Privacy Policy

Last updated: 22 June 2026

NowStack is built privacy-first. Your tasks live on your device by default. We don't run ads, analytics, trackers, or cookies, and we never sell your data. This page explains the few cases where data does leave your device, and what happens to it.

What stays on your device

Your task stack, tags, time-boxes and settings are stored locally on your Mac (and synced to Apple Reminders/Calendar only when you trigger an export). If you never sign in or vote, NowStack sends us nothing personal.

Feature votes

When you vote on a planned feature in Settings, we receive: the feature name, a random per-install identifier, the time, and the platform (“macos”). The identifier is generated on your device and is not your name, email, Apple ID, or hardware ID. Before storage it is hashed with a secret salt, so the stored value can only deduplicate repeat votes — it cannot be traced back to you. We do not store your IP address with the vote.

Support messages

If you use the support form, we process the email address, optional name, and message you enter, in order to reply. We email you a confirmation link first; your message is only delivered to us after you click it. Pending (unconfirmed) messages are deleted automatically after 30 minutes.

Account & cloud sync (optional)

If you create an account for web access or cloud sync, we store your email address and a salted password hash. Synced task content is end-to-end encrypted on your device before upload — it is opaque to our servers (we cannot read it).

Purchases

The one-time unlock is processed by Apple through the App Store. We never see your payment details; we only receive Apple's confirmation that the purchase is valid.

Where data is processed

• Amazon Web Services (AWS), region eu-central-1 (Frankfurt) — API, database and email delivery for votes, support and optional accounts.
• Amazon CloudFront — serves this website.
• Apple — App Store purchases, and any Reminders/Calendar export you initiate.

What we don't do

• No advertising or ad networks.
• No third-party analytics or tracking pixels.
• No cookies for tracking.
• No selling or sharing of personal data.

Your rights (GDPR)

If you are in the EU/EEA, you have the right to access, correct, delete, or restrict processing of your personal data, and to data portability. You can delete all local data any time via Settings → “Delete all tasks”. To exercise any other right, email us at info@sp33c.tech. You also have the right to lodge a complaint with your data-protection authority.