Your to-dos are yours. We never see them.
tusk does not collect any personal data.
There is no account, no advertising, no analytics and no tracking. tusk has no servers of its own: everything you add stays on your devices and, if you turn on iCloud Sync, in your own private iCloud.
Who we are
tusk is made by Red Reef Studio, the trading name of Hellcife Ltd, a company registered in England and Wales (company number 16952540), 128 City Road, London EC1V 2NX, United Kingdom. For anything about privacy, write to hello@redreef.studio.
What tusk stores, and where
tusk keeps what you create (to-dos, notes, checklists, tags, dates, reminders, areas, projects and any file you add to a project, such as a ticket) so it can show your lists. It's stored here, and nowhere else:
| Where | What | Who can see it |
|---|---|---|
| On your device | All your to-dos, in tusk's private storage, shared only with tusk's own widgets | You |
| Your iCloud (only if you turn on iCloud Sync) | The same to-dos, in your private iCloud database, so they appear on your other devices | You. It's stored by Apple under your Apple Account, and we can't access it |
We never receive a copy of your to-dos.
Typing in plain words
When you type a to-do like "Call the bank tomorrow at 3pm", tusk reads the date, time and tags on your device. Nothing you type is sent anywhere.
Permissions tusk asks for
- Notifications: reminders are scheduled on your device. They don't pass through any server of ours.
- Camera (only when you scan): on iPhone and iPad, the document scanner uses the camera to turn a ticket or document into a PDF kept with a project. tusk doesn't take or keep any other pictures.
- Photos: when you add a photo to a project, the system photo picker gives tusk only the photo you choose. tusk can't see the rest of your library.
- Files: when you add a file, the system file picker gives tusk only the files you choose.
Working with till
If you also use till, the two apps pass small notes to each other on your device, through a folder only our apps can open: which till event a project is for, and a checklist when you move one to tusk. Neither app reads the other's data, and nothing leaves your device.
Widgets and Live Activities
Widgets and Live Activities show your to-dos on your own devices: the Home Screen, the Lock Screen and the Dynamic Island.
Purchases
The unlock is an in-app purchase handled entirely by Apple. We don't receive your name, email or payment details. Apple gives us sales reports (for example, how many unlocks were sold in each country) that don't identify you.
Crash reports from Apple
If you have chosen to share analytics with app developers (in Settings › Privacy & Security › Analytics & Improvements), Apple may send us crash reports and anonymous usage statistics. These don't identify you, and we use them only to fix bugs. tusk itself contains no analytics code.
When you contact us
If you email us, we receive your email address and whatever you write. We use it only to reply to you, and we delete it when it's no longer needed or when you ask us to.
Children
tusk collects no data from anyone, including children.
Your choices and rights
- Delete a to-do in tusk, and it's gone from your device and, with iCloud Sync on, from your iCloud.
- Delete the app to remove everything stored on that device.
- To remove tusk's iCloud data, go to Settings › your name › iCloud › Manage Account Storage.
Under UK and EU data protection law you have rights over personal data held about you. As tusk collects none, there is nothing for us to export or delete. For an email you sent us, just ask. You can also complain to the UK Information Commissioner's Office at ico.org.uk.
Changes
If this policy changes, we'll update this page and the date at the top. If tusk ever starts collecting data, we'll say so here and in the App Store before it happens.