Skip to content
Summit Studio

Privacy Policy

Steppe Summit Studio · Effective September 20, 2026

We designed our apps around one principle: your data belongs to you, and it stays with you.

The short version

  • No accounts. Our apps never ask for a name, an email address, a phone number, or any kind of sign-up.
  • Your data stays on your device. Everything you create in our apps is stored locally on your iPhone or iPad. We cannot see it, and we cannot recover it.
  • No tracking, no ads, no data sales. No advertising, no third-party analytics SDKs, no trackers. We never sell or rent personal information.
  • AI features are transient. Only what you explicitly submit is sent for processing. It is not used to profile you, advertise to you, or train AI models.
  • Payments are Apple's. We never see your payment details.
  • Delete anytime. Deleting content, or deleting the app, removes your data. There is no server copy to request or erase.

1. Who we are

Steppe Summit Studio is an independent iOS software studio and the developer of the applications covered by this policy. For the purposes of data protection law — including the EU and UK General Data Protection Regulation — Steppe Summit Studio is the data controller for the limited processing described here.

Contact: anpr@outlook.com

2. What this policy covers

This policy applies to:

  • every iOS application published under the Steppe Summit Studio developer account on the Apple App Store, on iPhone and iPad;
  • this website, summitstudio.net; and
  • our support correspondence.

It does not cover third-party services that operate under their own policies, such as the Apple App Store — though we describe below how they interact with our apps.

3. Our local-first approach

Our apps are built local-first and account-free.

There is no registration, no login, and no user profile. We operate no cloud database of user content: there is no server holding your entries, records, photos or documents.

Because we never receive your content, we cannot read it, lose it, sell it, or be compelled to hand it over. The most private data is data that never leaves your device. That is our architecture, not merely our promise.

4. Information stored on your device

The content you create is saved in the app's private local database on your device. Depending on the app, that may include text entries, records and logs, notes, tasks, dates, numbers and calculations, categories and tags, photos and images you add, scanned or attached documents, and your app settings.

We have no access to any of it. It is protected by your device's own security — device encryption, your passcode, Face ID or Touch ID — and by iOS app sandboxing, which isolates each app's data from every other app.

Device backups. Your app data is included in your normal device backup (iCloud Backup, or an encrypted computer backup). Those backups are managed by you and Apple under Apple's terms. We have no access to them.

Device permissions

Some apps ask for iOS permissions to enable specific features. Permissions are always optional, always requested through the standard iOS prompt, and can be changed at any time in Settings → Privacy & Security:

  • Camera — to capture photos or documents inside the app. Images are stored locally.
  • Photo Library — to let you attach existing photos. Selected images are stored locally.
  • Notifications — to deliver reminders you set. Our apps use local notifications, scheduled entirely on your device. We operate no push-notification servers.
  • Face ID / Touch ID — an optional biometric lock in some apps. Authentication is performed entirely by iOS; your biometric data never leaves your device's Secure Enclave and is never available to us.

Data gathered through these permissions stays on your device, with one exception that you control: content you explicitly submit to an AI feature (section 5).

5. AI features

Some apps include optional AI-powered features — analysing text you enter, recognising items in a photo, generating summaries or suggestions. These require sending data off your device. Precisely what happens:

What is sent. Only the content you explicitly submit to the feature — typically text, and in some apps an image. Nothing else from your device, and nothing else from elsewhere in the app.

Where it goes. Your request travels over an encrypted (TLS/HTTPS) connection to our server endpoint, which runs on Cloudflare's infrastructure. Our server relays it to our AI model provider, Anthropic, whose model generates the response and returns it to your app.

How long it is kept. The request is processed transiently to produce your response. Our server acts as a relay and keeps no database of AI request content. Our AI provider processes requests under its commercial API terms, under which submitted content is not used to train AI models; the provider may retain data briefly for abuse prevention and safety before deleting it, as described in its own policies.

What it is not used for. AI request content is not used to identify you, build a profile of you, advertise to you, or train models. Because our apps have no accounts, requests are not linked to your name, email, or Apple ID.

