Privacy Policy

Effective: October 11, 2026 · Also at crumpetapp.com/privacy

Crumpet is a planner app for iPhone, and crumpetapp.com is its website (taskxp.app, its old address, redirects there). They are made and operated by Pebble Bytes LLC, a Nevada limited liability company ("we", "us"). We are the controller of the personal information described here. This policy explains what data the app and the website handle, where it goes, and the choices you have.

The short version: your tasks stay on your iPhone. There are no accounts, no ads and no tracking. Usage stats are off unless you turn them on. We never sell or share your data for advertising.

What stays on your iPhone

• Your tasks, notes, plans, XP, achievements, garden, rewards and settings are stored only on your iPhone, in the app's private storage, which iOS encrypts when your iPhone is locked. We don't run a server that receives them, and we can't see them.
• Widgets read a small summary of today's tasks that the app saves in a space on your iPhone that only Crumpet and its widgets can use.
• If you delete Crumpet, this data is deleted with it, unless it is in an iPhone backup (iCloud Backup or a computer backup) that you restore.

Voice and Apple Intelligence

• Voice capture uses Apple's speech recognition, only after you allow the microphone and speech recognition. When your iPhone supports it, recognition happens on the device. Otherwise Apple may process the audio under Apple's own privacy policy. Crumpet does not store or send your recordings.
• Smart fill with Apple Intelligence (Pro) runs Apple's on-device model. Your sentence does not leave your iPhone.

Optional usage stats (off unless you turn them on)

If you turn on Share anonymous usage stats (when you set up the app, or any time in Profile), the app sends short signals to TelemetryDeck, a privacy-focused analytics service based in the EU (TelemetryDeck GmbH, Germany), so we can learn which features get used and fix what's confusing.

• What a signal contains: an event name (for example "task completed", "mode switched" or "onboarding finished"), simple settings like Game or Calm mode and task size, your device model, iOS version, app version, whether it's an App Store or test build, and a rounded time.
• What it never contains: task titles, notes or anything else you type; your name, email or contact details; health information; purchase details; your location; or an advertising identifier.
• Identifier: TelemetryDeck receives a hashed, random identifier that can't be traced back to you and isn't used to track you across apps or websites. TelemetryDeck doesn't store IP addresses.
• Turning it off: switch it off any time in Profile → Share anonymous usage stats. The app stops sending signals right away. Because the data can't be linked to you, we can't find or delete an individual person's past signals, but they hold no personal information.
• Legal basis (EU/UK): your consent, which you can withdraw at any time.

Purchases and tips

Crumpet Pro, the free 180-day trial and tips are handled by Apple's App Store. Apple processes the payment; the app only receives confirmation from Apple, on your iPhone, that a purchase is valid. We never see your name, Apple Account or card details, and purchases are not sent to analytics.

Notifications and other permissions

Crumpet asks before using notifications, the microphone or speech recognition. Each is used only for the feature you turn on, on your device. You can change these any time in iPhone Settings.

The website (crumpetapp.com)

• No cookies, no analytics, no trackers. The website doesn't use cookies, analytics or advertising tools.
• Hosting: the site is served by Cloudflare, which processes basic technical data (such as IP addresses) to deliver the site and protect it from abuse, under Cloudflare's privacy policy.
• Contact form: if you use the form, we receive what you enter (your email, an optional name, the kind of message and your message) plus the country your request came from. Cloudflare Email Routing delivers it to our inbox, which is hosted by Google (Gmail). We use it only to reply to you and to fix bugs or consider your idea. We never add you to a mailing list.
• Legal basis (EU/UK): our legitimate interest in answering messages you send us.
• Retention: we keep support emails for up to 24 months after the conversation ends, then delete them. Ask us and we'll delete yours sooner.

Who receives data

We share data only with these providers, and only for the purposes above. Each is bound by its own privacy commitments, which give at least the same protection as this policy:

• Apple: App Store purchases, speech recognition when not on device, notifications.
• TelemetryDeck: optional usage stats, only if you turn them on.
• Cloudflare: website hosting and contact-form email delivery.
• Google (Gmail): the inbox where contact-form messages and emails to us arrive.

We don't sell or rent personal information, and we don't share it for cross-context behavioral advertising.

International transfers

We are based in the United States. Contact-form messages and emails are handled in the US (by us, Cloudflare and Google). Usage stats are handled by TelemetryDeck in the EU. Where data moves between countries, our providers use the safeguards the law requires, such as the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.

Health information

Crumpet is not a medical device. We don't ask for or collect health information, and nothing you write in the app is sent to us. If you choose to mention health details in an email to us, we use them only to answer you, and you can ask us to delete them.

Children and teens

Crumpet is a general-audience app, and teens are welcome to use it. It is not directed at children under 13, and we don't knowingly collect personal information from them. If we learn that a child under 13 has contacted us, we will delete the message.

Do Not Track

We don't track you over time or across other websites or apps, and we don't let third parties do so through Crumpet or crumpetapp.com. Because of this, "Do Not Track" and Global Privacy Control signals don't change anything about how the app or site behaves.

Your choices and rights

• Export: Profile → Prepare data export saves a copy of your data. An exported file leaves the app's protection, so keep it somewhere safe.
• Delete: deleting the app deletes your data on the device. To delete emails you've sent us, write to hello@crumpetapp.com.
• Usage stats: turn them off in Profile at any time.
• Permissions: change them any time in iPhone Settings.
• Your rights: depending on where you live (for example the EU, UK or California), you may have rights to access, correct, delete or get a copy of your personal information, to object to or restrict how it's used, and to withdraw consent. Because tasks stay on your device and stats can't be linked to you, the only personal information we usually hold is email you've sent us. Email hello@crumpetapp.com and we'll respond within 30 days. We won't treat you differently for using your rights.
• Complaints: if you are in the EU or UK, you can also complain to your local data protection authority.

Security

Your data is protected by iOS's built-in encryption and app sandboxing. Our website and email providers use encryption in transit. No method is perfectly secure, but we keep the data we hold to a minimum.

Changes

If this policy changes, we'll update the effective date above and, for important changes, tell you in the app before they apply.

Contact

Questions or requests: hello@crumpetapp.com.