Privacy Policy
ReSpring AI (the "app"), operated by ReSpring LLC ("we", "our", or the "company"), is a task manager designed for ADHD and neurodivergent minds. We believe privacy is foundational. This policy explains what data ReSpring handles, how, and why.
The company responsible for your data: ReSpring LLC. For privacy questions, contact [email protected].
Summary
- All AI processing happens on your device. Nothing you type is sent to us or any third party to generate your plan. (If you opt in to share AI improvement data, your prompts are later sent to us for analysis. See details below.)
- Your tasks sync through your personal iCloud account. They are not accessible to us.
- We do not use any third-party analytics or advertising tools.
- Sharing AI improvement data is opt-in only, anonymous, and auto-deleted after 30 days. We do not collect general usage data.
- Calendar access is optional and stays on your device.
Data ReSpring Handles
Tasks and app data
Tasks, subtasks, completion status, paused state, due dates, time estimates, energy levels, and your bloomed flowers are stored locally on your device and synced to your personal iCloud account. This data is never transmitted to ReSpring's servers. We have no servers that store your task data, and we cannot access it.
AI planning ("Plan with AI")
When you use AI to break a goal into subtasks, ReSpring uses Apple Intelligence, Apple's on-device AI built into supported iPhones. On devices where Apple Intelligence is unavailable or not yet set up, ReSpring falls back to a built-in rules-based system that splits compound goals, extracts durations and due dates from your text, and infers priority — all on your device, with no AI or network requests involved. Your input never leaves your device in either case. We do not use OpenAI, Anthropic, Google, or any cloud-based language model.
Calendar (optional)
If you grant Calendar permission, ReSpring uses Apple's Calendar system in two ways:
- Reference calendars (read): ReSpring reads events from any calendars you choose as references so that ReBalance can avoid scheduling tasks during your existing commitments.
- Adding tasks to your calendar (write): If you choose to, ReSpring can add your tasks to a calendar of your choice as events, so they appear alongside the rest of your day.
All Calendar access happens on your device. Calendar data is not transmitted to ReSpring's servers or to any third party. Both directions are optional and controlled by you, and you can revoke Calendar permission at any time from the app's Settings or from iOS Settings.
Subscription status
ReSpring Bloom subscriptions are processed entirely by Apple. We receive only the information Apple provides about your subscription status (active / inactive, tier, renewal date) so the app can unlock Bloom features. We do not receive your payment information, Apple ID, name, or email through this process.
AI improvement data (opt-in)
Sharing data is off by default. You can opt in any time from the app's Settings, under the privacy section.
If, and only if, you opt in, ReSpring shares data with us only when you use the "Plan with AI" feature and confirm the generated plan. Each event includes:
- Your goal prompt, sent exactly as you typed it (for example, "plan a road trip")
- Which method was used to generate the plan: either
apple(Apple Intelligence) orrules(the built-in rules-based fallback) - The resulting task list, including task titles, time estimates, priority, and any due dates the AI assigned
- An anonymous identifier (a random code generated on your device, stored in a secure storage area built into iOS, never linked to your Apple ID, name, email, or device identifiers)
We use this data solely to improve the algorithm that breaks goals into tasks. We do not collect general usage data, screen views, button taps, crash logs, or device information.
Legal basis (EU/UK users): We process this data based on your consent — you can withdraw it at any time. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal. (Legal basis under GDPR: Article 6(1)(a).)
This data is transmitted over HTTPS to a secure server we operate through Cloudflare, and stored on Cloudflare infrastructure. Cloudflare handles this data on our behalf. As with any internet service, Cloudflare's servers may briefly log your IP address for routing, security, and abuse prevention per their policy. We do not store IP addresses in our records and do not associate them with your anonymous ID. See Cloudflare's privacy policy for how they handle data on our behalf.
The contents of your manually entered tasks, subtasks, notes, and any tasks you create outside the "Plan with AI" feature are never included.
Retention: All shared data is automatically deleted from our Cloudflare storage after 30 days. We do not keep long-term records.
You can also withdraw consent and request immediate deletion of all previously shared data at any time from the app's Settings, under the privacy section. Deletion uses your anonymous identifier to remove your records from our Cloudflare storage.
If you do not opt in, ReSpring sends no data of any kind to us or to Cloudflare.
