What Just One knows
about you.

1. Who is responsible

Just One is made by Sam Bruneau, an independent app developer based in the United States. Sam also runs this website. Under privacy law that makes Sam Bruneau the data controller for anything described here.

You can reach a real person at info@sambruneau.com. There is no support queue and no ticket number. We aim to answer privacy emails within two business days.

This policy covers the Just One app and the site at justone.sambruneau.com. It does not cover Apple's own services, or any other site we link to. Apple describes its own handling in the Apple Privacy Policy.

2. What the app collects

Just One has no sign-in, no user account, and no task server of ours. The app works offline, and it never transmits your tasks to us. Optional iCloud sync sends a snapshot to Apple, and beta builds can send the limited analytics described in section 6.

This is where the app keeps the information you create:

The app also creates random identifiers for the installation and for tasks, lists, and sync operations. They help devices merge data without duplicating or resurrecting deleted items. They are not tied to an account and are never sent to us. They can appear in local storage, iCloud snapshots, Watch or widget snapshots, and backup files you export. Removing the app removes its active local identifier on iPhone and iPad, but copies can remain in iCloud, exported backups, or Mac app-support files until those copies are removed or replaced.

3. iCloud sync

If your device is signed into iCloud, Just One keeps one current snapshot in your own iCloud account, using Apple's iCloud key-value storage. It contains tasks, lists, completion and Focus state, settings, deletion records, and technical sync identifiers. Apple copies that snapshot to your other devices signed into the same Apple Account. That is how a task added on your iPhone appears on your Mac.

• The snapshot goes to Apple. It does not go to us.
• We have no access to your iCloud account and no way to read the snapshot.
• Apple handles it under its own terms and the Apple Privacy Policy.

Sync follows your device's iCloud setting. Sign out of iCloud, or turn iCloud off for Just One where your device offers that control, and the app keeps working with a local copy alone. Settings in the app shows the current state in one quiet line, such as “Synced just now” or “Sign in to sync across devices.”

4. Notifications

Reminders are scheduled by your device and delivered by your device. Nothing about them travels over the network. We never learn that one fired, and we cannot send you a message ourselves — the app has no push server.

The app asks for notification permission the first time it needs it, and never before. You can turn each kind off separately in Settings → Notifications: Daily reminder, Scheduled-time reminders, and Milestone moments.

5. Widgets, Apple Watch, and Apple TV

Just One's widgets, controls, share extension, Apple Watch app, and Apple TV app use limited copies of app data. None of these copies goes to us:

• Widgets and controls — a private app-group area on the device can contain list names, the current task for each list, task details such as due dates and subtasks, summary counts, limited settings, and technical identifiers. Just One's own extensions use that copy to display and update your tasks.
• The share extension — text or a link you choose to share is saved as a pending task in that same private area until the main app processes it.
• Apple Watch — list names, the selected list's current task and its details, limited settings, and actions move between the paired iPhone and Watch through Apple's WatchConnectivity service.

The Apple TV app reads the same iCloud snapshot described in section 3.

6. Tracking and advertising

The public App Store build of Just One has:

• No advertising, ad networks, or ad identifiers.
• No App Tracking Transparency prompt, because the app does not track you.
• No enabled analytics or third-party crash reporter.
• No social network buttons, embedded pixels, or fingerprinting.
• No feature that builds a profile of you on this device or across others.

We do not sell your personal information, we do not share it for advertising, and we never have.

The app bundle includes the PostHog library so separate beta builds can use it. Production code refuses to start PostHog even if an API key is added by mistake, so the public build sends no PostHog events.

Beta builds are a small exception

Test builds handed out through TestFlight before the public release can send PostHog the names of app screens that open, app lifecycle events such as launch or background, a random analytics identifier, and technical context added by the analytics library. Person profiles, touch capture, and session replay are disabled. Events never include task titles, descriptions, list names, due dates, deep-link URLs, or backups. PostHog processes those beta events under its privacy policy. Public production builds hard-disable it.

7. What Apple tells us

Apple makes App Store download and usage reports available to developers. Apple can also provide diagnostics from people who chose to share analytics with developers. These reports can contain aggregated usage or technical crash information, but they do not contain your Just One task content.

That is Apple's collection, under Apple's policy, not ours. You control it in the iOS Settings app under Privacy & Security → Analytics & Improvements.

8. This website

The pages you are reading set no cookies, run no analytics, and load no fonts, scripts, or images from anyone else's server. There is no tracking pixel here.

The site saves one thing in your browser: the accent color you pick on the home page, under the key justone.accent. It is a preference, not an identifier. It stays in your browser and is never sent anywhere. Clear it with “Reset demo” on the home page, or by clearing site data in your browser.

Cloudflare hosts the site. Like any web host, it keeps short-term logs that include IP addresses, so that it can serve pages and block attacks. That processing is Cloudflare's, under its own privacy terms. We do not read those logs and do not build anything from them.

