Privacy Policy

1What this covers

Whisker Wonder Labs ("we", "us") is the name a one-person, independent app project publishes under, based in Malaysia. This policy covers:

• the Sloe iOS app on the App Store; and
• this website, whiskerwonderlabs.vercel.app.

Questions about any of it: whiskerwonderlabs@gmail.com.

2No account — what stays on your phone

Sloe never asks you to register or sign in, and never asks for your name, email, or phone number. There is no profile of you anywhere.

Your tasks (their text, category, schedule, and whether they're done), your theme and mascot choices, and your daily AI usage count all live in a private database inside the app on your device. There is no cloud sync, no server copy of your tasks, and no backup or export feature. If you use iCloud Backup, that copy sits in your Apple Account under Apple's terms, not ours.

The first time the app runs it creates a random identifier (a UUID) and stores it on the device. It isn't derived from you or your hardware — it exists only so features like usage limits, AI sorting, and subscriptions can tell one installation from another. Doing that means it is sent with the AI request (section 3) and given to RevenueCat as its "app user ID" (section 4). Nothing links it to your identity, and deleting the app discards it — reinstalling mints a new one, so the old identifier cannot be tied to the new installation.

Sloe requests no sensitive permissions: no location, contacts, camera, microphone, photos, files, or calendar, and it sends no notifications. It uses the internet only for AI sorting and subscriptions. Sloe shows no advertising and asks for no tracking permission, so it never touches your device's advertising identifier. It contains no analytics, tracking, or crash-reporting SDKs — no Firebase, Crashlytics, Sentry, or anything similar. A short technical log is kept on the device to help the app run and is never sent anywhere.

3AI sorting — what leaves your phone

This is the one time your task text leaves your device. When you type a few lines and tap AI dump:

• What is sent: the combined text of that batch — up to four short items, up to 100 characters each — in a single request, plus the random installation identifier from section 2, used only to rate-limit against abuse.
• Where it goes: over an encrypted (HTTPS) connection to a small service we run on Cloudflare, which forwards it to OpenAI (model gpt-5-nano). OpenAI returns a list of tasks and a suggested life area for each.
• What is not sent: no name, email, account, contacts, or location — there is none to send.
• Retention: the text is used to produce that one response and is not used to train AI models. Our service keeps no copy after the request. OpenAI may hold API request data briefly for abuse monitoring under its own API terms. Your tasks are never stored on any server of ours.

You can use Sloe without this feature. If your phone is offline, or the request times out, nothing is sent: Sloe splits the text into tasks on your device instead, so you keep what you typed — just without the suggested life areas. If the service is reachable but answers badly, the dump fails outright, your draft is kept, and nothing is charged against the day's allowance.

Crisis check. Before anything is sent, Sloe checks what you typed on your device against a list of phrases about self-harm and suicide. If one matches, that text is not sent anywhere at all — not to our service, not to OpenAI — and is not saved as a task; the app shows you a helpline directory instead.

Please understand what that check can and cannot do. It compares phrases. It does not understand what you have written, and it will miss things — wording it does not list, and languages it does not cover. It currently covers English, Spanish, Portuguese, French, German, Chinese, Japanese, Korean and Malay. It is a safety net, not a guarantee, and Sloe is not a crisis service, medical device, or safety tool, and must not be relied on as one. If you are struggling, findahelpline.com lists free, confidential helplines in over 175 countries, whether or not this app noticed anything.

4Subscriptions

An optional paid subscription raises the daily AI limit and unlocks extra themes and mascots. Payment is handled entirely by the App Store — we never see your card or billing details. RevenueCat tells the app whether a subscription is active; it receives the random installation identifier (as its "app user ID"), your purchase status from the App Store, and basic technical data about the request. It never receives your tasks.

Sloe carries no advertising of any kind. There is no ad network in the app, nothing is served to you, and no advertising identifier is read or shared.

5Other services involved

Each of these receives only what its job needs, and nothing receives your tasks except OpenAI (section 3):

OpenAI

Turns your typed lines into tasks with suggested life areas. Privacy policy.

Cloudflare

Hosts the small service between the app and OpenAI, and rate-limits it. Privacy policy.

Apple

Distributes the app through the App Store and processes all payments. Privacy policy.

RevenueCat

Reports whether a subscription is active. Privacy policy.

Google Fonts

Delivers the app's Inter typeface. The first time it's needed the file may be fetched from Google's servers, so your IP address reaches Google as part of that request; nothing else is attached. Privacy policy.

Vercel

Hosts this website and keeps standard access logs (IP, timestamp, page requested). The site itself is static: no cookies, no analytics, no third-party scripts. Privacy policy.

Several of these are US-based, so the limited data described here may be processed in the United States or elsewhere, relying on those providers' own safeguards such as the EU Standard Contractual Clauses.

All network requests use encrypted (HTTPS) connections, and on-device data sits in the app's private storage protected by the iOS app sandbox. No method is perfectly secure, so we keep what leaves your phone to the minimum the features need.

6Deleting your data

Because everything personal lives on your device, you control it directly:

• delete a task and it goes immediately;
• Settings → Reset all data erases your tasks and every past day's usage count;
• deleting Sloe removes its database, and the random identifier with it.

