Privacy policy

1. About this policy

This policy describes how Carisa version 1.0 handles information in the iOS app and on these support and legal pages. Carisa is operated by [OPERATOR_NAME] (“we”, “us”).

Carisa is a local focus timer and journal. A local profile or guest session is not a registered online account. You do not need to provide an email address, phone number, or password to use the app.

2. Information stored on your device

The app processes the following information inside its app storage to provide its features:

Task and workspace information is stored in the app’s local database. Drafts and some app preferences or markers are stored in local device preferences. We do not receive this information through an app-operated server.

3. No app tracking or routine transmission

The current app does not send your workspace, notes, timer events, or device identifiers to us. It does not include advertising, cross-app tracking, third-party analytics, AI processing, a remote account service, or an app-provided cloud synchronization service. We do not sell or rent your app data or use it to train AI models.

The app’s third-party layout library, Masonry, is used to arrange its interface; it does not provide an analytics or advertising service in Carisa. Apple may separately process App Store, device diagnostic, or operating-system information under your Apple settings and Apple’s own policies. This is separate from routine collection by Carisa.

4. Device capabilities and permissions

Carisa uses device sound and optional haptic feedback, and may display reminders while the app is open. The timer pauses when you leave the timer desk, switch apps, or lock the device. Carisa does not provide background timer completion or system push notifications.

The current app does not request access to your camera, microphone, photo library, contacts, location, or advertising tracking permission. Saving a journal or receipt uses the iOS sharing or file-saving interface and does not require access to your photo library.

5. Exports, receipts, and clipboard

When you choose Settings → Export my journal, the app creates a JSON file containing your local display name, preferences, tasks, notes, favorites, and stage and event records. The app pauses an active timer before preparing the settings export. A full journal may contain sensitive text you entered.

A single-task text receipt includes its task title, label, rhythm, creation/completion information, stage outcomes, and actual time totals. Private task notes are not included in that receipt, but a title or label may still contain personal information.

Files are sent to a destination only when you choose it in the system interface. A destination such as an email app or cloud drive applies its own privacy practices. Temporary in-app export copies are cleaned after the sharing callback, during data-cleanup actions, and on the next app launch. External copies that you saved or shared remain outside Carisa’s control.

Copy receipt writes receipt text to the system clipboard only when you tap it. The operating system and your clipboard settings, including any enabled cross-device clipboard feature, control access to that copied text.

6. Retention and your controls

Your workspace remains on the device until you remove it, replace the app’s data, or uninstall the app. The app does not apply an automatic expiry period to journal entries.

• Delete this task: removes the selected task, its notes, stage records, and saved-template status.
• Clear task data: removes tasks, stage history, favorites, drafts, the active task, and internal export copies. Your local profile, session, daily goal, and preferences remain.
• Sign out: ends the current local session and pauses the timer. It does not erase your journal, display name, drafts, or settings.
• Delete local account: removes the local profile and session, tasks, records, favorites, and drafts, resets preferences and the daily goal, and clears internal export copies. A non-content flag indicating that you previously entered the workspace may remain.

For local deletion, open Workspace → Delete local account, type DELETE, and confirm Permanently delete. We cannot inspect or remotely erase the workspace on your device. A deletion request sent to support can address information you sent to support, but is not a remote deletion command for the app.

Files saved outside the app and any system clipboard copy are not removed by clearing the workspace. Manage those copies in their respective apps. iOS device backups or transfers may include local app data depending on your system settings; this is controlled by Apple, not a Carisa cloud backup service. Exported JSON has no in-app import or restore feature in this version.

7. Security and shared devices

Local data relies on the iOS app sandbox and your device protections. The app does not offer a separate workspace password, biometric lock, or private vault. Someone able to use your unlocked device may be able to read your local workspace and exported files.

Use a device passcode and take care when naming tasks, sharing receipts, or exporting notes. No device or storage method can be guaranteed completely secure or free from loss.

8. Information you send to support

If you contact support, you choose what to send. Your email address, message, app/device version, and any optional screenshot or attachment may be processed to answer the request, investigate a problem, or handle a privacy request. Please omit private task text unless it is needed to explain the issue.

Support correspondence is separate from information stored only in the app. It may be handled by the email or service providers used for that correspondence, and may be disclosed if required by applicable law. We keep it only for as long as reasonably necessary to handle the request, keep a relevant support record, and meet legal obligations. You can ask about access, correction, or deletion of correspondence through the contact below, subject to applicable law.

9. Visiting these pages

These static pages contain no analytics or advertising scripts, tracking pixels, forms, external fonts, or app-data upload features. They do not themselves set cookies or use browser local storage.

When these pages are hosted online, the hosting or delivery provider may process ordinary connection information, such as your IP address, request time, requested URL, browser information, and security logs, to deliver and protect the website. This is separate from your on-device Carisa workspace. The provider’s retention and processing depend on the hosting service used.

10. Children’s privacy

Carisa has no public posting, chat, advertising profile, or online registration feature. We do not knowingly collect a child’s on-device workspace. If you believe a child sent personal information to support, a parent or guardian can contact us to request its review or deletion, subject to applicable law.

11. Changes to this policy

We may update this policy when the app or our practices change. The date above identifies this version. If a future version introduces materially different data handling, we will update the policy and provide any notice or consent required by applicable law.

12. Contact and privacy requests