Doit Privacy Policy

Last updated: 25 October 2026

Doit is a personal planning app. Your tasks, notes, lists, goals, and reminders are treated as private user content. Doit is designed to work locally first, with optional Apple services and optional cloud AI only when you choose to use them.

Information you create in Doit

Doit stores the tasks, notes, lists, goals, settings, and reminder choices you create so the app can show and update your planner. This content is used for app functionality. Doit does not sell your content and does not use it for third-party advertising.

iCloud, widgets, Watch, and share extension

If iCloud is available, Doit can sync your planner through your private Apple iCloud account. The Home Screen widget and Share to Doit extension use the app's private App Group storage. The Apple Watch companion exchanges a task snapshot and completion changes with the paired iPhone using Apple's Watch Connectivity service and keeps a local cache on the Watch.

Doit AI and Claude

Doit AI is a Doit Pro feature. Its on-device features can run without sending your task content to Doit's server. If you turn on Cloud AI, Doit asks for consent before content is sent to its AI proxy or Anthropic.

When Cloud AI is enabled, Doit sends the request content you choose: typed or pasted text, spoken-word transcripts, selected images or screenshots, or OCR text from a scan. It also sends the reference date, local time, time zone, locale, and available goal names to interpret your request. In Doit 2.6, when your words ask Doit to put something into a named backlog list or into an existing task (for example "add milk to Weekly shop" or "put this in my Ideas backlog"), Doit also sends the names of your backlog lists (up to 30) and the titles and dates of nearby one-off tasks (up to 40, from yesterday to two weeks ahead) so the request can be matched; it does not send their notes or subtasks. Other task text, contacts, and precise location are not sent. Voice requests send Supabase and Anthropic the transcript, never audio. Images are resized and re-encoded before upload, which strips camera and location metadata.

Supabase hosts Doit's AI proxy, which receives the request and forwards it to Anthropic's Claude API to generate task suggestions. Doit's AI proxy application processes requests in memory and does not persist planner content in a server database or its own application logs. Supabase may retain full request and response data, including headers and bodies containing task text, transcripts, images, or generated task drafts, in platform invocation logs under its hosting retention policies. These platform records are separate from Doit's application logs. Tasks you choose to add after reviewing the result are stored in your planner as described above.

Anthropic does not use commercial API inputs or outputs for model training by default, and Doit does not opt your content into model training. Anthropic's standard API retention is up to 30 days, with exceptions including content flagged for Usage Policy enforcement, legal obligations, covered-model safety requirements, services with longer retention, and different agreed terms. This is not an unconditional 30-day deletion guarantee. See Anthropic's commercial model-training policy and API retention policy.

For the protected Doit 2.6 AI endpoint, Doit sends Apple-signed app and subscription receipts to Supabase to verify that the installation is genuine and that ongoing Cloud AI has an active Doit Pro purchase. Receipts can contain app-download and purchase identifiers, product identifiers, purchase dates, expiry dates and subscription status. Doit does not receive your Apple ID email or password. These receipt proofs are not forwarded to Anthropic. The proxy application verifies them in memory and does not deliberately write raw receipts or Apple identifiers to its application database or logs; hosting-level invocation records may nevertheless include request bodies under Supabase's retention policies.

Doit still has no Doit accounts. The protected endpoint derives a private HMAC hash from the verified App Store app-transaction identity to apply limits across installations sharing that identity. Doit Pro permits at most 1,000 total Cloud AI attempts per UTC calendar month, including at most 35 paper or handwriting scans using Claude Sonnet within that total. Independent daily, global and IP abuse limits can reduce availability. Supabase stores hashed identities and request counts, not planner content, in these quota tables. Current-month counters become eligible for pruning after the month ends; cleanup is best-effort and deletion timing is not guaranteed. Version 2.51 and earlier use the same monthly total and scan limits per anonymous installation rather than a verified Apple identity. Those legacy counters are separate; historical usage cannot always be combined with the new identity-based counter.

During first-time setup in Doit 2.6, the protected endpoint offers at most five Cloud AI attempts, including at most one paper scan, within 30 minutes of the first accepted setup attempt. This ends when onboarding finishes and is included in the normal request budgets. To prevent reinstalling or replaying onboarding from repeatedly unlocking the offer, Supabase retains an opaque setup-used record containing the hashed identity, start/close times and attempt counts. That security record persists after the monthly counters expire; it contains no contact details, raw receipts or planner content. The same Cloud AI consent applies, and existing users must choose again before the additional verification data is sent. This setup allowance is separate from any App Store subscription trial, whose prices and terms are unchanged.

