Privacy Policy

Consten is a daily task tracker, made by Donkeyshin, LLC.

The short version. Your tasks live on your device and work offline. An account is optional. A server copy of your tasks exists only if you subscribe and turn sync on. Nothing is tracked, profiled, or sold.

The rest is detail.

What stays on your device

Task names, notes, symbols, schedules, counts, anything you write about a day, and your completion history stay on the device you made them on. Anything Consten reads from Health stays here too. Checking off, editing, history, widgets, and the watch app all work with no network at all.

When there is an account

An account is optional. Consten works without one, during the trial and after you subscribe.

Subscribing offers you an account, with email, Sign in with Apple, or Google. You can choose Later, and nothing stops working. You can also sign in from Settings at any time, whether or not you subscribe.

An account keeps just enough to identify you and to confirm your subscription is active.

Turning sync on does not create an account. It starts a server copy of your data on the account you already have.

I never receive your Apple or Google password.

What is on the server

The first time Consten runs, it registers the installation. That record is an identifier from the store you downloaded the app from, plus whether a subscription is active. It is written before any account exists, and it carries nothing you have typed.

Signing in sends your email address, or Apple’s private relay address if you sign in that way. Subscribing sends your store transaction, so the server can confirm the subscription is active. Both happen whether or not sync is on.

With sync on, Consten also keeps a copy of your data so it can move between your devices and survive a lost phone:

• Tasks, completions, skips, counts, settings, and preferences.
• Anything you write about a day, kept with that day.
• Theme background photos, if you set one, so a theme looks right on your other devices.
• When your reminders are due on each device, so Consten can tell if one has stopped firing them.
• A notification token for the device, so the server can send it the silent signal described under Notifications.
• Today’s total for a measure a task follows, but only with Sync health progress on. That switch is separate from sync and off until you turn it on.

During the trial there is no backup

Nothing is backed up during the trial. Your data is only on the device in your hand, so if that device is lost or broken, the data goes with it. Signing in does not change that. Backup begins once you subscribe and turn sync on.

Who else touches your data

• Cloudflare hosts the servers, database, and file storage, and delivers sign-in codes and service email. Delivering email means it handles your address.
• Apple and Google handle payment, and confirm who you are if you use their sign-in. Neither sees your tasks.

Each one handles your data only to run Consten and provides the same or equal protection of it as this policy describes. Nobody else receives it. It is never sold and never shared for advertising.

How it is kept safe

Data is encrypted in transit and at rest. Sign-in codes are short lived, never stored in readable form, and never written to logs. Session tokens are stored hashed and rotate when used.

Email

Your address is used for sign-in codes and occasional service messages, such as telling you a subscription lapsed and when the server copy will be removed. There is no marketing email and no newsletter.

Notifications

Nudges are off by default and stay off until you turn them on for a specific task. Your own device prepares and delivers them, and the wording of a reminder never leaves it.

With sync on, the server may send your device a silent signal. It carries no content and shows nothing on screen. It only asks the app to sync, so a device that has fallen behind can refresh its reminders.

Location, only if you ask for it

Consten asks for your location only if you add a sunrise or sunset rule to an appearance schedule. It uses a rough position, rounded before it is saved, to work out those times on your device. It is never sent anywhere, and everything still works if you say no. Those rules fall back to the fixed time you set.

Consten also asks for your location when you go to set a place on a task, so the task can check itself off when you arrive there, or when you leave. Your iPhone watches for that one place and tells Consten you crossed it. That is what the Always setting is for, and it is the only thing it is used for.

The place you set is kept on that device. It is never sent to a server, so it is not in your data export and there is nothing to delete there. Consten never records where you go: no location history, no trail, and nothing sampled in the background. Searching for a place asks Apple Maps, the same as any map search.

You are only asked if you use the feature. A task with a place can still be checked off by hand if you say no.

Health, only if you link a task to it

Consten asks for Health access only if you set a task to follow something Health already counts for you. Apple’s privacy label calls this Health data. A task follows one measure, and Consten reads today’s total for it on your device to fill in the task’s count. It never reads your history, and it never reads a measure you have not linked to a task. Nothing is ever written back to Health. Everything still works if you say no.

A reading reaches the server only if you turn on Sync health progress, and then only today’s total for the measures your own tasks use.

Your voice never leaves the device

The microphone opens only when you tap it, and only to write down a task. Turning speech into words, and turning those words into a task, both run on your device using Apple’s own on-device models. No audio is recorded to disk, and nothing is sent anywhere. Typing is always right there instead.

Diagnostics, unless you turn them off

Share Diagnostics, under Settings and then Privacy & Security, is on until you turn it off. With it on, Consten sends a record of crashes, hangs, whether the subscription check succeeded, and which features are in use, along with the app version and platform. Each record carries a random code that changes with every app update, so it cannot follow one device over time. It is never joined to an account. No task, note, photo, address, or health reading is ever included. Records are kept for about 90 days and then deleted. Turning the switch off stops recording at once and discards anything not yet sent.

No tracking, no ads

Consten carries no advertising, no third-party analytics, and no tracking across apps or websites. The diagnostics above are Consten’s own and stay anonymous. It does not build a profile of you and does not train anything on your data.

This website sets no cookies and runs no analytics. There is nothing here to consent to.

Widgets and the Lock Screen

Widgets read the same data as the app. What shows on the Lock Screen is yours to control in Settings, including hiding task names entirely while locked. App Lock puts the whole app behind Face ID, Touch ID, Optic ID, or your passcode.

Keeping and deleting your data

• Delete Tasks and Preferences in the app under Settings, or start it from Delete your data or your account. It removes the server copy: tasks, completions, counts, anything you wrote about a day, settings, preferences, and theme photos. It keeps your account, subscription, and sign-in, and does not touch your device. Other devices with sync on stop syncing the next time they connect, and keep their own local data from there.
• Delete Account in the app under Settings, or start it from Delete your data or your account. It removes the account itself, and everything Delete Tasks and Preferences removes. It does not touch your device.
• Withdraw consent by turning sync off. That stops your tasks reaching the server. Turning Sync health progress off stops health readings separately, and discards any that were queued and not yet sent. The installation record above is separate, and it keeps updating while the app is on your device. Deleting the app ends that record, and Delete Account removes what is already held.
• If a subscription lapses while sync is on, the server copy is kept for 12 months. Signing in and turning sync on within that window restores your history. After 12 months it is deleted.
• After 12 months your account is deleted too, along with the sign-in methods attached to it. I email you 30 days before, and again 7 days before. Those emails are a courtesy and not a guarantee, so one that bounces or lands in spam does not pause the deletion. If you come back later you sign up again, and the app uploads what is on your device. Your subscription record is not deleted, so a subscription you are still paying for can be reclaimed.
• Data on your device is never touched by any of this. Nothing you made is deleted for want of a payment.

Your rights

Wherever you live, you have the right to see the data held about you, correct it, delete it, take a copy elsewhere, or object to how it is handled.

The app covers all of it. To take a copy elsewhere, open Settings, then Sync, then Export Your Data. A download link is emailed to the address on your account. It works for 3 days and for 3 downloads, then the file is deleted. The file holds everything on the server, and the app tells you what that is before you ask for it. You can also complain to your local data protection regulator.

Where it is stored

Consten runs on Cloudflare’s global network, so your data may be processed in a country other than your own. It is protected the same way wherever it sits.

Children

Consten is not aimed at children, and I do not knowingly collect personal information from them.

Changes

If what Consten collects changes, this page and the app’s copy change together and the date above moves. Anything material also shows up in the app, not only here.

Questions

Email me at support@consten.app.