Privacy Policy
The short version
- There is no account. We never ask for your name, email or phone number.
- Your tasks, steps, routines and settings are stored on your phone.
- When you use AI help, the text of your tasks is sent through our server to our AI provider to make steps or a new plan. Our server does not store or log that text.
- Your calendar is read on your phone only. Events are never uploaded.
- Payments are handled by Apple or Google. We use RevenueCat to know whether you have Pro.
- No ads, no advertising or analytics SDKs, no tracking, and we never sell your data.
Who we are
Nextling is provided by Sora Intelligence Vietnam Company Limited, [[POSTAL ADDRESS]], Vietnam ("we", "us"). We are responsible for the personal data described here. You can reach us at hello@soraix.vn.
What stays on your phone
Nextling is built to work on your phone first. The following is stored only on your device (and in your own backups, see Backups):
- Your tasks, notes, steps, routines and the plan for your day.
- Your settings, such as day hours, reminders and accessibility choices.
- A count of how many AI uses you made today, and the date you started the app (used for the 14-day Pro trial).
- The current step shown in widgets, the Live Activity (iPhone) or the ongoing notification (Android). This is shared only between Nextling and its own widgets on your phone.
Calendar. If you allow it, Nextling reads events from the calendars you choose, only to know when you are busy. It never changes your calendar and never sends events anywhere. When you ask for a new plan, only a single number (how many free minutes are left today) is sent, not your events.
Reminders. Notifications are scheduled locally on your phone. We do not use push notifications.
What leaves your phone, and why
1. AI help (splitting tasks, making steps, reshuffling your day)
When you add tasks, ask for steps, or ask Nextling to reshuffle the rest of your day, the app sends a request over an encrypted connection (HTTPS) to our server, a small program we run on Cloudflare Workers. Our server forwards the request to Anthropic's Claude API, which generates the suggestion, and sends the answer back to your phone.
A request can contain:
- the text you typed or dictated when adding tasks;
- a task's title, note and estimated minutes, and the titles and steps of up to 3 tasks you broke down recently (so suggestions match your style);
- for a reshuffle: the titles, lengths and due times of today's remaining tasks, your day-end time and the number of free minutes left;
- your local date and time;
- a random app ID and a device check token (see below).
Please avoid putting sensitive information (for example health details or passwords) into task text you send for AI help.
What our server keeps. Our server does not store or log the content of your requests or the AI's answers. Its logs contain only technical details such as which feature was used, the response status, how long it took and error codes.
Anthropic. Anthropic processes the request as our service provider to generate the response. Under Anthropic's commercial terms, it does not use this data to train its models; it may keep it for a limited period for safety and abuse monitoring as described in its policies. [[VERIFY against Anthropic's current commercial terms and privacy policy before publishing.]]
If you are offline, have used your free AI splits for the day, or AI is unavailable, nothing is sent: your text is saved as a task and you can add steps by hand.
2. Random app ID, limits and abuse prevention
The first time you open Nextling, it creates a random ID (not linked to your name, email, phone number or advertising ID). The app sends it with AI requests and uses it with RevenueCat, so we can apply fair-use limits and know whether you have Pro. On our server we keep, under this ID:
- the date we first saw it (to count the 14-day trial);
- short-lived usage counters (deleted automatically within 2 days);
- a cached "Pro or not" answer from RevenueCat (kept up to 7 days).
Our server also sees your IP address, as any internet service does. It is used for rate limiting and, for device checks, kept in a daily counter that is deleted automatically within 2 days. Cloudflare, our hosting provider, processes this connection data to run and protect the service.
If you reinstall the app, a new random ID is created.
3. Device check
To make sure AI requests come from a genuine copy of Nextling, the app uses Apple App Attest on iPhone and Google Play Integrity on Android. Apple or Google confirm to our server that the request comes from the real app on a real device; our server then issues a token tied to your random app ID. Google may process device information to give this answer, under Google's own terms.
4. Purchases
Subscriptions are sold and billed by Apple (App Store) or Google (Google Play). We never see your payment card or billing details. We use RevenueCat to manage subscriptions: it receives your random app ID and your purchase and subscription information (such as product, purchase and renewal dates and store transaction identifiers), along with technical details its software needs, such as platform, app version and store country. Our server asks RevenueCat whether your app ID has an active Pro subscription.
