Privacy Policy

        The short version: Pend stores your countdowns on your device and syncs them via your own private iCloud account. We never see them. Pend Pro is a one-time purchase and Apple handles the billing - we never see card details. We collect anonymous usage analytics and crash reports, processed in the EU, and you can switch both off in Settings. From version 1.3.0, the free version shows banner ads from Google AdMob. Where ads are shown, Google's software in the app collects data from your device to serve them, including a device identifier that can be used for tracking if you allow it in Apple's tracking prompt. Pend Pro, and any install first downloaded before 1.3.0, has no ads and no ad software running. We do not sell data.
      

1. Who We Are

Pend is developed and published by Jamie Newman ("we", "us", "our"). If you have questions about this policy, contact us at contact@jamie-newman.com.

2. Data We Collect

Your countdowns & collections

Title, emoji, notes, target date, direction (countdown or count-up), and recurrence rule for each event
Collection names and ordering
Completion history for recurring countdowns

This data lives in SwiftData on your device. If you buy Pend Pro, it also syncs through your private CloudKit database on your own Apple ID. We, the developers, cannot access it.

Purchase data

Pend Pro is a one-time purchase, not a subscription - there is nothing to renew and nothing to cancel
Purchase and entitlement state managed by RevenueCat, so Pro stays unlocked across your devices and can be restored after a reinstall
An anonymous ID generated by RevenueCat to associate the purchase with your install. It is not tied to any account with us, and we hold no account for you
We do not store or process payment card details - all payments are handled by the Apple App Store

Usage analytics

Anonymous usage events (e.g. screens opened, features used, conversion funnels) via PostHog, processed in the EU
No countdown titles, collection names, notes, or personally identifiable information is ever included in analytics events
Events are tagged with an anonymous per-install ID. We never attach your name, email, or Apple ID

Advertising (free version, from 1.3.0)

From version 1.3.0, the free version of Pend shows one banner ad at the foot of the Countdowns list, the Collections list, a collection's list and a countdown's detail, served by Google AdMob. On iPad there is one banner, at the foot of the column showing the open countdown. There are no ads in Settings, the paywall, onboarding, any sheet, widgets, Control Centre controls or Live Activities. There are no ads, and the ad software never starts, for:

Pend Pro owners
Any install first downloaded from the App Store before version 1.3.0

On those devices no consent form or tracking prompt appears. Where ads are shown, Google's Mobile Ads SDK collects data from your device to serve and measure them: a device identifier (including Apple's advertising identifier, if you allow tracking), approximate location derived from your IP address, the ads you have seen and your interactions with them, and app performance and crash information. Your countdowns, collections, notes and dates are never shared with Google or used for advertising.

Consent. In the EEA, the UK, and other regions where the law requires it, Google's User Messaging Platform asks for your consent to how Google uses data for ads, once you have finished Pend's welcome screens. You can change your choice at any time in Pend's Settings > Privacy > Privacy Choices, which appears where this applies.
Tracking. Pend asks through Apple's App Tracking Transparency prompt before the advertising identifier can be used, and where the consent form applies, only if you consented to storing information on your device. If you decline, ads are still shown, without the advertising identifier. You can change this at any time in iPhone Settings > Privacy & Security > Tracking.

Crash reports

If Pend crashes, we record what the app was doing at the moment it failed - the type of error, a stack trace naming the code involved, and a list of the code modules that were loaded
The report is written to your device and sent the next time you open the app, via PostHog, processed in the EU
A crash report contains no countdown titles, dates, notes, or anything else you have typed. It is tagged with the same anonymous per-install ID as analytics events

3. How We Use Your Data

To provide the core functionality - displaying, creating, editing, and deleting countdowns and collections
To render widgets and Live Activities on your device
To sync your countdowns across your iPhone and iPad via your private iCloud account (Pro)
To unlock Pend Pro and restore your purchase on a new device, via RevenueCat
To improve the app through anonymous usage analytics
To find and fix the crashes that affect the most people, through anonymous crash reports
In the free version, from 1.3.0, to show banner ads through Google AdMob, as described in section 2

4. Data Storage & Security

All your countdowns, collections, and history are stored locally on your device using SwiftData. The app works fully offline without an account.