Website (respring.app)
Our marketing website is hosted on Firebase Hosting. We do not use analytics, cookies, or tracking on the website.
What We Do Not Collect
- We do not collect your name, email, phone number, or contacts.
- We do not access your health data.
- We do not use location services.
- We do not use advertising identifiers or run ads.
- We do not sell, rent, or share data with third parties.
Data Retention and Deletion
Because your data lives on your device and in your personal iCloud, you control it. You have several ways to delete it:
- From inside the app: The app's Settings includes a "Delete All Data" option that wipes your local tasks, garden, and iCloud-synced records, and (if you opted in) also deletes all of your shared AI improvement data from our Cloudflare storage in a single action.
- AI improvement data only: The privacy section in the app's Settings lets you withdraw consent and delete previously shared AI improvement data without touching your tasks.
- Delete the app: Removing ReSpring from your device deletes all locally stored data.
- Remove iCloud-synced data: iOS Settings → your Apple ID → iCloud → Manage Account Storage → ReSpring → Delete Data.
Any AI improvement data you have shared is also automatically deleted from our Cloudflare storage 30 days after it was sent.
Your Rights
The AI improvement data described above is tied to a randomly generated identifier that your device creates and stores in a secure storage area built into iOS. The same identifier is also recorded alongside each event in our Cloudflare storage so we can locate and delete records on request. We do not, and cannot, link this identifier to your name, email, Apple ID, IP address, or any other detail about you, and the identifier is not displayed in the app. As a result, on our side we cannot identify you from these records. We know each event comes from "some device that uses ReSpring," but we have no way of knowing whose.
Under GDPR (Article 11) and similar laws, when we cannot identify you, certain rights are not technically possible to exercise, because we cannot tell which records belong to which person. These include the right to access a copy of your specific records, the right to correct them, and the right to receive a copy of your data in a transferable format. We are required to disclose this rather than pretend otherwise.
You do, however, retain the following rights, which work without us having to identify you:
- Withdraw consent at any time: Turn off "Share Anonymous Usage Data" in the app's Settings, under the privacy section. No further data will be sent.
- Deletion ("right to be forgotten"): The app's Settings includes a delete option that removes all previously shared data from our Cloudflare storage. Your device sends your identifier with the delete request so we can locate the corresponding records. A separate "Delete All Data" option does the same in a single action and also wipes your local and iCloud-synced tasks.
- Object or restrict processing: Withdrawing consent stops all processing of new data; deletion stops all processing of previously shared data.
- Automatic deletion: Even if you take no action, all shared data is automatically deleted from our Cloudflare storage 30 days after it is sent.
- Lodge a complaint: If you are in the EU, UK, or EEA, you have the right to lodge a complaint with your local data protection supervisory authority.
If you have questions about how this works or believe we are not living up to this commitment, email [email protected].
International Data Transfers
ReSpring is operated from the United States. If you opt in to share AI improvement data, that data is transmitted to and stored on Cloudflare infrastructure in the United States. If you are located in the European Union, United Kingdom, or European Economic Area, this means your data is transferred outside your home jurisdiction. We rely on Cloudflare's Standard Contractual Clauses (a legal mechanism approved by EU regulators for transferring data outside the EU) and supplementary safeguards as the legal basis for this transfer. See Cloudflare's GDPR resources for details.
Security
Data in transit between your device and our Cloudflare server is encrypted with HTTPS (an encrypted connection). Data in Cloudflare storage is encrypted while stored. The anonymous identifier on your device is stored in a secure storage area built into iOS, protected by your device's security chip on supported devices.
California Residents
If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) gives you certain rights regarding personal information. ReSpring does not sell or share personal information as those terms are defined under the CCPA/CPRA, and we do not use personal information for targeted advertising based on your activity across other apps or websites. We do not knowingly collect or sell the personal information of minors under 16. The deletion and opt-out mechanisms described elsewhere in this policy apply to California residents on the same terms as to all other users.
Children's Privacy
ReSpring is not directed at children under 13, or the higher minimum age required by your jurisdiction (for example, 16 in parts of the EU/EEA). We do not knowingly collect data from children.
Changes to This Policy
If this policy changes, we will update the "Last updated" date above and, where appropriate, notify you within the app.
Contact
Questions about this policy or your data? Email [email protected].