Privacy Policy
Tackpad for iPhone, iPad and Mac · Effective with version 1.4
Tackpad collects nothing. It has no accounts of its own, no analytics, no advertising and no third-party SDKs. Everything you type is saved on your device, and put in Airplane Mode it works exactly as it does otherwise, from a cold launch.
Three things can leave the device, and all three are yours to switch off. Your boards are kept in your own iCloud, so an iPhone, an iPad and a Mac signed in to the same Apple Account show the same boards — that is between you and Apple, and we cannot read it. Connect your AI assistant (called Connect to your computer before version 1.4) sends your boards to a server we run so that a coding assistant on your computer can read and update them. And Share with client puts one board on that server behind a private link, so the person the board is for can see it and answer your questions. Neither does anything until you ask, neither stores who you are, and each is undone in the app. The rest of this page explains exactly what each involves.
On your device
The projects, cards, stages, tasks and notes you create are written to Tackpad's private storage area on your device, where only Tackpad can read them, and are used for one thing: showing you your boards. Nothing about you is collected: Apple's own definition of collection is transmitting data off the device to where the developer can access it, and Tackpad transmits nothing to us unless you connect it to your computer.
Your own iCloud
When the device is signed in to iCloud, Tackpad keeps a copy of each board in the private part of your iCloud account (Apple's CloudKit), so every device signed in to that account has the same boards. This is on by default and there is a switch under Projects → Keep in iCloud to turn it off; if the device has no iCloud account, nothing happens and the app works as it always has.
The copy lives under your Apple Account, on Apple's servers, and is covered by Apple's privacy policy and your iCloud terms. We cannot read it, and it does not count towards anything we collect — the developer of an app has no access to the private iCloud database of the people who use it. Deleting a board in the app deletes its iCloud copy; switching Keep in iCloud off stops the copying but leaves what is already there, which you can remove under Settings → your name → iCloud → Manage Storage → Tackpad. Signing out of iCloud on a device leaves the boards on that device untouched.
To learn that another device changed something, Tackpad uses Apple's silent push notifications. They carry no content, are never shown to you, and the app never asks for permission to send you notifications, because it sends none.
If you connect an AI assistant, or share a board
These are the only cases in which anything reaches us.
Either one creates a private space on our server for your device. With an assistant connected, it keeps a copy of every board there; with only boards shared with a client, it keeps a copy of those boards and nothing else of yours. Each copy is updated whenever you change something and checked whenever you return to the app. The space is identified by a random code generated for your device. We do not ask for, receive or store your name, email address, Apple ID, phone number, location, contacts, or any other identity. We cannot tell who a space belongs to.
What is stored: the contents of those boards (project names, cards, stages, tasks, notes and any answers written into them), the time each board last changed, the name of each assistant you have paired (for example "Claude"), so you can see and revoke them from the app, and for a shared board the details in the next section.
What it is used for: keeping the copy on the server in step with your phone, and letting the assistants you have paired read and change your boards. Nothing else — no analytics, no profiling, no reading of your boards by us. We look at a board only if you send it to us and ask us to.
Board contents can include whatever you type into them. Please don't put passwords, payment details or other secrets on a board.
Pairing an assistant
To let a coding assistant use your boards, the app shows an eight-character code that lasts ten minutes and works once. You enter it into the assistant, which then holds its own key to your space. From that point the assistant can read your boards and make changes, which appear on your phone. Each paired assistant is listed in the app and can be revoked with a swipe; a revoked assistant loses access immediately.
The assistant itself — Claude, Cursor, or whichever you paired — is a separate service with its own privacy policy. When it reads a board, that board's contents go to that service. That is the point of pairing, and it is your choice which assistants to pair.
Sharing a board with a client
Share with client makes a private link to one board. Whoever opens it — in any browser, with no app and no account — sees that board, read-only, and a box under each question you have marked for them, plus one for anything else they want to say. What they type is kept on the server until your device collects it and writes it into the board; from then on it is part of your board like anything else.