Sync uses Apple's CloudKit service on your own private iCloud database. Data is transmitted over TLS and stored in your Apple-managed iCloud container. The developer has no access to this data - only you, via your Apple ID, do.

Pend never runs its own backend for your countdown data. There is no third-party server holding the contents of your events.

5. Third-Party Services

Pend uses the following third-party services:

Apple - payment and receipt validation, and private iCloud sync across your own devices (Pro). Handled under Apple's own privacy policy
RevenueCat (United States) - records the anonymous purchase receipt so Pend Pro can be unlocked and restored
PostHog (European Union) - anonymous usage analytics and crash reports
Google AdMob (Google Mobile Ads SDK) - serves and measures the banner ads in the free version, from 1.3.0
Google User Messaging Platform - shows the ad-consent form where the law requires it, and keeps your consent choices
Tally (European Union) - hosts the feedback form described in section 7. It receives only what you choose to type, plus the app and device versions listed there

Each service operates under its own privacy policy. We encourage you to review their policies.

6. Data Sharing

We do not sell or rent your personal data. Your countdown data is never shared with anyone - it lives on your device and, with Pro, in your private CloudKit database, and we cannot read it.

In the free version, from 1.3.0, the Google Mobile Ads SDK sends Google the advertising data described in section 2, and Google may use it to serve and measure ads, as its own policies describe: Google's Privacy Policy and how Google uses information from apps that use its services. Google's User Messaging Platform shows the consent form and keeps your consent choices, under the same policy. That data never includes your countdowns, collections, notes or dates.

Pend's own analytics, crash reports and purchase state are not tied to your real-world identity, and Pend's own code does not cross-reference your activity across apps.

7. When You Send Feedback

Pend's Settings screen has a Feedback option. It opens a form in your browser, hosted by Tally. Nothing is sent unless you fill the form in and choose to submit it.

To save you a round of questions, the link carries four pieces of diagnostic context: your Pend version, its build number, your device model (for example "iPhone17,2") and your iOS version. It carries nothing that identifies you - no analytics ID, no countdown content, no purchase state.

The form has an optional email field. Fill it in only if you would like a reply; we will use it to answer you and for nothing else.

8. Notifications

Pend can send a single local notification at the target date of a countdown, if you grant notification permission. These notifications are generated on-device and are not routed through any push server. You can disable notifications globally in Pend's Settings, or per-app in iOS Settings.

9. Your Rights & Data Deletion

You can delete any countdown from the home list with swipe-to-delete, or from the detail view.
Uninstalling Pend removes all locally stored data from that device. For Pro users, data on other signed-in devices remains until you delete it there.
To remove all iCloud data globally, go to iPhone Settings > Apple ID > iCloud > Manage Account Storage > Pend and delete the container.
You can turn off anonymous analytics and crash reporting whenever you like, in Pend > Settings > Privacy. Collection stops immediately - you do not need to restart the app.
You can change your ad-consent choice in Pend > Settings > Privacy > Privacy Choices (where it applies), and tracking in iPhone Settings > Privacy & Security > Tracking. Pend Pro removes ads entirely.
You can request a copy of any analytics, crash or purchase data we hold, or ask us to delete it, by contacting us below.

Because everything Pend itself collects is anonymous, we hold nothing that lets us look you up by name or email. Advertising data is held by Google, under the policies linked in section 6. If you ask us to find or delete your records, please tell us roughly when you used the app so we can locate them.

If you are located in the EEA or UK and have questions about your rights under GDPR, or if you are a California resident with questions about your rights under CCPA, please contact us at the address below. We will respond within 30 days.

10. Children's Privacy

Pend is not directed at children under 13. We do not knowingly collect personal information from children under 13, and the ads in the free version are requested as general-audience ads. If you believe a child has provided us with personal information, please contact us so we can delete it.

11. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of Pend after changes constitutes acceptance of the updated policy.

12. Contact

Questions or concerns about this privacy policy? Please reach out:

Email: contact@jamie-newman.com