Privacy Policy
What stays on your device
Everything you create in Kickstart — tasks, micro-steps, routines, focus sessions, streaks, preferences — is stored on your device and, if you enable iCloud, mirrored to your private iCloud database (CloudKit), which Tarsoul cannot read. Voice capture uses on-device speech recognition; audio never leaves your phone. Location triggers for routines are processed entirely on-device.
The one exception: AI task breakdowns
When your device cannot run the on-device model and you use "Unstick Me" or AI triage, the text of that single task is sent over an encrypted connection to our server, which forwards it to our AI provider (Anthropic) to generate micro-steps. This processing is transient: task content is never stored, never logged in plaintext, and never used to train models. Our server keeps only a counter of how many breakdowns your account used this month (for fair-use limits).
Accounts (optional)
The core app works with no account at all. If you enable sync or Body Double Rooms you sign in with Apple, and we store: your Apple account identifier (an anonymous token — not your email unless you choose to share it), your subscription plan, and monthly usage counters. You can delete your account and all server records with one tap in Settings → Account → Delete my account & data.
Body Double Rooms
Rooms are ephemeral. We relay your auto-generated pseudonym (e.g. "Brisk Otter") and, only if you switch it on, a one-line task label. Nothing about a room session is stored on our servers — no history, no recordings, no chat (there is no chat). A local record of your sessions stays on your device for your own Wins statistics.
Analytics
The app currently ships with no third-party analytics SDKs. If we ever add privacy-preserving event counts, they will contain no task content and no identifiers that track you across apps, and this policy will be updated first.
What we never do
- No storage of your task content on our servers
- No advertising and no tracking across apps or websites (no ATT prompt — there is nothing to ask about)
- No sale or sharing of personal data with data brokers
- No reading of your private iCloud data (we technically cannot)
Your rights (GDPR)
Export everything as JSON in Settings → About → Export my data. Delete your account and server records in Settings → Account. For anything else — access, correction, complaints — email [email protected]. You may also lodge a complaint with your local data-protection authority (in Sweden: IMY).
Data controller
Tarsoul AB, Sweden. Contact: [email protected].
Changes
If this policy changes, the new version is posted here with a new effective date. We will never weaken the guarantees above retroactively.