Privacy Policy

Dunlin is a local-first iOS task app operated by Every Bit Ltd. No Dunlin account is required. We do not sell your data or use advertising or analytics trackers. Last updated 24 October 2026.

Tasks and iCloud

Projects, steps and routines are stored on your device and, when available, synced through your private Apple iCloud account using CloudKit. Preferences and capture drafts are stored locally. We do not operate a task-library database. If persistent storage fails, the app warns you that temporary data will be lost when it closes.

Optional cloud AI and your permission

Before your first cloud suggestion request, Dunlin asks for explicit permission. Capture sends the text you submit; step suggestions send the task title and notes, including an optional first action from onboarding. Your language setting is included. Requests pass through our Vercel-hosted server to Anthropic's Claude API. Your whole library is not uploaded. Avoid submitting sensitive information or other people's private details.

Our AI server functions and rate-limit database are configured in Ireland. This does not make cloud AI EU-only: Anthropic stores API data in the United States and may process requests globally. Hosting delivery, security and support operations may also involve international transfers. Read Anthropic's processing-location information. Choose manual tasks or available on-device AI if you do not want to send task text to cloud AI.

We do not intentionally save AI request text in an application database or log it in our API handlers. This is not a zero-retention promise. Anthropic's standard commercial API policy deletes inputs and outputs within 30 days, with exceptions for legal obligations, safety enforcement or different agreements. API content is not used for model training by default. Read Anthropic's retention policy.

Withdraw permission in Settings > AI to stop future cloud requests. Withdrawal cannot recall text already sent or cancel provider retention. You can always save tasks and add steps manually without cloud AI.

Why we use personal information

We rely on your consent to process the text you choose to submit for optional cloud AI suggestions. You can decline or withdraw that consent without losing manual task features. Withdrawal does not affect the lawfulness of processing before you withdrew it.

We rely on legitimate interests to keep the service secure, prevent abuse and answer voluntary support requests. Our interests are protecting service availability and helping people resolve problems, using only information needed for those purposes. These interests do not replace your consent for cloud AI. Where processing is necessary to meet a legal obligation, such as responding to a statutory privacy request, we rely on that obligation.

Optional on-device AI

Settings > Private & offline AI uses Apple's on-device model for suggestions on iOS 26 or later, with an eligible Apple Intelligence device and a ready model. Suggestion text is processed on your iPhone. If unavailable or unsuccessful, it never falls back to cloud. Manual tasks remain available.

Service requests and security

Internet requests expose network information such as your IP address to hosting providers. Our API uses IP-based rate limits through Upstash when configured, plus a shared daily request ceiling. Task text is not sent to Upstash by our code. Vercel and service providers may retain operational and security records under their policies. This information is used to deliver and protect the service, not for advertising. Contact us about retention or deletion requests; we cannot promise immediate deletion of third-party security records.

Location and weather

With your permission, location is used to request local forecasts from Apple WeatherKit. It is not sent to Dunlin's AI server. You can decline or revoke location in iOS Settings and continue using tasks. Apple handles its services under its privacy policy.

Microphone and speech

Voice capture is optional and uses Apple's Speech framework. Audio may be processed by Apple unless on-device recognition is selected and supported. Offline mode requires on-device recognition and does not fall back. Dunlin does not send audio to its server. Recognised text stays in your draft until you choose to save it or submit it for AI suggestions.

Deleting and retaining your data

Delete items in the app. Deletions can sync to other devices when iCloud is working. Undo is available only during the current app session. Local drafts remain until saved or discarded. Removing the app does not delete its iCloud data or copies on other devices. Turning off sync is not deletion. Use Apple's iCloud storage controls to manage cloud data; available controls vary by iOS version. Contact support if you need help before removing important data. Device and iCloud backups follow your Apple settings.

Support and privacy requests

Email dunlin@everybit.ltd. Emails contain what you choose to send. We delete routine support correspondence and attachments six months after the request is closed. We keep relevant records longer only where needed for an unresolved dispute or a specific legal obligation, and review them when that need ends. Email-provider backups may follow separate deletion cycles. Please exclude private task content. Nothing is attached automatically by the app. You may request access or deletion of support correspondence, subject to legal obligations.

Your privacy rights and complaints

Depending on the information and the applicable law, you may ask for access, correction, deletion, restriction or portability of your personal information, or object to its use. You can withdraw cloud AI permission in Settings. Contact the address above for requests or complaints; do not send identity documents or your task library unless we explain why they are necessary. We may need proportionate information to verify a request.

You can also complain to the UK Information Commissioner's Office or your local data protection authority. We cannot directly inspect your private iCloud task library or retrieve a history of AI submissions from a Dunlin task database, because we do not operate one. This does not remove your rights over information we or our service providers process.