Privacy policy

The short version

Your documents and the tasks made from them are stored on your device and, if you have iCloud switched on, in your own private iCloud database. We cannot see any of it.

To turn a document into a dated task, its text — and in some cases a reduced-size image — passes through a service we run, which forwards it to Google's Gemini API and returns the result. We do not keep a copy. What we do keep is a count of how many documents each installation has processed this month, so the free allowance can be enforced. Both are described in full below.

There are no accounts. We never learn your name, your email address, or anything else that identifies you.

What stays on your device

• The photographs and files you capture, as attachments.
• The text read from them, and the tasks, dates, and amounts derived from that text.
• Your settings.

If iCloud is enabled for DueTee, this data also syncs through Apple's CloudKit to your other devices, in your private database. It is governed by Apple's privacy policy. We have no access to it.

What our service receives

Before anything leaves your phone, your device reads the document itself using Apple's on-device text recognition. That text is then filtered on your device to redact patterns that look like payment card numbers, national identity numbers, and similar identifiers.

When you capture a document, the following is sent to our service:

• the filtered text, and — only when the on-device reading was too sparse to work from — a reduced-size copy of the image;
• an installation identifier: a random value generated on first launch, not derived from your device, your Apple Account, or anything about you;
• a device-integrity token from Apple's App Attest, which proves the request came from a genuine copy of DueTee rather than from someone abusing our service. It identifies the app, not you;
• if you subscribe, the receipt Apple signed for that subscription, so we can confirm the subscription is real.

Be aware that the redaction applies to the text, not to the picture. When an image is sent, anything visible in the photograph is sent with it.

What our service keeps, and for how long

Your documents are not stored. The text and any image are held in memory only for as long as the request takes, forwarded to Google, and discarded when the response is returned. Nothing is written to a database, a file, or a backup.

We do keep two things:

• A usage counter. One record per installation per calendar month, holding the installation identifier and the number of documents processed. Nothing about the documents themselves. This exists solely to enforce the free monthly allowance, and is kept for twelve months so that abuse can be identified.
• Operational logs. When a request fails, our service records the installation identifier, a timestamp, and the error. Google Cloud also records standard request metadata including IP addresses. Logs are retained for 30 days and then deleted automatically. They do not contain document text or images.

Our service runs on Google Cloud in Zurich, Switzerland. The usage counters are stored there.

What Google receives

Our service forwards the filtered text, and the image where one was sent, to Google's Gemini API. Google processes it to produce the structured result and returns it to us, and we return it to your phone. Google does not receive your installation identifier or anything else that distinguishes one DueTee user from another — to Google, every request comes from us.

We use the Gemini API as a paid service. Under Google's terms for paid use, Google does not use this data to improve its products, but may retain it for a limited period to detect abuse.

Google's handling of that data is governed by their Gemini API terms, which set out their retention and training practices in full. We encourage you to read them.

Purchases

Subscriptions are sold and billed by Apple. We never see your card, your billing address, or your Apple Account. When the app checks whether you are subscribed, it sends us the receipt Apple signed; we verify Apple's signature and read the product and expiry date from it. We do not store the receipt. Apple gives us aggregated, anonymised sales reports that cannot be traced back to an individual.

Notifications

Reminders are scheduled and delivered locally by your device. Nothing is sent through a push server, so no one — including us — learns what you have due or when.

This website

rebeldowner.com is a set of static pages on Firebase Hosting. It sets no cookies and runs no analytics or tracking scripts. Google logs standard web-server request data, including IP addresses, as part of operating the hosting service.

Deleting your data

Open DueTee → Settings → Data → Delete All Data. That removes every item and attachment from the device and from your iCloud database. Deleting the app removes everything held locally.

The usage counter on our side is tied to an installation identifier we cannot connect to you, so we have no way to look it up on request. That identifier is kept in your device's keychain, which survives deleting the app — so reinstalling does not reset your monthly count. Erasing the device clears it. If you have emailed us and want that correspondence deleted, write to support@badaboop.com and we will.

Children

DueTee is intended for adults managing their own household administration. It is not directed at children, and we do not knowingly collect information from anyone under 13.

Changes

If this policy changes materially, the updated version will be posted here with a new date, and the change will be noted in the app's release notes. Continuing to use DueTee after that means the revised policy applies.

Contact

BadaBoop, Maseru, Lesotho — support@badaboop.com