Privacy Policy

So Neat
Effective date: October 12, 2026

This Privacy Policy explains what information Kaan Çınar ("we," "us," or "our") collects when you use the So Neat iOS app (the "App"), how we use it, who we share it with, and the choices you have.

The short version:

• No account. You don't sign up, and we don't ask for your name, email, or phone number to use the App.
• Your rooms and tasks live on your device. We don't run a server that stores them. Two exceptions: when you type a task of your own or rename a built-in one, that task title is sent with our anonymous usage data so we can improve the built-in task list (see Section 2.1), and session replay recordings can show what's on your screen, including room names and task titles (see Section 2.2).
• We use analytics, crash reporting, and session replay to understand how the App is used and to fix problems. This data is tied to a random, anonymous ID, not to your name. You can turn this off in the App's Settings.
• We measure our ads. We advertise the App on services like Instagram and TikTok. We use Singular, an attribution service, to learn which ads lead people to install the App and subscribe, and through Singular we share information about your installation with those ad networks. If you allow tracking when the App asks, this includes your device's advertising identifier (IDFA). If you don't, the networks still receive limited information, such as your IP address (see Section 5).
• The App shows no ads, and we don't sell your information to data brokers.

1. Information stored on your device

The rooms, tasks, schedules, and completion history you create in the App are stored locally on your device. We do not operate a server that stores or syncs this content, and the App has no sync feature of its own.

Like other app data on your iPhone, this content may be included in your device backups (for example, iCloud Backup or a backup to your computer), according to your device settings. Those backups are handled by Apple under Apple's terms and privacy policy, not by us.

You can delete rooms and tasks in the App at any time. Deleting the App removes its data from your device (but not from any existing device backups).

2. Information we collect

2.1 Analytics (usage data)

We use PostHog, an analytics service, to understand how people use the App so we can improve it. When you use the App, it sends PostHog information such as:

• Product interaction events — for example, that setup was started or completed, a screen was viewed, a task was completed, snoozed, added, edited, or deleted, or a suggestion was shown or answered.
• Details about those events — for example, room types (like "Kitchen"), numbers of rooms and tasks, task frequency, difficulty, and estimated minutes, the time you chose for today's plan, and the names of built-in tasks that come with the App.
• Device and app information — for example, device model, operating system version, app version, language, time zone, and screen size, plus app lifecycle events (such as app installed, opened, or updated).

Task titles you type: when you add a task of your own, or rename one of the App's built-in tasks for the first time, we send that task title (in lowercase, up to 60 characters) together with the room type and the task's settings. We use these titles only in aggregate, to find tasks that many people add and include them in the App's built-in list. A title is only considered once it has been added by many different people, so one person's unique titles are not used.

Built-in task settings: when you change how often a built-in task repeats, its estimated minutes, its difficulty, or whether it's a one-time task, we send the new setting along with which built-in task it is. When you add, complete, snooze, or delete a built-in task, or turn one off during setup, we note which built-in task it was. We use this to improve the App's default settings.

What we don't put in analytics events: the names you give your rooms, and titles from Room Rescue plans. For edits to tasks you added yourself, we only record which fields changed (for example, "title" or "frequency"), not what you changed them to.

Our analytics provider also receives your IP address when the App connects to it and uses it to estimate your approximate location (such as city or country). We use this only in aggregate, for example to see which regions use the App.

2.2 Session replay

To see where people get stuck and to reproduce bugs, the App uses PostHog's session replay feature. Session replay records what appears on your screen while you use the App, as a series of screenshots, along with related interactions such as moving between screens.

• Recordings can show content displayed on screen, including room names and task titles you've entered.
• Text fields are masked in recordings, so what you type is not captured as you type it.
• Images from your photo library are masked in recordings.

Session replays are used only to understand and improve the App. They are not used for advertising.

2.3 Crash and performance data

If the App crashes or runs into an error, it sends a crash or error report to PostHog, usually the next time you open the App. These reports can include technical details such as the error type, a stack trace, device model, operating system version, app version, and performance information (for example, app launch times). We use this to find and fix bugs.

2.4 Subscriptions and purchases

The App is available through an auto-renewing subscription purchased with Apple In-App Purchase. Apple processes all payments. We never receive your payment card details, and we don't receive your Apple ID name or email address from your purchase.

We use RevenueCat, a subscription management service, to check whether your subscription is active and to manage purchases and restores. RevenueCat receives:

• an anonymous app user ID (a random identifier created by the App);
• purchase information, such as the product you bought, purchase and renewal dates, trial status, and App Store receipt or transaction data; and
• device information used to measure our ads: your IP address, the identifier for vendors (IDFV), the device ID that Singular assigns, and, only if you allow tracking, your advertising identifier (IDFA).