Technical data. As with any internet service, delivering a response involves processing basic technical information — such as an IP address and request metadata — by our infrastructure provider, in order to route the response, prevent abuse, and enforce fair-use limits. We do not use it to identify you.

Your choice. AI features are always user-initiated. If you would rather nothing ever left your device, simply do not use them; every other part of our apps works fully offline. We also suggest not submitting information to an AI feature that you would not want processed by a server — other people's sensitive details, for instance — since the feature necessarily involves transmission.

Relevant third-party policies: Anthropic and Cloudflare.

6. Purchases and payments

In-app purchases and subscriptions are processed entirely by Apple through your Apple ID. We never receive, see, or store your card details, billing address, or Apple ID credentials.

To unlock features you have paid for, our apps use Apple's StoreKit on your device to verify your entitlement. The transaction information involved — in essence, whether a valid purchase exists and of what type — includes neither your identity nor your payment details. Apple's handling of your payment information is governed by Apple's privacy policy.

Refunds are handled exclusively by Apple, at reportaproblem.apple.com. We receive no payment information as part of that process.

7. Analytics, advertising and tracking

In our apps:

  • No third-party analytics SDKs.
  • No advertising and no ad networks.
  • No tracking across other companies' apps or websites, and no use of the iOS advertising identifier (IDFA). Because there is no tracking, our apps do not need to show the App Tracking Transparency prompt.
  • We do not sell, rent, or share personal information with data brokers or anyone else.

Apple may give us aggregated, anonymised statistics — total downloads, crash summaries — through App Store Connect, and only from people who have opted in to sharing analytics with developers in their iOS settings. These contain no personal information and cannot identify anyone.

On this website:

  • We use Vercel Web Analytics, which is cookieless. It sets no identifier on your device and does not follow you to other websites. What we receive is aggregate counts: page views, referrers, countries, device types. Not a record of you.
  • The site sets no advertising or tracking cookies. The only cookie it can set at all is described in section 8.
  • Download buttons carry a campaign token that tells us, in Apple's aggregate reporting, which language and which app page led to an install. It does not identify you.

8. Cookies and local storage on this website

This website sets one cookie, and only if you ask it to:

  • Language preference. When you choose a language from the switcher, we store that choice so the site stays in your language as you move between pages and when you return. It holds nothing but a language code such as ja. It is not used for analytics, advertising, or identification, and it is never shared. Clearing your browser's cookies removes it, after which the site returns to English.

That is the complete list. There is nothing to log in to, nothing to sign up for, and no contact form, so there is no form data to store.

9. Hosting

This website is hosted by Vercel. Like any web host, Vercel processes the technical details needed to serve a page — your IP address, the page requested, your browser's user agent — in order to deliver the site and protect it from abuse. These are kept only briefly. See Vercel's privacy policy.

10. Support communications

If you email us, we receive your email address and whatever you choose to include. We use it solely to answer you and to improve our apps. We keep correspondence only as long as needed to resolve your request and to maintain a basic record of it, and we never add anyone to a marketing list — we do not have marketing lists.

11. Retention and deletion

  • Your content: stored on your device for as long as you keep it. Delete individual items inside the app, or delete the app, which permanently removes its entire local database from that device. Copies may persist in your own device backups until those are rotated; backups are under your control.
  • AI requests: processed transiently as described in section 5, and not stored by us.
  • Purchase records: maintained by Apple under Apple's policies.
  • Support emails: retained as described in section 10. You may ask us to delete past correspondence at any time.

Because we hold no user accounts and no user content, there is no "delete my account" process. Deletion is entirely in your hands, instantly, on your device.

12. Security

  • All communication between our apps and our servers is encrypted in transit (TLS/HTTPS).
  • Your on-device data is protected by the iOS security architecture: hardware-backed encryption, your passcode or biometrics, and per-app sandboxing.
  • Our server infrastructure runs on established platforms with modern security practices and, by design, stores no database of user content — which eliminates the most serious category of breach risk.

No method of transmission or storage is completely secure, but our architecture minimises risk by minimising data. What we never collect cannot be breached.