Optional goal planning in Doit 2.60

When you choose Cloud AI for goal planning after consent, Doit sends the selected goal title, start and end dates, day count and language through Supabase to Anthropic's Claude API. Other tasks, unrelated goal names, contacts, images and audio are not included in that goal-plan request. A single plan covers at most 60 days. Goal planning requires verified Pro access and counts toward the same 1,000-attempt monthly allowance; it is not part of the setup-only allowance. Other rate and abuse limits can apply. You can choose on-device planning instead. Review and edit a draft before Start saves the plan in your planner. The processing, hosting-log and provider-retention explanations above apply to goal requests and generated plans too. Apple receipt proofs go to Supabase for verification, not to Anthropic.

Sharing lists and goals in Doit 2.60

Sharing is optional. A shared list link or code contains the list name, its items and section headings, and appearance choices. A shared goal link or code contains its name, included target or step names, and appearance choices. It does not include completion history, unrelated planner content or an account profile. Doit does not upload this content to its own server to create the link: it is encoded in the link or code itself. Anyone with a copy can read and forward what it contains. Editing or deleting your original does not revoke copies already received.

You choose the destination using the system share sheet; that destination has its own data-handling policies. Recipients preview the content and explicitly import a separate editable copy. Changes do not sync back to the sender. Sharing a goal's daily plan uses a challenge invitation instead; it also does not share private completion history or create a collaborative account-based planner.

Optional shake feedback in Doit 2.60

Shaking your device can open a dismissible feedback prompt after onboarding when the setting is enabled. It does not automatically send a report, screenshot, planner export or logs. If you choose to share written feedback, the system share sheet contains your chosen category, entered message and app version. You decide its destination and whether to send it. Dismiss the prompt without sending anything or turn it off in Settings. There is no automatic feedback inbox or messaging service behind this prompt.

Age group and optional motivational check-ins in Doit 2.6

During setup Doit may ask for your date of birth. Only the resulting age group (for example 25-34) is kept, on your device; the full date is not stored or sent. You can skip the question.

Doit may also ask whether you would like occasional motivational messages by email or text if you have not opened Doit for a day or more. This is optional, and you can decline, leave the fields blank, change them or delete them in Settings → Notifications. In this version the details stay on your device, are not sent to a messaging provider, and no email or text check-ins are delivered. Enabling a future messaging service would require a separate choice and updated information about the provider, data use and how to unsubscribe.

Inviting a friend

Doit can create a short invite code linked to a random installation identifier (never your name, email or tasks) so that a friend who joins with your code unlocks an outfit for Dot. You choose who to share a message with using the iOS share sheet; Doit never sends messages to friends for you.

AI-assisted development

AI-assisted development tools may have helped draft, review, or test parts of Doit's app, website, and support materials. These tools do not receive your private in-app tasks, notes, images, audio, iCloud data, or subscription records from Doit.

Photos, camera, microphone, and speech recognition

Doit asks for camera or photo access only when you choose to scan or import a paper list, whiteboard, screenshot, or image. Doit asks for microphone and speech recognition access only when you choose to dictate tasks. Audio is used to produce a transcript and is not saved by Doit. Apple speech recognition may process audio on Apple's servers when on-device recognition is unavailable; this is separate from Cloud AI and does not send audio to Supabase or Anthropic.

Subscriptions and app analytics

Doit uses StoreKit for subscriptions. Doit also uses RevenueCat and Superwall to support subscription status, restore purchases, paywall operation, and purchase-related diagnostics. These services may process purchase history, product interaction, anonymous customer or device identifiers, and technical request information for app functionality and analytics.

Doit may use AppsFlyer Strict SDK for install/session attribution and fixed product milestone events. Doit does not send task text, notes, images, transcripts, audio, contact details, or precise location to AppsFlyer. Advertising identifier support is not enabled, partner sharing is blocked in the app configuration, and Doit does not use this data for third-party advertising tracking.

No Doit account required

Doit does not offer account registration or Sign in with Apple. Your planner remains on your device and, when enabled, in your private iCloud storage. Anonymous subscription identifiers used by RevenueCat and Superwall are not Doit accounts.

Notifications

Doit uses local notifications for task reminders, optional morning and evening reviews in Doit 2.6, one optional daily reminder that adapts to your usual app-opening time, and optional falling-behind nudges. Review reminders show counts, not task names. These notifications are scheduled on your device and do not require a marketing or push-notification server.

Data export and control

You can export your Doit data from the app. You can also delete tasks, notes, lists, goals, and settings inside Doit. iCloud data is controlled by your Apple account and device settings.

In Doit 2.6, Erase All Data also removes the locally stored contact preferences, age-group answer and custom challenge records. It does not cancel an Apple subscription or automatically delete the server's abuse-prevention counters, setup-used record, hosting records or information retained by other service providers. Cloud changes need a successful connection and sync; local erasure is not a promise that every offline device or provider record has already been deleted.

Contact

For privacy questions, contact Doit support or use the support link on the App Store listing.