We use Cloudflare, n8n, Google Sheets, our email provider, and PostHog only for the purposes described in this policy. We limit their access to what the service needs and rely on their privacy and security terms to protect the data they process for us.

The waitlist form

If you enter an email address to join the waitlist, we receive the address, the form's source label, the time you submitted it, the page you were on, the page that sent you here, and your browser's user-agent string. A Cloudflare function forwards the submission to a private n8n automation, which is configured to append it to a private Google Sheet and send the confirmation email.

We use it for one purpose: to email you when Just One is released. We do not sell it, rent it, or pass it to advertisers. We will not add you to a newsletter.

If you are in Europe or the United Kingdom, the legal basis is your consent, given when you submitted the form. You can withdraw it at any time by emailing info@sambruneau.com, and we will delete the address within 30 days.

9. Children

Just One is a general-audience app. It is not directed at children under 13, and it is not in the App Store Kids Category. It does not ask for a name, age, email address, or account. Public builds do not enable analytics; the beta exception is described in section 6.

Do not use the waitlist form if you are under 13. If you believe a child gave us an email address, write to us and we will delete it.

10. How long we keep things

• Your tasks — for as long as you keep them, on your own device and in your own iCloud account. We never hold them, so we have nothing to delete.
• Local restore safety copies — until the app's local data is removed. The iPhone and iPad app replaces its one safety copy on the next restore; the Mac app can keep more than one timestamped copy.
• Beta analytics — according to the retention set for the private PostHog project, or until the project data is deleted. This does not apply to public production builds.
• A waitlist email address — until the launch email goes out, or until you ask us to remove it, whichever comes first. We delete the whole list after launch.
• Support email — for as long as it takes to answer you, and then up to 12 months in case you write again about the same problem.
• Host security logs — kept and deleted by Cloudflare on its own schedule.

11. Deleting your data

There is no account to close, because there is no account. What you can delete, and how:

1. One task. Open Manage Tasks and delete it. Undo is offered immediately afterwards.
2. Everything local on iPhone or iPad. Delete the app. iOS and iPadOS remove the app's local container. This does not remove an exported file or the iCloud snapshot.
3. Local data on Mac. Delete tasks in the app. macOS can leave app-support files, including restore safety copies, after the app itself is removed. Contact us if you want help locating and removing them.
4. The synced task content in iCloud. Delete your tasks inside the app first and let the change sync. Deleting the app on its own leaves the last snapshot in your iCloud account; technical deletion records can remain after the task content is gone.
5. An exported backup. Delete it wherever you saved or sent it.
6. Your waitlist email address. Email info@sambruneau.com. We do it within 30 days and write back to confirm.

Export a backup before you delete anything you might want later. Settings has Export backup, and the file is yours.

12. Your rights

We do not receive your task content. Privacy rights can apply to a waitlist or support email, limited beta analytics, and website request data handled by our service providers.

If you live in California

The CCPA, as amended by the CPRA, gives you the right to know what we collect, to get a copy of it, to correct it, to delete it, and to opt out of its sale or sharing. You cannot be treated differently for using any of those rights.

In the last 12 months, the categories that can have been processed are identifiers (a waitlist or support email, an IP address in host logs, or a random beta analytics identifier), internet or app activity (a web request or beta lifecycle and screen event), and related technical information. We use them only for the waitlist, support, site delivery and security, or limited beta measurement. We did not sell or share personal information for cross-context behavioral advertising, and we do not collect sensitive personal information.

If you live in the European Economic Area or the United Kingdom

The GDPR and UK GDPR give you the right to access your data, correct it, delete it, restrict or object to its use, receive a portable copy, and withdraw consent at any time. You also have the right to complain to your national data protection authority.

How to use any of them

Email info@sambruneau.com. Tell us what you want done. You do not need to explain why, we do not charge a fee, and we do not require an app account. We may ask for only the information needed to find a record and verify the request. Expect a reply within two business days and completion within 30 days.

Where your data is handled

We are in the United States. A waitlist submission, support email, or beta analytics event can be handled there by us or the providers named above. If you send information from elsewhere, it can cross a border. Your tasks are different: Apple keeps the synced copy in your own iCloud account under Apple's terms and regional arrangements.

13. Security

Your tasks sit in the app's private storage, which iOS, iPadOS, and macOS protect with the operating system's app sandbox and available device security features. Syncing rides on Apple's encrypted iCloud transport. This website is served over HTTPS.

The strongest protection here is structural rather than technical: there is no server holding everyone's tasks, so there is no single place worth attacking. For the little we do hold, no system is perfect. If something goes wrong with data we hold, we will say so here and email the people affected.

14. Changes to this policy

We update this page when the app changes, and we change the date at the top when we do. If a change matters — new data collected, or an old thing used for a new purpose — we will say so plainly at the top of this page before it takes effect, and we will email waitlist members if their data is affected.

This policy is governed by the laws of the United States and the state in which the developer resides, without limiting any right you hold under the law of your own country.