13. Children's privacy

Our apps are productivity and organisation tools intended for general audiences. They are not directed at children under 13, or the equivalent minimum age in your jurisdiction, and we do not knowingly collect personal information from children. Since our apps collect no accounts or identities from anyone, no such data exists on our side. If you believe a child has nonetheless sent us personal information — by email, for instance — contact us and we will delete it.

14. Your rights in the EEA, UK and Switzerland (GDPR)

The GDPR and UK GDPR give you rights over personal data a controller holds about you. Our processing is minimal, and our legal bases are:

  • Performance of a contract — providing the app functionality you request, including AI requests you initiate.
  • Legitimate interests — securing our services, preventing abuse, enforcing fair-use limits, and answering support requests.
  • Consent — where you grant optional iOS permissions, which you may withdraw at any time in iOS Settings.

You have the right to request access, rectification, erasure, restriction of processing and data portability, to object to processing, and not to be subject to automated decision-making with legal effects — of which we do none.

In practice almost everything our apps handle is on your own device, under your direct control: you can view, correct, export and erase it yourself within the apps. For the little we may hold — essentially support correspondence — email anpr@outlook.com and we will respond within the timelines the law requires.

You also have the right to lodge a complaint with your local data protection supervisory authority.

15. Your rights in California (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act as amended gives you specific rights. Our disclosures:

Categories collected. Internet activity information limited to technical request data (such as an IP address) processed transiently when you use AI features or connect to our services; user-submitted content processed transiently for AI features; and contact information you voluntarily provide by emailing us. We collect no identifiers such as name, account, or precise geolocation, and no sensitive personal information beyond anything you choose to include in an AI submission or an email.

We do not sell personal information and do not share it for cross-context behavioural advertising, and never have. No "Do Not Sell or Share" opt-out is needed, because there is nothing to opt out of.

Your rights are to know what personal information we hold about you, to delete it, to correct it, and not to be discriminated against for exercising these rights. Because we hold essentially nothing beyond any email you have sent us, requests are simple: contact anpr@outlook.com and we will verify and fulfil the request as required by law. You may use an authorised agent.

16. International transfers

We publish apps worldwide. When you use an AI feature, your request may be processed on servers in other countries, including the United States, operated by our infrastructure and AI providers. Those providers maintain appropriate safeguards for international transfers, including recognised mechanisms such as standard contractual clauses, as described in their own documentation. All other app data stays on your device, in whichever country you are in.

17. App-specific notes

All Steppe Summit Studio apps follow the practices in this policy. Where an individual app has an additional, feature-specific behaviour, it is either listed here or disclosed inside the app at the point of use:

  • Apps that capture photos may optionally embed standard photo metadata — date, time, and, only where you have granted location permission, GPS coordinates — in the image, so that it serves as an accurate record. This metadata is stored locally with your photos and is shared only if and when you yourself export or share those files.

18. Third-party services

Our apps and this website interact with a small, fixed set of third parties, each governed by its own policy:

  • Apple Inc. — App Store distribution, payments, subscriptions, device backups and iOS system services. Policy
  • Cloudflare, Inc. — server infrastructure that relays AI requests. Policy
  • Anthropic — the AI model provider that processes AI feature requests. Policy
  • Vercel Inc. — hosting and cookieless analytics for this website. Policy

We embed no other third-party SDKs, trackers, or services.

19. Links to other websites

Our apps and this site link to external websites — Apple support pages, for example. We are not responsible for the content or the privacy practices of external sites, and we encourage you to review their policies.

20. Changes to this policy

We may update this policy — if we add features, or if legal requirements change. When we do, we update the effective date at the top of this page and, for material changes, give notice in the relevant apps or on this page. Continued use after an update means the revised policy applies.

21. Contact us

Questions, concerns or requests about privacy — or anything else — are always welcome.

Steppe Summit Studio anpr@outlook.com

We read every message and typically reply within one to two working days.

In short: we built our apps so that we do not need your data — and so that you do not need to trust us with it.