RevenueCat also sends subscription events (for example, "trial started," "renewed," or "canceled") to PostHog, linked to the same anonymous ID the App uses for analytics. This lets us understand, for example, how many people who finish setup go on to start a trial. RevenueCat sends the same kind of events, with the price paid, to Singular so we can see which ads lead to subscriptions (see Section 2.7).

2.5 Anonymous identifiers

Because there are no accounts, the App and our service providers use identifiers to tell one installation of the App apart from another:

• Random IDs created by the App for analytics (PostHog) and subscriptions (RevenueCat). The analytics ID is also shared with RevenueCat so that subscription events and analytics events can be matched to the same anonymous installation.
• The identifier for vendors (IDFV), an ID that iOS gives all apps from the same developer on your device.
• A device ID that Singular assigns to your installation.
• Your device's advertising identifier (IDFA), only if you allow tracking (see Section 5).

None of these is your name, email, phone number, or Apple ID. Deleting and reinstalling the App generally creates new random IDs; the IDFV and IDFA are managed by iOS and may stay the same.

2.6 Room photos and AI suggestions

Room Rescue lets you take or choose up to three photos of a room so the App can suggest a quick plan to tidy it. Here is how that works:

• Only with your permission. Before any photo is sent for analysis, the App clearly tells you that the photo will be shared with a third-party AI service and asks for your explicit consent. If you don't agree, you can keep using the App without photos; you can always add rooms and tasks manually, and Room Rescue offers a quick plan without photos.
• Prepared on your device first. Before a photo leaves your device, the App reduces the image size and removes its metadata, including location (GPS) and camera details.
• How it's sent. The photo is sent through our server (hosted by Cloudflare) to Anthropic, a third-party AI provider, which analyzes it and returns suggestions. Along with the photos, the App sends only your choices for the plan (such as how much time you have and the room type). The names you give your rooms are not sent.
• We don't keep your photos. Our server does not store or log the photos it passes along.
• Anthropic's handling. Anthropic does not use the photos we send or the suggestions it returns to train its models. (The only exceptions are when a developer joins Anthropic's Development Partner Program or chooses to send data as feedback; we do neither.) Anthropic deletes this data within 30 days. If Anthropic's safety systems flag a request as a possible violation of its usage policy, Anthropic may keep that request for up to 2 years, and the related safety scores for up to 7 years.
• Checking your subscription. Photo plans are part of the subscription. To confirm that your subscription is active, the App sends our server the anonymous app user ID it uses with RevenueCat (see Section 2.4), and our server checks it with RevenueCat. This ID is not your name, email, or Apple ID. Our server doesn't log it; it keeps only a scrambled, one-way version of it (a hash) to apply a fair-use limit on photo plans.
• Technical details about each analysis. For each analysis, our server sends PostHog only technical details, such as how long it took, how much of the AI model it used (tokens), what it cost, and whether it succeeded. These details are linked to the scrambled version of the ID above. Photos and the text of your plan are never sent to PostHog.
• On your device. The App keeps a small preview of the photo on your device so you can see what a plan was based on. You can delete it in the App.
• Session replay. Room photos shown in the App are masked in session replay recordings.

AI results are suggestions only. You can edit or ignore them. See the Terms of Use for more.

2.7 Advertising measurement (attribution)

We use Singular, a mobile attribution service, to learn which of our ads lead people to install the App and subscribe. Singular's software in the App sends Singular:

• identifiers: the identifier for vendors (IDFV), the device ID Singular assigns, and, only if you allow tracking, your advertising identifier (IDFA);
• your IP address and basic device and app information, such as device model, iOS version, language, and app version;
• app activity: when the App is installed and opened, and three moments in the App: finishing setup, starting a free trial, and starting a paid subscription (without the price);
• Apple Ads information: if you came from an ad on the App Store, a token from Apple that lets Singular look up which campaign it was.

RevenueCat also sends Singular your subscription events with the price paid (see Section 2.4). Singular doesn't receive your rooms, tasks, photos, or analytics events. The App's "Share usage data" setting doesn't apply to Singular; your choice about tracking does (see Section 5).

The App also uses Apple's privacy-preserving ad attribution (SKAdNetwork and AdAttributionKit). With these, Apple tells ad networks that an ad led to an install without identifying you, and sends us a copy of the same report through Singular.

3. How we use information

We use the information described above to:

• provide the App and its features, including checking your subscription;
• understand how the App is used and improve it (for example, which setup steps people skip, which features are confusing, or which tasks people add that our built-in list is missing);
• find, diagnose, and fix crashes, bugs, and performance problems;
• measure how well our ads work and improve our ad campaigns (see Section 5);
• keep the App and our services secure and prevent abuse; and
• comply with legal obligations.

