Privacy Policy

Last updated: April 3, 2026 · Effective: April 3, 2026

This Privacy Policy explains how information is handled when you use Pivot (the iOS application) and when you visit our marketing website (the static site that describes Pivot and links to TestFlight or the App Store). By using the app or the site, you agree to this Policy. If you do not agree, please do not use the services.

Summary. Pivot is built for personal use on your iPhone. Most of what you do in the app—journal entries, Focus sessions, Vent text, Move routes, and optional photos—stays on your device. Some features use Apple’s system services (location, maps, speech recognition, on-device intelligence, purchases). If cloud-based AI is used (for example when your device uses a remote model or provider), only the content needed for that request is sent to that provider, as described below. We do not sell your personal information.

1. Who we are

Pivot is developed and published by the developer identified in App Store Connect as the seller of the Pivot app (the “we,” “us,” or “developer”). For privacy requests, use the contact methods in Section 14.

2. What this Policy covers

This Policy applies to:

The Pivot iOS app distributed via TestFlight and/or the Apple App Store.
The public marketing website where this policy is hosted (for example pages that describe the app and link to TestFlight).

It does not govern Apple’s own services (iCloud backup of your device, App Store checkout, Siri, system analytics controlled by Apple, etc.). Those are covered by Apple’s Privacy Policy and your device settings.

3. Information we collect

Depending on how you use Pivot, the following categories may apply.

3.1 Information you provide or create in the app

Stored primarily locally on your iPhone using Apple’s on-device storage (e.g. SwiftData):

Focus: Task choices, session timing, completion status, streaks, and related journal entries you generate while using Focus (including data derived from device orientation used to run the face-down timer).
Vent: Text you type or dictate, AI-generated reflections or analyses you choose to keep, and structured summaries stored with your journal entry (for example moods or themes the app derives for your review).
Move: Route and journey information associated with a Move session, arrival/completion state, optional notes, and optional photos you capture in connection with completing a Move (stored on device as part of your journal; you may also use system features to save images to your Photo Library if you grant permission).
Journal & insights: Combined timeline of the above, daily/weekly summaries, and similar on-device records used to show you patterns over time.
Adaptive / memory features: Optional on-device profiles (for example remembered preferences or short factual snippets) used to personalize suggestions, where you have enabled such features in the app.

3.2 Device permissions and sensors

Permission / sensor	Typical use in Pivot
Location (When In Use)	Used for Move to determine your position, compute walking routes, and show maps. Apple’s Core Location and MapKit may process location as described in Apple’s documentation. We do not operate our own location server for routine app use.
Motion & fitness (device motion)	Used for Focus to detect when your phone is face-down so the session timer can run or pause as designed. Processing is on-device.
Speech / microphone	Used when you choose to dictate in Vent. Speech recognition may use on-device or Apple’s speech services according to your iOS settings and Apple’s terms.
Camera / Photo Library	Used when you take or choose images for Move completion or when you export/save images to Photos, only if you grant the relevant permission.

3.3 AI and network processing

Some features use on-device intelligence (for example Apple’s on-device models where available and enabled). When on-device processing is not used or not sufficient, the app may send a limited payload (such as feature identifier, system instructions, and the text or context needed for that feature) to a remote AI provider to generate a response—for example for Vent analysis, weekly intelligence, or similar Pro features. Remote processing may be provided by OpenAI or another service configured in the build (including a proxy endpoint you or the developer operate). Only data necessary to fulfill that request should be transmitted.

Remote AI providers process data under their own privacy policies. For OpenAI, see OpenAI’s Privacy Policy. Do not paste highly sensitive information (for example full medical records or financial account numbers) into features that may use cloud AI unless you accept that risk.

3.4 Purchases and subscriptions

Pivot Pro and other in-app purchases are processed by Apple via StoreKit. We do not receive your full payment card number. Apple may provide us limited transaction metadata (for example subscription status) needed to unlock features.

3.5 Settings and diagnostics on device

The app stores preferences (such as theme, toggles, and feature flags) using UserDefaults or similar on-device mechanisms. We do not operate a mandatory Pivot “account” in the cloud for normal use.

3.6 Information we do not intentionally collect

We do not ask you to create a Pivot username/password on our servers for core use. We do not require you to provide government ID, precise contact lists, or browsing history from other apps. Do not send us such information through support unless we explicitly request it for a specific issue.