Two things deliberately survive Reset all data, neither of which contains anything you wrote: the random identifier from section 2, and the number of dumps used so far today. Today's count is kept so that resetting cannot be used to hand back the day's allowance. Deleting the app removes both.

For anything held by a service above — a subscription record at RevenueCat, for instance — email us and we'll pass on your request or point you to the right control.

7Children

Sloe is not directed to children. It is intended for people aged 13 and over (16 where that is the local minimum age for this kind of processing), and it is not part of the App Store's Kids category. We do not knowingly collect data from children below those ages. If you believe a child has used the app in a way that concerns you, contact us and we'll help.

8Your rights, changes, and contact

Depending on where you live — including under Malaysia's Personal Data Protection Act 2010, the EU/UK GDPR, or California law — you may have the right to access, correct, or delete personal data, to object to certain processing, and to opt out of "sale" or "sharing" for targeted advertising. Sloe does not advertise, track, or share data for either purpose, so there is nothing to opt out of. Because it has no account, most of your data is already in your hands (section 6). For anything else, email us and we'll respond within the time your local law allows. You will never be treated differently for asking. If you're in the EEA or UK and think we've handled your data poorly, you can complain to your local data-protection authority.

If this policy changes in a way that matters, we'll update the date at the top and note it in the app's release notes. Continuing to use Sloe after a change means you accept the updated policy.

Questions, requests, or corrections: whiskerwonderlabs@gmail.com.

9Notis privasi (Bahasa Malaysia)

Notis ini disediakan dalam Bahasa Malaysia menurut seksyen 7(3) Akta Perlindungan Data Peribadi 2010, dan merangkumi perkara yang dikehendaki oleh seksyen 7(1) Akta tersebut. Seksyen 1 hingga 8 di atas mengandungi penjelasan penuh dalam Bahasa Inggeris. Sekiranya terdapat percanggahan antara kedua-dua versi, versi Bahasa Inggeris akan diguna pakai.

Data peribadi yang diproses

Sloe tidak meminta akaun, nama, alamat e-mel atau nombor telefon. Data yang diproses ialah: (i) teks tugasan yang anda taip, dihantar sekali apabila anda menekan AI dump; dan (ii) pengecam pemasangan rawak (UUID) yang dijana pada peranti anda dan tidak terhasil daripada diri atau perkakasan anda. Sloe tidak membaca ID pengiklanan peranti anda. Tugasan, tetapan dan kiraan penggunaan harian anda disimpan di dalam peranti anda sahaja.

Tujuan pemprosesan

Teks tugasan diproses untuk menukarkannya menjadi tugasan dan mencadangkan satu bidang kehidupan bagi setiap satu. Pengecam pemasangan digunakan untuk mengehadkan kadar penggunaan bagi mengelakkan penyalahgunaan, dan untuk mengesahkan status langganan anda. Tiada data diproses untuk tujuan pengiklanan.

Sumber data

Semua data diperoleh daripada anda dan peranti anda sendiri. Kami tidak memperoleh data peribadi anda daripada mana-mana pihak ketiga.

Hak akses dan pembetulan

Anda berhak memohon akses kepada data peribadi anda dan memohon pembetulannya. Oleh sebab tugasan dan tetapan anda berada di dalam peranti anda, anda boleh melihat, mengubah dan menghapuskannya secara terus di dalam aplikasi — termasuk melalui Settings → Reset all data, atau dengan menyahpasang aplikasi. Untuk sebarang pertanyaan, aduan, atau permohonan akses dan pembetulan, e-mel whiskerwonderlabs@gmail.com.

Kelas pihak ketiga

Data yang dinyatakan di atas boleh didedahkan kepada kelas pihak ketiga berikut: penyedia perkhidmatan kecerdasan buatan (OpenAI); penyedia infrastruktur awan (Cloudflare); pengedar aplikasi dan pemproses pembayaran (Apple); penyedia pengurusan langganan (RevenueCat); penyedia fon (Google Fonts); dan penyedia pengehosan laman web (Vercel). Hanya teks tugasan dihantar kepada OpenAI — tiada pihak lain menerimanya. Tiada rangkaian pengiklanan terlibat.

Pilihan untuk mengehadkan pemprosesan

Anda boleh menggunakan Sloe tanpa ciri pengisihan AI, dan dengan itu tiada teks tugasan akan dihantar keluar daripada peranti anda. Sloe tidak memaparkan sebarang iklan, jadi tiada pilihan pengiklanan yang perlu anda uruskan. Anda juga boleh menghapuskan data anda pada bila-bila masa melalui Settings → Reset all data, atau dengan memadamkan aplikasi.

Wajib atau sukarela

Tiada data peribadi yang wajib anda berikan — tiada akaun untuk didaftarkan. Semua pemprosesan yang diterangkan di atas adalah sukarela dan bergantung pada ciri yang anda pilih untuk gunakan. Jika anda memilih untuk tidak menggunakan ciri pengisihan AI, hanya ciri tersebut sahaja tidak akan berfungsi; bahagian lain aplikasi tetap boleh digunakan.