5. Voice input
If you use the microphone button, speech is turned into text by your phone's speech recognition service (Apple on iPhone, Google or your device maker on Android). Depending on your device and settings, that service may process audio on your device or on its own servers, under its own privacy policy. Nextling does not record, store or send audio. The resulting text is handled like text you typed.
6. Backups
- iPhone: Nextling saves a daily backup file of your tasks and settings in Nextling's folder in your own iCloud Drive. The file is encrypted with AES-256-GCM using a key stored in your iCloud Keychain. If iCloud Drive is off, the backup stays on your phone and is included in your normal device backup.
- Android: the backup file is included in Android's own backup to your Google account (if you have backup turned on). Android encrypts this backup end to end when your phone has a screen lock; the file is not separately encrypted by Nextling.
We have no access to these backups. They are stored by Apple or Google in your account.
7. Exports and support
When you export CSV or JSON, the file goes wherever you choose in the share sheet. If you email us for support, we receive what you send, including your email address, and use it only to answer you.
8. Website waitlist
If you join the waitlist on our website, we store your email address and, if the link you followed had one, a short campaign tag (for example tiktok). We use it only to email you when Nextling launches. To stop abuse, the website counts sign-up attempts per IP address for up to 2 days; the IP address is not stored with your email. Ask us at the contact below to delete your email at any time; we delete the whole waitlist within 30 days after Nextling launches.
What we don't do
- No account, no sign-in, no profile.
- No advertising, no ad networks, no analytics or crash-reporting SDKs.
- No tracking across other companies' apps or websites, and no advertising ID.
- No location, contacts or photos.
- We do not sell or share your personal data for advertising.
Service providers
| Provider | What for | Data |
|---|---|---|
| Cloudflare | Runs our AI server and website, stores the waitlist | Requests in transit, IP address, random app ID, short-lived counters |
| Anthropic | Generates AI suggestions | Task text and times in each AI request |
| RevenueCat | Subscription status | Random app ID, purchase and subscription information |
| Apple / Google | App stores, payments, device checks, speech recognition, iCloud and Android backup | Under their own terms and your account settings |
How long we keep data
| Data | Where | Kept |
|---|---|---|
| Tasks, steps, routines, settings | Your phone and your backups | Until you delete them or the app |
| Content of AI requests | Our server | Not stored; only passed through |
| Usage counters, IP counters | Our server | Deleted automatically within 2 days |
| Cached Pro status | Our server | Up to 7 days |
| First-seen date of your random app ID | Our server | [[RETENTION — currently kept with no automatic expiry]] |
| Waitlist email | Cloudflare (our website) | Until 30 days after launch, or sooner if you ask |
| Subscription records | RevenueCat, Apple, Google | As required for billing and their legal obligations |
Legal bases (EEA and UK)
We process the data above to provide the features you ask for (performance of a contract), to keep the service secure and prevent abuse (our legitimate interests), and to meet legal obligations, for example tax and accounting rules for purchases.
International transfers
Our server runs on Cloudflare Workers placed in the United States (Cloudflare may route requests through its global network), and Anthropic and RevenueCat are based in the United States. Where data protection law requires it, transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses. [[CONFIRM the safeguards in each provider's data processing terms.]]
Your choices and rights
- Delete everything: Settings > Data > Delete everything removes your tasks, your backup file and the backup key from your phone. Uninstalling the app also removes the data on the phone.
- Permissions: calendar, microphone, speech recognition and notifications are optional and can be turned off in your phone's settings at any time.
- Subscriptions: manage or cancel in your App Store or Google Play account.
- Your rights: depending on where you live, you may have the right to access, correct, delete or object to the processing of your personal data, and to complain to your local data protection authority. Write to hello@soraix.vn. Because there is no account, we may not be able to match a request to the limited server-side data we hold; we will tell you what we can do.
Children
Nextling is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect their personal data.
Security
Data sent from the app travels over HTTPS. AI requests are checked so they come from the genuine app. No API keys are stored in the app. No system is perfectly secure, but we keep what we hold to a minimum.
Not medical advice
Nextling is a planner. It is not a medical device and does not diagnose, treat or replace care for ADHD or any other condition.
Changes to this policy
If we change how Nextling handles data, we will update this page and the effective date above, and point it out in the app's release notes when the change matters.
Contact
Sora Intelligence Vietnam Company Limited
[[POSTAL ADDRESS]], Vietnam
hello@soraix.vn