4. How we use information

We use the information above to:

Provide, maintain, and improve Pivot’s features (Focus, Vent, Move, journal, weekly review, Pro features).
Personalize in-app suggestions where you have enabled personalization (for example adaptive tasks or memory-assisted prompts).
Process subscriptions and restore purchases through Apple.
Protect security, debug critical issues, and comply with law when required.

Legal bases (EEA/UK). Where GDPR applies, we rely on performance of a contract (providing the app you request), legitimate interests (securing and improving the app, in line with your expectations), and, where required, consent (for example optional analytics if added in the future, or certain permissions you grant in iOS).

We may share information only as follows:

Apple: For distribution, payments, system APIs (maps, speech, StoreKit, on-device ML), crash diagnostics if you opt in to sharing with developers via Apple, and device backups if you use iCloud backup.
AI providers: As described in Section 3.3, when a feature you invoke uses remote AI.
Service providers: If we use vendors (for example email delivery for support, or website hosting), they process data under instructions and only as needed for those services.
Legal: If we believe disclosure is required by law, court order, or to protect rights, safety, or security.
Business transfers: If Pivot or its assets are acquired or merged, information held locally on user devices generally remains on those devices; any successor would be bound by this Policy or notify you of changes as required.

We do not sell your personal information and we do not share it for cross-context behavioral advertising as those terms are commonly used in U.S. state laws.

6. Retention

On-device data: Remains until you delete it within the app (where available), delete the app, or erase your device. Uninstalling the app may remove local databases unless restored from an iCloud or device backup managed by Apple.
Server-side data: If the developer receives support emails or minimal server logs, retention depends on the systems used; typically support correspondence is kept only as long as needed to resolve the issue unless a longer period is required by law.
AI providers: Retention of prompts and outputs is governed by the provider’s policy and settings; refer to their documentation.

7. Security

We use reasonable technical and organizational measures appropriate to a consumer iOS app, including reliance on Apple’s platform security for on-device storage and transport (for example HTTPS for network requests). No method of transmission or storage is 100% secure; you use Pivot at your own risk to the extent permitted by law.

8. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or export personal data, and to object to or restrict certain processing.

iOS settings: Control location, microphone, camera, photos, speech recognition, and related permissions in Settings > Privacy & Security and per-app settings for Pivot.
In-app controls: Use settings screens inside Pivot to disable optional features (for example personalization or memory), clear stored memory where offered, or manage Pro status through Apple.
Deletion: Deleting the app removes locally stored app data from the device subject to Apple backup behavior. To delete cloud copies held by third parties (e.g. AI vendors), follow their tools or contact us for guidance where possible.

To exercise GDPR or similar rights against us as developer, contact us at Section 14. We may need to verify your request. You may also lodge a complaint with your local supervisory authority.

9. Children

Pivot is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

10. International users

If you use Pivot outside the United States, your information may be processed in the United States or other countries where we, Apple, or our service providers operate. Those countries may have different data protection laws. By using Pivot, you understand and consent to such transfer where legally required, or we rely on approved mechanisms (such as Standard Contractual Clauses) where applicable.

11. U.S. state privacy (including California)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended, may grant you rights to know, delete, and correct personal information, and to opt out of sale/sharing. We do not sell personal information. Other states (Virginia, Colorado, Connecticut, Utah, and others) may provide similar rights. To submit a request, use the contact information in Section 14. We will not discriminate against you for exercising privacy rights.

12. Marketing website

The static site may be hosted by a provider (such as Netlify, Vercel, Cloudflare Pages, or similar). That provider may automatically collect technical data such as IP address, browser type, date/time, and requested URL for security, fraud prevention, and operations. This site does not use first-party cookies for tracking by default. If third-party analytics or embeds are added later, this section should be updated and, where required, consent obtained.

Open source fonts: Loading Google Fonts may cause your browser to contact Google; see Google’s Privacy Policy if you want details. To avoid that, the site could be changed to self-host font files.

13. Changes to this Policy

We may update this Policy from time to time. We will post the new version on this page and update the “Last updated” date. For material changes to how we use personal information, we will provide additional notice as required by law (for example an in-app notice or email if we have your address). Continued use after the effective date means you accept the updated Policy.

14. Contact

For privacy questions, requests, or concerns about Pivot:

App Store / TestFlight: Use the support or developer website shown on Pivot’s product page in the App Store, or the contact options Apple provides in the TestFlight app for this beta.
Email: pivotmindfulproductivity@gmail.com

If you are in the EEA, you may also contact your local data protection authority. For Apple’s role as platform provider, see apple.com/legal/privacy.