Eidos privacy policy
The short version
- Your goals, tasks and plans live on your iPhone and in your private iCloud. Our server doesn’t store them.
- Your voice is turned into text on your iPhone. Audio is never uploaded.
- To write plans, the text Eidos needs (for example your goals and today’s tasks) is sent to our server and Google’s Gemini model, used for that one request, and not kept by us.
- No ads, no third-party analytics, no tracking across other apps or websites, and we don’t sell data.
- You can export everything or delete your account from inside the app.
What stays on your iPhone and iCloud
Your goals, milestones, tasks, daily plans, evening check-ins, weekly reviews and settings are stored in the app on your iPhone. If iCloud is on, Apple syncs them through your private iCloud database so they reach your other devices. That database belongs to your Apple Account: Celeris42 can’t read it. Apple’s privacy policy covers iCloud.
Your first name, if you share it when signing in, is kept with these settings to greet you. It isn’t sent to our server.
Voice
When you hold the mic, Apple’s speech recognition runs on your iPhone and turns your words into text. The audio is never recorded to a file or uploaded, and it’s discarded as soon as it’s transcribed.
The text is then sorted into tasks: on your iPhone, or by the planning agent described below. After sorting, the transcript is deleted from your iPhone unless you turn on Keep transcripts in Settings.
The planning agent
Some features use our planning service: sorting what you said into tasks, shaping your onboarding answer into goals, writing your daily plan with reasons, Lighten my day and the weekly review. For each of these requests your iPhone sends only what that request needs:
- For sorting: the transcript text and the names of your goals.
- For plans and reviews: your goals (titles, what “done” means, target dates, milestones), your open tasks (titles, size, dates, how often they were moved), a summary of the last 14 days (how much you planned and finished, your energy ratings), your focus settings and, if calendars are connected, how many hours you’re busy and the start and end times of busy periods. Event titles and details are never sent.
Our server processes the request in memory and sends it to Google’s Gemini API, which writes the result. We don’t store the content of these requests. We use Gemini as a paid service, under terms in which Google doesn’t use this content to improve its products. Google may keep it for a limited time to detect abuse, as described in the Gemini API terms.
If the planning service isn’t available, or you use Eidos without an account, plans are made on your iPhone and nothing is sent.
Your account
Signing in is optional. You can sign in with Apple or with Google. The sign-in proves who you are to our server; we then keep:
- A one-way, salted hash of the identifier Apple or Google gives us, so we can recognise you next time. We don’t store your email address or name.
- Your subscription status: whether Pro is active, until when, and which plan.
- Sign-in tokens for your devices, stored in hashed form, which expire after 90 days without use.
- Counts of how often you used AI features this week and hour, for fair-use limits.
Our server also writes operational logs for each request: which account made it, which feature, when, whether it worked, how long it took and how much model capacity it used. Logs never contain your tasks, goals, transcripts or plans. Separately, we record anonymous usage events (for example, that a plan was written and what it cost) with no link to your account.
Calendars
Calendars on your iPhone
If you allow it, Eidos reads your iPhone calendars to see when you’re busy, so it doesn’t plan deep work into a full day, and shows your events (name and time) next to your tasks on the Tasks and Calendar screens. It reads on your iPhone, sends only busy times as described above, and never writes to these calendars.
Google Calendar (optional)
Off unless you connect it in onboarding or in Profile › Connectors. When connected, your iPhone talks to Google directly:
- It reads free/busy times from your primary Google calendar to size your day (Google permission
calendar.freebusy). - It reads the names and times of events in your primary Google calendar, from a week ago to about five weeks ahead, to show them next to your tasks (permission
calendar.events.readonly). This is read-only: Eidos never changes or deletes these events. Event names, times and other details stay on your iPhone, in memory; they are not stored by Eidos and are never sent to our server or to Gemini. - It creates one calendar called “Eidos” in your Google account and adds the tasks you give a start time as time blocks: the task title, its start and end time, its reason and its goal name. It never changes or deletes anything outside that calendar (permission
calendar.app.created). - Google’s access token stays in your iPhone’s Keychain. Our server never receives it or your calendar data.
Disconnecting revokes Eidos’s access. The Eidos calendar stays in your Google account until you delete it there. Eidos’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Subscriptions
Apple handles payment for Eidos Pro; we never see your card or payment details. To know whether Pro is active, we use RevenueCat, a subscription service, which receives your purchase information and basic app details (such as app version and platform), linked to a random account identifier rather than your name or email. Our server asks RevenueCat or Apple whether your subscription is active. See RevenueCat’s privacy policy.
Notifications and widgets
The morning and evening reminders are scheduled on your iPhone; they may show your first task of the day. The Home Screen and Lock Screen widgets read a small summary of today’s plan that the app saves on your iPhone. Neither involves our server.
Who processes data for us
| Provider | What for | What they receive |
|---|---|---|
| Apple | iCloud sync, Sign in with Apple, App Store payments | Your app data in your private iCloud; sign-in; purchases |
| Google (Gemini API) | Writing plans, sorting tasks, reviews | The request content described in “The planning agent” |
| Google (Sign-In, Calendar) | Only if you use them | Sign-in; free/busy times; event names and times (read on your iPhone only); the Eidos calendar’s events |
| Render | Hosting our server and its database (United States) | Request processing; account records and logs described above |
| RevenueCat | Subscription status | Purchase information linked to a random account identifier |
We don’t use advertising networks, data brokers or third-party analytics.
How long we keep things
- Your account record and subscription status: until you delete your account.
- Sign-in tokens: until they expire (90 days without use) or you sign out or delete your account.
- Usage counts: until you delete your account.
- Server logs: for a limited time set by our hosting provider, then deleted.
- Planning requests: not stored by us; see Google’s terms above.
- Data on your iPhone and in iCloud: until you delete it there.
Your choices and rights
- Export: Settings › Your data › Export data saves your goals, tasks and plan history as a file.
- Delete: Settings › Your data › Delete account deletes your account, subscription record, tokens and usage counts from our server, deletes your RevenueCat record and disconnects Google, and erases Eidos’s data on your iPhone. To remove the iCloud copy, use Settings › your name › iCloud on your iPhone.
- Correct: edit anything in the app.
- Turn things off: sign out, disconnect Google, turn off calendars, microphone or notifications in iPhone Settings, or use Eidos without an account.
Depending on where you live (for example in the EU, UK or California), you may have rights to access, correct, delete, restrict or object to processing of your personal data, and to data portability. Write to support@celeris42.com and we’ll answer within 30 days. If you’re in the EU or UK, you can also complain to your data protection authority. We rely on performing our contract with you to provide the service, and on our legitimate interest in keeping it secure and working for operational logs. We don’t sell or share personal information for advertising.
Security
Everything between the app and our server travels over encrypted connections. Account identifiers and sign-in tokens are stored hashed, and sign-in tokens on your iPhone are kept in the Keychain. No system is perfectly secure, but we keep what we hold to the minimum so there is little to lose.
Children
Eidos isn’t directed at children under 16, and we don’t knowingly collect their personal data. If you believe a child has given us data, contact us and we’ll delete it.
International transfers
Our server runs in the United States, and Google may process planning requests in other countries. When data leaves your country, we rely on our providers’ safeguards, such as Standard Contractual Clauses.
Changes and contact
If we change this policy, we’ll update the date above, and for significant changes we’ll tell you in the app before they take effect.
Eidos is made by Celeris42. Questions or requests: support@celeris42.com. For help using the app, see Eidos support.