Privacy

In short: the Ten & Done app works without an account and without a server. This website uses no cookies and no trackers.

This is a translation. The German version is binding.

Who is responsible

Andreas Zimmermann, Mathildenstraße 27, 40239 Düsseldorf, Germany, email: hallo@tenanddone.app

This website

When you open this site, our hosting provider processes technically necessary data (IP address, time, page visited, browser). This is needed to deliver the site and to protect it from misuse (Art. 6(1)(f) GDPR).

Hosting provider: GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA (the “GitHub Pages” service). GitHub stores visitors’ IP addresses for security and to protect against misuse; details and storage periods are in GitHub’s privacy policy (docs.github.com, “GitHub General Privacy Statement”).
Transfer to the USA: GitHub is certified under the EU-US Data Privacy Framework (adequacy decision, Art. 45 GDPR).
The address tenanddone.app is registered with STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany.

This site loads no content from other servers. Fonts and images are stored with the hosting provider itself. There are no cookies, no analytics tools and no embedded services.

Emailing us

If you write to us, we use your address and your message only to reply (Art. 6(1)(b) and (f) GDPR). Our mailbox is with STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. We delete your message once the matter is settled and no retention duty applies, after six months at the latest.

The app

Ten & Done has no account and no server. Everything you plan (notes, lists, memos, points) stays on your phone, unless you turn on a backup yourself (see below). There are no ads and no usage tracking. On your phone, the app uses:

Microphone, only while dictating. Your phone handles speech recognition. Depending on the settings, Google’s speech recognition service may process the recording on Android, and on iPhone Apple may process it, depending on the device and language. The app only saves the recognized text.
Notifications for the reminders you set yourself.
“Do Not Disturb” (Android) only during a Focus Time.
Live Activity (iPhone): During a Focus Time, the lock screen shows the time left. Afterward it disappears.
Motion sensor, to detect whether the phone is lying face down during Focus Time. The values are not stored.
Calendar, only if you turn it on. The app shows your events as notes. If you create an event in the app or enter a birthday or anniversary, it writes it to your calendar (Google Calendar on Android, your default calendar on iPhone, such as iCloud or Google); it does not change other events. If you invite guests, the calendar service (Google or Apple) sends the invitation to the email addresses you enter – that service’s privacy policy applies.
Photos, only the image you choose yourself for your board or the window view. The app keeps a copy of it on your phone.

Phone backup

Android: If you have turned on Google backup on your phone, Android stores the app’s data encrypted in your Google account so you can take it to a new phone. Android does this, not the app; Google’s privacy policy applies. We have no access to this backup. You can turn it on or off in Android Settings.

iPhone: If iCloud Backup is turned on, Apple stores the app’s data encrypted in your iCloud so you can take it to a new iPhone. Apple does this, not the app; Apple’s privacy policy applies. We have no access to it. You can turn it on or off in Settings under your name › iCloud › iCloud Backup.

Backup with Google Drive

With Premium on Android, you can choose to turn on “Back up with Google”. The app then stores a copy of your data (notes, lists, memos, settings, photos for the board, also events that are on the board as notes, and the names of your calendars) in a hidden app folder in your own Google Drive. For this, the app only gets access to that one folder (the drive.appdata permission), not to your other files in Google Drive. The app also sees the email address of the chosen Google account in order to show it to you; it stays on your device.

The data goes directly from your device to Google, not through us. We have no access to it and never see it. The app uses the data from Google Drive only to store your backup and to restore it when you ask; it is not passed on and not used for advertising. This use complies with the Google API Services User Data Policy, including the Limited Use requirements. Google’s privacy policy applies to the storage.

You can turn it off and delete the backup in the app under Backup, or in Google Drive › Settings › Manage apps. You remove the app’s access under myaccount.google.com › Security & sign-in › Connected apps.

Error report and “Report a problem”

If an error happens in the app, it keeps the error message on your phone (at most the first and the last since it last asked you). Nothing is sent on its own. On the next start, Tack asks whether you’d like to let us know; “Report a problem” in the settings also prepares an email to us. It contains the app version, chosen style, device model, Android or iOS version, time, the first line of the error message and the affected places in the code – on Android phones as a text file attached, on iPhone briefly at the bottom of the text (there without the places in the code).

The contents of your notes, lists and memos are not included: the app hides text you typed into it and text in quotation marks beforehand. You see the email before you send it and can delete or change anything. It only reaches us if you send it yourself. We use the details only to find and fix the error and delete them once it is fixed, after six months at the latest. The legal basis is your consent, which you give by sending it (Art. 6(1)(a) GDPR).

Buying Premium

You pay through Google Play or the App Store with your Apple ID; Google’s or Apple’s privacy policy applies. So that the app knows whether Premium has been bought, the service RevenueCat (RevenueCat, Inc., USA) checks the purchase receipt with Google or Apple for us. The app only talks to RevenueCat when you open the Premium page or have bought Premium. RevenueCat receives a random number, the purchase receipt, device type, Android or iOS version, app version, country and IP address – no name, no email and nothing from your notes. RevenueCat acts as our processor [data processing agreement signed on …; legal basis and transfer to the USA (EU-US Data Privacy Framework or standard contractual clauses) to be checked].

If you rate the app in the store, the store operator’s privacy policy applies. We only receive what is publicly visible there.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. You can also complain to a data protection supervisory authority. Data from the app does not reach us. You delete it by deleting the app from your phone (on Android also through Settings › Apps › Ten & Done › Clear data).

Last updated: 1 November 2026