of the App after changes become effective constitutes acceptance of the revised policy.
We encourage you to review this policy periodically. The most current version is always available at https://apps.timurd.com/allset/privacy.html.
11
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
Developer
Timur Demir, Berlin, Germany
Response time
We aim to respond within 5 business days.