For a shared board the server also keeps: the link itself as a one-way hash (so the database cannot be used to open it), when the link was made, when the page was last opened, the name you chose to show at the top of the page if you have Tackpad Pro, and your client's answers until your device has them. The page sets no cookies, loads nothing from anywhere else, runs no analytics, and asks search engines not to index it. We do not ask your client who they are.
Anyone who has the link can see the board and answer its questions, so send it only to the person it is for. Make a new link in the app switches the old one off; Stop sharing switches it off and, unless an assistant is connected, deletes the board from the server.
Where it is kept, and who can reach it
The server runs on Railway, a hosting provider, in a data centre in the United States (US West). If you are in the EU or UK, that means your board contents are transferred to the US for as long as you stay connected; the safeguards are the ones described here — no identity, encryption in transit, hashed keys, and deletion on Disconnect. Railway is our only sub-processor; it provides the computer the server runs on and does not access the data on it. All traffic between the app, the server and paired assistants is encrypted in transit. The keys that grant access to a space are stored only as one-way hashes, so a copy of the database would not let anyone in.
Nothing is sold, and nothing is shared with anyone except the assistants you pair, in the way described above. There is no advertising, no analytics and no crash reporting anywhere in the app or on the server. Your iCloud copy is a separate matter between you and Apple, as described above, and never passes through our server.
Retention and deletion
- On your device: your boards are kept for exactly as long as you keep them. Swipe a project away to delete it, or delete the app to remove everything on that device.
- In your iCloud: deleting a project in the app deletes its copy there, on every device. What remains after you switch Keep in iCloud off can be removed under Settings → your name → iCloud → Manage Storage → Tackpad.
- On the server: your space exists only while an assistant is connected or a board is shared. Tap Disconnect and every paired assistant loses access at once; with no board shared the whole space goes, and with boards shared, every board that is not shared is deleted and the shared ones stay until you stop sharing them. Stopping the last share with no assistant connected deletes the space. Deleting a project deletes its server copy, its link and any answers still waiting. Your boards always stay on your device.
- A space that has not been touched for twelve months is deleted automatically.
Because a space is not linked to a person, we cannot find or delete it by name; Disconnect is the way to delete it, and it is immediate and complete. If you have lost the phone that was connected, the space simply expires after twelve months, and nothing in it can be tied back to you.
Withdrawing consent
Connecting or sharing is the consent, and Disconnect or Stop sharing withdraws it — there is no form to fill in. If you do neither, there is no consent in the first place, because nothing is collected. Keep in iCloud is between you and Apple: the switch under Projects turns it off at any time.
Tackpad Pro
Tackpad Pro is a subscription sold through Apple's App Store. Apple takes the payment under your Apple Account; we never receive your name, payment details or purchase history. The app checks whether you have Pro on your device, using Apple's own signed record of the purchase, and sends nothing about it to our server. Manage or cancel it under Settings → your name → Subscriptions.
Files you choose to export
Tackpad can export a board as a .json file, share the list of questions from
the Notes screen as plain text, and keep a board in a file you choose. Those leave your device
only when you deliberately send or place them, through the standard iOS share sheet or Files,
to a destination you pick. Tackpad has no part in what happens next.
Children
Tackpad is rated 4+ and is safe for any age, but it is a tool for organising work rather than something aimed at children. It collects no personal information from anyone, of any age, which includes children under 13.
Your rights
Data protection laws such as the GDPR, the UK GDPR and the CCPA give you rights of access, correction, deletion and portability over personal data a company holds about you. Your boards are already in your hands: they are on your device and in your own iCloud, and the Export button gives you a copy in an open, documented file format whenever you want one. If you are connected, everything the server holds about you is deleted by Disconnect and Stop sharing. For anything else, write to us at the address below; because we cannot identify a space by name, we may ask you to disconnect and reconnect rather than act on a space we cannot find.
Changes to this policy
If Tackpad ever changes in a way that affects this policy, the policy will be updated here before that version ships, and the effective date at the top will change.
Contact
Questions about this policy, or about the app: serkandalwork@gmail.com