Privacy policy

1. What this policy covers

This policy covers NeuraTiM Checklist on Android, iOS, and the web, and this website. NeuraTiM is the independent developer and the controller responsible for personal data processed in connection with this website or direct contact.

The app is free, contains no ads, and has no paid tier.

2. Checklist data and optional feedback

Core checklists work offline with no account or analytics. Optional feedback needs internet; dictation may use online speech processing.

• Names, email addresses, phone numbers, or account details for registration—there is no sign-in
• Advertising identifiers, device identifiers, or user IDs for tracking
• Your precise or approximate location
• Contacts, calendars, call logs, text messages, or lists of installed apps
• Usage analytics, diagnostics, or crash reports sent to the developer; checklist statistics are calculated locally
• Payment or financial information in the app; optional website tips are covered separately below

3. Data stored on your device

The app stores the following locally so you can use your checklists offline:

• Templates, sections, tags, and items, including names, quantities, descriptions, required or optional status, and conditional rules
• Checklists in progress and finished checklists in history, including checked items and notes
• Photos you attach to items
• Your scheduled reminders and their text
• Settings such as language and light or dark theme
• Scanned barcodes and the names you assign to them; the app does not look them up in an online product database
• History retention settings, app lock settings, and on-device encryption settings

4. Where your data is stored

On Android and iOS, data is stored in the app's private storage, protected by the operating system's app isolation.

In the web version, data is stored in your browser for the app's site. Clearing that site's data removes the local copy.

The app does not provide cloud backup or sync. Copies you export or share, and any backups managed by your device or browser, are outside this local storage.

5. Permissions and device services

Permissions are used for the features that need them. You can manage available permissions in your device settings; declining one may prevent the related feature from working.

• Camera—used when you scan a QR code or barcode, or take an item photo. Scanning is processed on the device without keeping camera frames. Photos you take for items are saved in the app's local storage.
• Photos or photo library—used to attach a picture you select. The selected picture is copied into the app's storage; the app does not upload or index your photo library.
• Notifications—used for your scheduled reminders and, where supported, ongoing progress. These notifications are created locally, without a remote push service.
• Exact alarms (Android)—used to schedule reminders at the time you choose. Delivery can still depend on system settings and restrictions.
• Run at startup (Android)—used to reschedule reminders after your device restarts.
• Files—used to save exports and open backup or share files you select.
• Microphone—used when you dictate an item's name. The device's speech service returns text to the app, which does not keep an audio recording. Depending on your device and settings, the speech service may process audio online under its own privacy terms.
• Biometrics or device passcode—used when you enable the app lock. The operating system performs the check; the app receives the result, not your fingerprint or face data.

6. Sharing, exports, and external processing

The app does not automatically upload your checklists to the developer. You decide whether to share or export them. Optional dictation uses your device's speech service as described above.

• Sharing creates a QR code, .ntchk file, or plain text for you to pass on through a channel you choose. Shared templates and checklists exclude photos and are not encrypted by the app.
• Exporting a backup saves a file to your chosen location or opens your device's share menu. Backups include photos. The protection of the destination depends on the service you choose.
• Importing reads a file or code you supply; it does not search online for checklist content. A file provider you use may download the selected file.
• Your message, optional email, app version, platform and language are sent to the developer. Checklists and photos are not sent.

7. Keeping and deleting your data

The developer has no server-side copy of your locally stored checklists. You can manage that data in the app. Copies you previously exported, shared, or backed up must be deleted separately:

• Delete individual items, checklists, or templates in the app
• Use Clear history to remove finished checklists
• Clear the app's local storage through your device settings, where available, or remove the app and its data; this does not delete external backups or exported files
• In the web version, clear the app's site data in your browser
• Keep finished checklists for one month, three months, or one year; older checklists are deleted the next time you open the app

8. Security

Local data benefits from your operating system's security protections. Your device's screen lock and storage encryption provide additional protection when enabled.

There is no central checklist database on the developer's servers. This reduces exposure but does not make your device or exported files immune to unauthorized access.

Backups are encrypted by default using a passphrase you choose, Argon2id key derivation, and AES-GCM encryption on your device. You can also enable an app lock. On Android and iOS, optional storage encryption protects local data with key material secured through Android Keystore or iOS Keychain.

Unencrypted export is a separate, labelled action that requires confirmation. Anyone with access to that file can read it. Shared files, QR codes, and plain text are also unencrypted by the app and exclude photos. Share them only through channels you trust.

9. Children

The app is not intended for children under 13, or the applicable minimum age in their country. The developer does not collect children's checklist data through the app.

10. Third-party components and services

The app uses open-source components for notifications, scanning, photo and file selection, and sharing. These features use local processing and system services rather than a developer-operated backend.

The app includes no advertising, attribution, analytics, or crash-reporting SDKs.

Other components support encryption, secure key storage, biometric unlocking, dictation, and widgets. Dictation relies on your device's speech service, which may use online processing as explained in section 5.

11. This website

This website introduces the app and provides access to the web version. Website requests, optional payments, and messages you send are separate from your locally stored checklist data.

• Hosting—the site uses Cloudflare, which may process IP addresses, browser information, and requested URLs for delivery and security. This is separate from app data and does not mean your checklists are uploaded.
• Language preference—your chosen language is saved in browser storage and reflected in the page address. The address may be visible to the hosting provider when you request a page.
• Tips—support is optional. Payments use Stripe, Ko-fi, PayPal, or GitHub Sponsors under their own privacy terms. The developer may receive transaction information and any donor details the provider makes available, but not your full card number through the payment form.
• Try the app—the embedded web app stores checklist data in your browser as described above. Loading the app requires a request to its hosting service.
• External links and email—other sites have their own privacy policies. If you email the developer, your address and message are received so your enquiry can be answered.

12. Your rights

Depending on the law that applies, you may have rights to access, correct, delete, or receive a copy of personal data, restrict or object to processing, and complain to a data protection authority. These rights can also apply to website, payment, or email data—not just app content.

The developer does not sell your checklist data or use it for advertising. The developer cannot access or delete checklists stored only on your device.

For privacy questions or requests relating to data the developer does hold, use the contact address below.

13. Changes to this policy

Updates will be published on this page with a revised date. Changes to how the app handles data will also be explained in the relevant release notes. A revised policy does not retroactively authorize earlier data collection.

Contact

For questions about this policy or privacy in NeuraTiM Checklist, write to:

info@neuratim.com