1. Who we are
Pilot Light is operated by Savvy Advice Ltd, based in the United Kingdom. This policy explains what information we collect when you use the Pilot Light iPhone app and this website, how we use it, and the choices you have. Savvy Advice Ltd is the data controller for this information.
2. Information we collect
- An account ID — the first time you open Pilot Light, it creates an account for you with a random ID. You don't need to give a name or email address to use the app.
- Sign-in details, if you choose to add them — to keep your tasks safe across phones, you can sign in with Apple, Google, or your email address. We then store your email address and the name Apple or Google shares with us (and, from Google, a link to your profile photo). Apple may give us a private relay address instead of your real one. If you use email, we send you a one-time code to confirm the address.
- What you write and do in the app — your tasks and your first-step lines, when you start a task and for how long, how each task ended, your daily counts, streak and rest days, and tomorrow's first line.
- Your answers and settings — your answers to the questions when you first set up the app (for example, how many things you want to do in a day and how a day tends to go), your start time, focus length, day-close time, where you usually work, and your phone's time zone.
- Subscription details — whether you're on a free trial or subscribed, which plan, and the relevant dates and App Store events. Payment is handled by Apple; we never see your card details.
- A notification token — if you allow notifications, a token that lets us address notifications to your phone.
- Usage data — which screens you open and which buttons you use (for example, starting a task or closing the day), your answers to the setup questions, and counts such as the length of a line. Usage data is linked to your random account ID, not your name or email, and never includes the text of your tasks or lines.
- Crash reports — when something goes wrong, a report with technical details such as your device model, iOS version and app version. We remove task text from these reports.
The reminders that show your line at your start time are scheduled on your phone, so their text isn't sent to us through the notification system.
3. How we use your information
- To run the app: save your tasks and settings, and keep them in sync if you sign in on another phone
- To show your line at the time you chose, and to remind you before a free trial ends
- To check whether you have an active subscription
- To suggest smaller first steps, only if you've agreed (see section 4)
- To find and fix crashes and bugs
- To understand which parts of the app help people start, so we can improve it
- To reply when you contact us
We do not sell your personal information, we don't show ads, and we don't use your data to track you across other companies' apps or websites.
4. Suggestions from OpenAI
Some features, like "Too big?" and the start coach, can suggest smaller first steps. These suggestions come from OpenAI. The first time a suggestion would be needed, the app asks whether you want them. Nothing is sent to OpenAI unless you say yes, and the app works without suggestions if you say no.
When you use a suggestion feature, we send OpenAI the task's title and your line for that task, and nothing else: no name, email address or account ID. We ask OpenAI not to store the response, and OpenAI does not use data sent through its API to train its models. OpenAI may keep requests for up to 30 days to monitor for abuse, under its own policies. We keep only a count of how many suggestions you've used each day, not what was sent or suggested.
If you change your mind after saying yes, email us and we'll turn suggestions off for your account.
5. Third-party services
Pilot Light relies on these services. Each one processes data for us and under its own privacy policy:
- Supabase — our database and sign-in (servers in the United States)
- Google Cloud — runs our server and stores our encrypted database backups (United States)
- OpenAI — step suggestions, only if you agree (United States)
- RevenueCat — manages subscriptions and tells us whether yours is active, using your random account ID
- Apple — App Store purchases and Sign in with Apple
- Google — Sign in with Google, if you use it
- Resend — sends the one-time sign-in codes by email
- PostHog — usage analytics (servers in the European Union)
- Sentry — crash reports
- Expo — delivers app updates and issues the notification token
Some of these providers process data in the United States. Where your data leaves the UK or the European Economic Area, we rely on the legal safeguards required for that transfer, such as standard contractual clauses.
6. Data retention and deletion
We keep your data until you delete your account. Deleting the app from your phone doesn't delete your account.
You can delete your account at any time in the app: Settings → Account → Delete my data. This deletes your account, your tasks and your record from our database straight away, and asks RevenueCat to delete its record of you. You can also email us; see our data deletion page. Email requests are completed within 30 days.
After deletion, a few things remain for a limited time or in a form that doesn't identify you by name:
- Copies in our encrypted database backups, which are deleted automatically within 100 days
- Records of the App Store subscription events we received (plan, dates and your random account ID, never your tasks), which we keep for our accounts
- Usage data and crash reports, which are linked only to your random account ID and are kept for the retention period of PostHog and Sentry
Your subscription is with Apple, so deleting your account doesn't cancel it. Cancel it in your App Store settings.
7. Security
Your data is encrypted in transit using TLS and encrypted at rest by our hosting providers. Our database only lets each account read and change its own data. No method of transmission or storage is completely secure, but we work to protect your information using industry-standard practices.
8. Children's privacy
Pilot Light is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, please contact us and we will delete it.
9. Your rights
Depending on where you live, you may have the right to access, correct, export, or delete the personal information we hold about you, to object to how we use it, and to withdraw your consent at any time. To exercise any of these rights, email us at support@pilotlightapp.com.
If you're in the UK or the European Economic Area, our lawful bases are: our contract with you, to run the app and your subscription; your consent, for suggestions from OpenAI; and our legitimate interests, for usage data, crash reports and keeping the service secure. You have the right to complain to a data protection authority. In the UK, that's the Information Commissioner's Office (ico.org.uk).
10. Changes to this policy
We may update this policy from time to time. When we do, we'll change the date at the top of this page.
11. Contact
If you have any questions about this policy or how we handle your data, email us at support@pilotlightapp.com.