Deliver — Privacy Policy

Last updated: September 3, 2026

Deliver is a personal task-capture app. It is built to be local-first: there is no account, no sign-in, and by default nothing you enter leaves your device.

What stays on your device

Everything, by default:

• Captures, Actions, Commitments, notes, check-ins — stored in a file in the app's private container on your device. Not synced to any server by us.
• Voice recordings for capture — audio is transcribed to text on-device or by Apple's speech recognition (governed by Apple's privacy policy), then the audio is discarded. We do not keep or transmit recordings.
• Usage metrics — the app keeps coarse, on-device counters (e.g. how often capture succeeds, latency) to help improve reliability. These never leave the device and contain no task content.

Device permissions

• Microphone / Speech Recognition — used only while you are actively recording a capture.
• Calendar — used only if you approve a focus block; the app writes that block to your calendar and reconciles changes. It does not read your calendar for any other purpose.

You can decline or revoke any of these in iOS Settings; the rest of the app keeps working.

The AI Chief of Staff (optional, off by default)

Deliver includes an optional "AI Chief of Staff" feature, controlled by a switch in Settings. It is off by default. When you turn it on:

• When you ask the Chief of Staff a question (in chat, or a spoken check-in), the app sends the text of your question plus a short summary of your current state — the titles of the tasks on your Today list, counts of unresolved and waiting items, brief summaries of your active commitments, and any flagged exceptions — over an encrypted (HTTPS) connection to a proxy server operated by the developer (a Cloudflare Worker), which forwards it to Anthropic's Claude API to generate a reply.
• The reply text is returned to your device. The request and reply are not stored by the proxy beyond what is needed to serve the request and enforce a rate limit. Anthropic processes the request under its API terms and does not use API data to train its models.
• No name, email, device identifier, or location is attached to these requests.
• If the feature is off, or your device is offline, or the request fails, the app falls back to a fully local response and nothing is sent.

If a future version changes what this feature sends, this page will be updated to say exactly what and why before that version ships.

What we don't do

• No advertising, no ad networks, no third-party analytics SDKs.
• No tracking across apps or websites.
• No sale or sharing of your data.

Data retention and deletion

Your data lives on your device. Deleting the app deletes it. There is no server-side copy for us to retain or delete.

Children

Deliver is not directed to children under 13.

Contact

Questions: jscamachom@outlook.com