Privacy, written for people.

Account and workspace

This policy applies to lim, also identified as Ferrari/Daily Habits during development, bundle ID com.generativesynesthesia.dailyhabits. Generative Synesthesia is the developer brand. The developer identified for this app in App Store Connect is responsible for the service.

Apple or Google sign-in supplies an account identifier and, when available, name and email. A secure, short-lived link can recover a previously established channel account. Sign-in does not automatically connect Google Calendar. Tasks, routines, preferences, conversations, assistant memory, authorized notes, reminders and action records are stored in Supabase under your account. The app also keeps local data for display and recovery.

Your initial plan, before sign-in

When you ask Lim to prepare an initial plan before signing in, your task description, selected intention, time zone and language are sent through our server to the configured AI provider. The service uses the current time to interpret dates and returns a draft for you to review. This request does not itself create an account, save tasks to an account or activate reminders.

Audio submitted in this initial-plan flow is sent to OpenAI for transcription. The pre-account service does not create a stored chat recording or conversation message from that audio. Voice messages in the signed-in chat are stored with your account history as described below.

To prevent abuse, these services process installation identifiers and request IP addresses and store hashed identifiers with request-limit counters. We do not include task text, audio or provider responses in our application error logs. Processing and retention by the AI providers follow the applicable service terms.

Optional onboarding feedback

If you select Another reason in the onboarding questions and continue, we save the selected question and option together with any explanation you choose to provide, to understand users’ needs and improve the app. Writing an explanation is optional. The app can keep a pending submission on the device and send it when a connection is available.

This feedback is stored separately in Supabase with a random session identifier, a submission identifier, language, question-copy version, submission date and whether it came from onboarding or a development preview. We do not automatically attach your name, email address or Lim account identifier to this record. Free text may contain personal information you choose to write; the feedback is not anonymous. Project administrators can access it for product research. A daily retention job deletes records older than 180 days.

Deleting your Lim account data does not automatically delete this pre-account feedback because it is not linked to the account. For privacy requests concerning feedback, use the contact below; we may need information that helps locate the submission. The separate abuse-prevention controls described above also apply.

Conversations, notes, memory and AI

Messages, replies, sent voice recordings, transcriptions and action history are saved in your cloud account. Lim processes your request with recent conversation and relevant account information, such as tasks, preferences, saved memories, notes you allow the assistant to use, and connected calendar details. It can retrieve older conversation excerpts and authorized notes when relevant. Hiding a message channel in the app only changes what you see; it does not stop storage or erase conversations.

Saved memories are preferences or information used to personalize future replies. In Settings → Privacy → Privacy & Data → What Lim knows about me, you can review, edit or delete them. Deleting a saved memory stops its use as an active memory, but does not erase the messages or notes where you originally shared the information. Minimal change and deletion records may remain to prevent duplicate or stale updates.

Google Calendar, only when connected

A separate Google authorization allows lim to read your calendar list and read or change events. You choose up to ten calendars and an optional destination for new events. The server stores encrypted authorization tokens, account email, calendar identifiers and titles, event identifiers, titles, times, time zones, availability and synchronization records. Routine synchronization covers the previous seven days and next ninety days; specific assistant queries can request other limited date windows.

The connection continues working when the iPhone is closed. Calendar titles and relevant event details can be supplied to the configured AI provider to answer your requests and avoid scheduling conflicts. Raw authorization tokens, attendee lists, locations and event descriptions are not supplied as calendar context. Event content cannot authorize actions. lim creates, changes or deletes Google events only on your request; this integration does not invite participants or send invitation emails.

Google user data is used to provide the calendar and personal-assistant features you request, not for advertising or training generalized AI models. lim’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements: https://developers.google.com/terms/api-services-user-data-policy.

Disconnect in Settings → Connections → Google Calendar to remove lim’s saved credentials and calendar cache. Google events remain in Google Calendar. You may also revoke authorization in your Google Account connections. Conversation and action history may still contain details of your earlier calendar requests until you erase your lim data.

WhatsApp, only when linked

Connecting WhatsApp links your WhatsApp identifier and number to your Lim account. Messages you send to Lim and its replies are handled by Meta/WhatsApp and our server, and become part of the same cloud conversation history. They are processed by the AI service in the same way as requests from the app. This connection does not give Lim access to your other WhatsApp chats or your address book.