The App doesn't show ads, and we don't build advertising profiles about you. The ad networks we advertise on use the information they receive under their own policies (see Section 5).

4. How we share information

We share information with service providers that help us run the App, and with the ad networks we advertise on, only for the purposes above:

We may also disclose information if required by law, to protect the rights, safety, or property of our users, ourselves, or others, or as part of a merger, acquisition, or sale of assets (in which case this policy will continue to apply to information we hold, or you'll be notified of any changes).

We don't sell your information to data brokers. Some US state privacy laws may treat sharing information with ad networks to measure our ads as a "sale," "sharing," or "targeted advertising." See Section 8 for your rights.

5. Advertising measurement and tracking

We advertise the App on other companies' apps and websites, such as Instagram and TikTok. To know which ads work, we use Singular (see Section 2.7), which shares information about your installation and in-app events with the ad networks we advertise on.

Your choice. During setup, iOS asks whether the App may track your activity across other companies' apps and websites (App Tracking Transparency). The App works the same whatever you choose, and you can change your choice anytime in your device's Settings > Privacy & Security > Tracking.

• If you allow tracking, Singular and the ad networks can also use your device's advertising identifier (IDFA) to connect your installation and in-app events to the ad you saw or tapped.
• If you ask the App not to track, the App can't access your IDFA. Singular still sends the ad networks limited information about your installation and in-app events, such as your IP address and the identifier for vendors (IDFV). Ad networks may match this with their own records to report how our ad campaigns performed (for example, Meta's Aggregated Event Measurement).

Ad networks handle the information they receive under their own terms and privacy policies, which may include using it to improve how they deliver ads.

6. How long we keep information

• On your device: until you delete it in the App or delete the App.
• Analytics, session replays, and crash data: kept by PostHog for 1 year (session replays for 1 month), then deleted.
• Subscription records: kept by RevenueCat for as long as needed to manage your subscription and meet legal, tax, and accounting requirements.
• Advertising measurement data: kept by Singular for as long as needed to provide its service to us, and by ad networks under their own policies.
• Photos you choose to analyze: not kept by our server. Anthropic deletes them within 30 days, unless its safety systems flag them, in which case it may keep them for up to 2 years (see Section 2.6).

7. Your choices

• Photos: Photo features are optional. You choose whether to use them each time, and the manual path always works.
• Analytics: Turn off Share usage data in the App's Settings. The App sends one last event noting that you turned it off, then stops sending analytics, crash reports, and session replays from your device. This setting doesn't affect subscription management or advertising measurement.
• Tracking: Choose "Ask App Not to Track" when the App asks, or later in your device's Settings > Privacy & Security > Tracking. See Section 5 for what this changes.
• Subscriptions: You can cancel anytime in your Apple ID settings (Settings > [your name] > Subscriptions).
• Reset your anonymous ID: Deleting and reinstalling the App generally starts new random IDs (see Section 2.5). This does not delete data already collected; see Section 8 for deletion requests.
• Delete on-device data: Delete rooms and tasks in the App, or delete the App.

8. Your privacy rights (California and other US states)

Depending on where you live (for example, California, Colorado, Connecticut, Virginia, and other states with consumer privacy laws), you may have the right to:

• Know / access the personal information we have about you;
• Delete personal information we have about you;
• Correct inaccurate personal information;
• Opt out of the sale of personal information, "sharing" for cross-context behavioral advertising, and targeted advertising (see Sections 4 and 5); and
• Not be discriminated against for exercising these rights.

We do not collect "sensitive personal information" for the purpose of inferring characteristics about you.

How to make a request. Email us at support@soneat.app with the subject line "Privacy Request." You may also use an authorized agent; we may ask for proof that the agent is authorized.

Because we don't have accounts, we don't know who you are. The data we and our service providers hold is linked to random or device-level identifiers, not to your name or email. If we can't reasonably connect a request to any data we hold, we'll tell you. We will respond within the time required by applicable law.

9. Children's privacy

The App is intended for a general audience and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at support@soneat.app and we will delete it.

10. Security

We use reasonable measures to protect information, including encrypted connections (HTTPS) between the App and our service providers. No method of transmission or storage is completely secure, so we can't guarantee absolute security.

11. Where information is processed

The App is intended for users in the United States. Our analytics provider stores data in the United States. Our service providers may process information in other countries where they operate.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we'll change the effective date above, and if the changes are significant, we'll let you know in the App or by other reasonable means before they take effect.

13. Contact us

Kaan Çınar
Email: support@soneat.app
Website: https://soneat.app