Privacy Policy

        The short version: Pend stores your countdowns on your device and syncs them via your own private iCloud account. We never see them. Pend Pro is a one-time purchase and Apple handles the billing - we never see card details. We collect anonymous usage analytics and crash reports, processed in the EU, and you can switch both off in Settings. No ads, no cross-app tracking, no selling of data.
      

1. Who We Are

Pend is developed and published by Jamie Newman ("we", "us", "our"). If you have questions about this policy, contact us at contact@jamie-newman.com.

2. Data We Collect

Your countdowns & collections

Title, emoji, notes, target date, direction (countdown or count-up), and recurrence rule for each event
Collection names and ordering
Completion history for recurring countdowns

This data lives in SwiftData on your device. If you buy Pend Pro, it also syncs through your private CloudKit database on your own Apple ID. We, the developers, cannot access it.

Purchase data

Pend Pro is a one-time purchase, not a subscription - there is nothing to renew and nothing to cancel
Purchase and entitlement state managed by RevenueCat, so Pro stays unlocked across your devices and can be restored after a reinstall
An anonymous ID generated by RevenueCat to associate the purchase with your install. It is not tied to any account with us, and we hold no account for you
We do not store or process payment card details - all payments are handled by the Apple App Store

Usage analytics

Anonymous usage events (e.g. screens opened, features used, conversion funnels) via PostHog, processed in the EU
No countdown titles, collection names, notes, or personally identifiable information is ever included in analytics events
Events are tagged with an anonymous per-install ID. We never attach your name, email, or Apple ID

Crash reports

If Pend crashes, we record what the app was doing at the moment it failed - the type of error, a stack trace naming the code involved, and a list of the code modules that were loaded
The report is written to your device and sent the next time you open the app, via PostHog, processed in the EU
A crash report contains no countdown titles, dates, notes, or anything else you have typed. It is tagged with the same anonymous per-install ID as analytics events

3. How We Use Your Data

To provide the core functionality - displaying, creating, editing, and deleting countdowns and collections
To render widgets and Live Activities on your device
To sync your countdowns across your iPhone and iPad via your private iCloud account (Pro)
To unlock Pend Pro and restore your purchase on a new device, via RevenueCat
To improve the app through anonymous usage analytics
To find and fix the crashes that affect the most people, through anonymous crash reports

4. Data Storage & Security

All your countdowns, collections, and history are stored locally on your device using SwiftData. The app works fully offline without an account.

Sync uses Apple's CloudKit service on your own private iCloud database. Data is transmitted over TLS and stored in your Apple-managed iCloud container. The developer has no access to this data - only you, via your Apple ID, do.

Pend never runs its own backend for your countdown data. There is no third-party server holding the contents of your events.

5. Third-Party Services

Pend uses the following third-party services:

Apple - payment and receipt validation, and private iCloud sync across your own devices (Pro). Handled under Apple's own privacy policy
RevenueCat (United States) - records the anonymous purchase receipt so Pend Pro can be unlocked and restored
PostHog (European Union) - anonymous usage analytics and crash reports
Tally (European Union) - hosts the feedback form described in section 7. It receives only what you choose to type, plus the app and device versions listed there

Each service operates under its own privacy policy. We encourage you to review their policies.

6. Data Sharing

We do not sell, rent, or share your personal data with third parties for marketing or advertising purposes. Your countdown data is never shared with anyone - it lives in your private CloudKit database only, and we cannot read it.

We do not use advertising SDKs. We do not request NSUserTrackingUsageDescription. We do not cross-reference your activity across apps. Nothing we collect - analytics, crash reports, or purchase state - is tied to your real-world identity.

7. When You Send Feedback

Pend's Settings screen has a Feedback option. It opens a form in your browser, hosted by Tally. Nothing is sent unless you fill the form in and choose to submit it.

To save you a round of questions, the link carries four pieces of diagnostic context: your Pend version, its build number, your device model (for example "iPhone17,2") and your iOS version. It carries nothing that identifies you - no analytics ID, no countdown content, no purchase state.

The form has an optional email field. Fill it in only if you would like a reply; we will use it to answer you and for nothing else.

8. Notifications

Pend can send a single local notification at the target date of a countdown, if you grant notification permission. These notifications are generated on-device and are not routed through any push server. You can disable notifications globally in Pend's Settings, or per-app in iOS Settings.

9. Your Rights & Data Deletion

You can delete any countdown from the home list with swipe-to-delete, or from the detail view.
Uninstalling Pend removes all locally stored data from that device. For Pro users, data on other signed-in devices remains until you delete it there.
To remove all iCloud data globally, go to iPhone Settings > Apple ID > iCloud > Manage Account Storage > Pend and delete the container.
You can turn off anonymous analytics and crash reporting whenever you like, in Pend > Settings > Privacy. Collection stops immediately - you do not need to restart the app.
You can request a copy of any analytics, crash or purchase data we hold, or ask us to delete it, by contacting us below.

Because everything we collect is anonymous, we hold nothing that lets us look you up by name or email. If you ask us to find or delete your records, please tell us roughly when you used the app so we can locate them.

If you are located in the EEA or UK and have questions about your rights under GDPR, or if you are a California resident with questions about your rights under CCPA, please contact us at the address below. We will respond within 30 days.

10. Children's Privacy

Pend is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can delete it.

11. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of Pend after changes constitutes acceptance of the updated policy.

12. Contact

Questions or concerns about this privacy policy? Please reach out:

Email: contact@jamie-newman.com