Manage or disconnect it in Settings → Connections → WhatsApp. The messages-in-the-app setting controls which channels are displayed, not where reminders are delivered. Disconnecting stops future use of the link; existing Lim history and messages already delivered to WhatsApp remain until deleted in the respective service. Reminders use the app or the Google Calendar setup; WhatsApp reminder delivery is disabled in the current version.

Apple Calendar and other permissions

Apple Calendar is a separate, optional device integration. EventKit reads and changes require iOS permission and execution on the iPhone. If you enable calendar context for chat, event titles and timing are sent to the server and AI provider. Direct Timeline editing uses the Apple Calendar editor. Turning off Google Calendar does not turn off Apple Calendar, or vice versa.

For voice messages in the signed-in chat, microphone recordings are sent only when you choose to send them. Sent audio is stored privately in Supabase and sent to OpenAI for transcription; the transcript becomes part of the conversation. Unsent uploads are removed after 24 hours. Camera and photo access support optional completion evidence; optional AI photo review processes the submitted image. Notifications and alarms use the permissions and settings you enable.

AI, service providers and data sharing

Supabase stores the account and content described above and runs the assistant service. OpenAI or the configured Google Gemini provider processes messages and the relevant context needed for replies and requested actions; OpenAI also transcribes sent voice messages. AI requests are processed remotely, not solely on the iPhone. Provider retention and security practices are governed by their applicable service terms.

We disclose Google user data only to the service providers needed to deliver the features you request: Supabase hosts authentication, encrypted credentials, protected storage and server functions; the configured AI provider, OpenAI or Google Gemini, may process selected calendar names, event titles and times that are relevant to answer a request or avoid a scheduling conflict. Raw Google authorization tokens, attendee lists, locations and event descriptions are not disclosed to the AI provider. Google processes authorization and Calendar API operations under its own terms.

These providers process data on our behalf to operate Lim. We do not sell Google user data, disclose it to advertising platforms or data brokers, or use it for personalized advertising, credit decisions, or training generalized AI models. We may disclose limited data when required by law or necessary to investigate security abuse. No other third-party sharing occurs unless we first obtain the user’s explicit consent.

Purchases and subscriptions

Apple processes App Store purchases. RevenueCat receives an app account identifier and purchase/subscription information to verify access, restore purchases and keep subscription status up to date. Lim does not receive your payment-card details. Erasing Lim data does not cancel an App Store subscription or automatically erase purchase records retained by Apple or RevenueCat. Manage subscriptions in your Apple account settings.

Your controls and privacy requests

Device permissions can be reviewed in iOS Settings. Manage daily planning, quiet hours and notifications in Settings → Preferences, and calendar or WhatsApp access in Settings → Connections. Notes have their own controls for whether the assistant may use them. You can disconnect optional services without signing out of Lim.

Use the contact below to request access, correction, deletion or a copy of your data, withdraw consent where processing relies on it, or exercise other rights available under the law that applies to you. We may need to verify account ownership before acting. We use data to provide requested features, maintain security and reliability, and meet legal obligations. No separate advertising opt-out is needed for this version: we do not sell personal data, use it for targeted advertising, or track you across other companies’ apps and websites.

Retention, deletion and security

Signing out ends the app session and device activity but does not erase your cloud account. Settings → Privacy → Privacy & Data → Erase Lim data & sign out removes this product’s server data, connected-calendar credentials and account data on the device. It does not delete Google events, revoke the Google project grant, delete the shared Generative Synesthesia authentication identity or erase other products’ data. Limited security or operational records may be retained where required for service integrity or legal obligations.

Data is used to provide the service, maintain account security and honor your choices. The service uses encrypted transport, account isolation and restricted server credentials; Google refresh tokens are encrypted at rest. Providers may process data internationally. No system guarantees absolute security.

Contact and updates

The app is not directed to children under 13. For privacy requests or support, contact pull.notifications.app@gmail.com or use TestFlight → Send Beta Feedback during testing. Never send passwords, authorization codes or private calendar contents in a support report. This page is updated when the service changes.