Privacy Policy
Last updated: March 2026
Your privacy is foundational to Steward, not an afterthought. This policy explains what we collect, what we don't, and how your data is handled — in plain language.
What we don't collect
We want to lead with this, because it's the most important part:
- We don't collect personal data unless you explicitly provide it (like joining our waitlist).
- We don't sell, rent, or share your data with anyone.
- We don't run ads or use ad-tracking of any kind.
- We don't use tracking cookies.
- Your tasks, routines, energy logs, and personal information stay on your device.
What we do collect
Email address (waitlist)
If you join our waitlist, we collect your email address. It's stored by Buttondown, our email provider, and used only to send you updates about Steward. You can unsubscribe at any time.
Crash reports
In production builds, anonymised crash data is sent to Sentry to help us fix bugs. This includes error messages, stack traces, device type, and OS version. It does not include any personal data, task content, or screenshots. No IP addresses are stored.
Analytics (cookieless)
We use Plausible, a privacy-focused, cookieless analytics tool. It collects no personal data and uses no cookies.
Purchase and subscription data
If you make a purchase or subscribe, we use RevenueCat to manage subscriptions and validate purchases. RevenueCat receives:
- An anonymous app user ID (not your name, email, or Apple/Google account).
- Purchase receipts and transaction data from the App Store or Google Play.
- Device type, OS version, and app version.
- Country (inferred from the store, not GPS).
This data is used solely for subscription management — verifying your purchases, managing entitlements, and processing renewals. We do not use it for advertising or user profiling. RevenueCat does not receive any of your personal content (tasks, routines, notes, or energy data).
AI features and your data
Steward offers optional AI-powered features. Here's how they work:
Bring Your Own Key (BYOK / Direct)
If you use your own API key, your requests go directly from your device to the AI provider (such as OpenAI or Anthropic). These requests never touch Steward's servers. Your key is stored locally on your device.
Default relay
If you use Steward's built-in AI features without your own key, your prompts are forwarded through our relay to the AI provider and then immediately discarded. We do not store, log, or retain any AI conversation data.
Your control
You choose what context to share with AI features. We never train AI models on your data, and we never will.
Data storage
Steward stores your data in a local database on your device. There is no cloud sync. You can export or delete your data at any time from within the app.
Third-party services
We use a small number of third-party services. Each was chosen for its privacy practices:
- RevenueCat — subscription management (privacy policy)
- Buttondown — email delivery (privacy policy)
- Plausible — cookieless analytics (privacy policy)
- OpenAI — AI provider (optional) (privacy policy)
- Anthropic — AI provider (optional) (privacy policy)
Your rights
Regardless of where you live, we believe you have the right to:
- Access your data — know what we have (which is very little).
- Delete your data — see our data deletion page for instructions.
- Export your data — available from within the app.
- Opt out of data collection (crash reports, AI features).
These rights apply whether you're covered by GDPR, CCPA, or neither. We treat everyone the same.
Changes to this policy
If we make meaningful changes to this policy, we'll update the date at the top of this page and notify you through the app or by email. We won't quietly reduce your privacy protections.
Contact
Questions about this policy or your privacy? Email us at [email protected].