sKedIt AI

Privacy Policy

Privacy.

Effective 15 May 2026 · Last updated 3 June 2026

This policy explains what data sKedIt AI ("we", "us", "the app") collects, how we use it, and the choices you have. If anything is unclear, email alhasanmuhammadai@gmail.com and we'll explain in plain language.

Who runs sKedIt AI

sKedIt AI is operated by Alhasan Muhammad Hasan, an independent developer based in Egypt. There is no parent company — you are talking to one person and a small set of trusted service providers.

What's on your device

Your working copy lives in a local database on your phone — it's what makes the app fast and usable offline:

• Schedule blocks, tasks, and goals (titles, times, dates, durations, notes)
• App settings (work hours, wake/sleep time, working days, scheduling mode, etc.)
• Streak counts and completion history
• Usage counters for plan limits

What syncs to your account (cloud backup)

Because you sign in, your content is backed up to your private account on our backend (Supabase) so it restores when you reinstall the app or sign in on another device. This synced snapshot includes your tasks, schedule blocks, goals, savings goals, workouts, streaks, completion history, and app settings.

This data is stored as a per-user record protected by row-level security — only you, signed in, can read or write it. It is never shared with other users, sold, or used for advertising. You can erase it at any time with Profile → "Delete account & data".

What we send to AI providers

To make voice and AI scheduling work, some data is sent — through our backend — to AI processors and returned to your device:

• Voice recordings: when you tap the microphone, the audio is sent to OpenAI for transcription. The audio is discarded immediately after transcription — we never store recordings.
• Transcripts: the text of what you said is sent to Anthropic (Claude) to parse into structured tasks/blocks/goals, then returned to your device. We do not retain transcripts after the response is sent back.
• Scheduling context: when you use AI scheduling, rescheduling, or goal-scheduling, a short list of your current pending tasks and that day's existing blocks is sent so the AI can plan around them. Not stored after the response returns.

Processors we rely on

• Supabase — authentication, backend, and your encrypted content backup (EU region).
• OpenAI — audio-to-text transcription. Audio is processed and discarded.
• Anthropic (Claude) — natural-language understanding. Only text is sent here, never audio.
• RevenueCat — subscription management. Receives your account ID and purchase status, not payment details.
• Apple — payment processing and Sign in with Apple. Apple handles billing; we never see your card, name, or address.
• Google — used only if you choose "Sign in with Google".

These providers process data on our behalf and are contractually bound not to use it for any other purpose. They do not sell, share, or train models on your data when accessed via their paid APIs.

What we store on our servers

• Your email address — to sign you in.
• Your display name — if you provided one at sign-up or via Apple/Google.
• Your content backup — the synced snapshot described above (readable only by you).
• AI usage records — which AI action you used and when, to enforce plan limits and prevent abuse.
• Subscription status — whether you're on Free or Pro, and the Apple subscription identifier for your account.

That is the complete list of personal data stored on our servers.

What we DO NOT do

• We do not use analytics tools (no Google Analytics, Amplitude, Mixpanel, or Sentry).
• We do not track your behaviour across the app or anywhere else.
• We do not show advertisements.
• We do not sell, rent, or share your data for marketing, profiling, or any commercial purpose.
• We do not let any AI provider train on your data — all calls use paid APIs with no-training terms.
• We do not collect device identifiers, location, contacts, photos, or your system calendar.

How long we keep data

• On-device data: until you delete it, clear it via "Delete account & data", or uninstall.
• Account email, content backup, usage & subscription records: kept while your account exists. When you delete your account (Profile → "Delete account & data"), they are removed from our servers immediately via a server-side function. If our server is briefly unreachable at that moment, we fall back to a manual deletion completed within 14 days.
• Voice recordings: discarded within seconds of transcription.
• Transcripts & scheduling context sent to AI APIs: not stored by us. Providers may keep short-lived API logs for abuse prevention per their own policies; we have no access to those.

Your rights

• Access — everything we hold about you is visible inside the app.
• Correct — edit your name in Profile, or edit any task/block directly.
• Delete — Profile → "Delete account & data" wipes both your device and your server-side record.
• Export — email us and we'll send a JSON export within 30 days.
• Object / withdraw consent — uninstall the app and email us to delete your remote account.
• Complain — if you're in the EU/UK, you may contact your local data protection authority.

To exercise any of these, email alhasanmuhammadai@gmail.com. We respond within 14 days.

Children

sKedIt AI is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has provided us data, email us and we'll delete the account.

Security

• Authentication tokens are stored on-device in the iOS Keychain (via expo-secure-store).
• All backend traffic is over HTTPS/TLS.
• Supabase row-level security ensures each user can read and write only their own records.
• API keys for OpenAI and Anthropic live only on the server, never in the app.

No system is perfectly secure. If we discover a breach involving your data, we'll notify you by email within 72 hours of becoming aware of it.

International transfers

Our processors may handle data in the European Union or United States. By using sKedIt AI you agree to these transfers; we rely on each provider's Standard Contractual Clauses for cross-border flows.

Changes to this policy

We may update this policy as the app evolves. For material changes we'll update the "Last updated" date above and notify you in-app on next launch.

Governing law

This policy is governed by the laws of the Arab Republic of Egypt.