Privacy Policy

Who we are

Sam’s List is provided by Why&Key LLC, a Montana limited liability company in the United States. Local use does not require an account. Optional cloud features require Sign in with Apple.

Information you choose to save

Sam’s List stores the content you create or import, including todo names, notes, folders, dates, reminder choices, spending entries, amounts, categories, and notes. If you use Share Sheet capture, the text or link you choose to save is used to create a todo. We do not use this information for advertising, profiling, or analytics.

Local storage

By default, this information is stored on your device so the app, widgets, and Share Extension can work together. Records are sent to Sam’s List Cloud only after you explicitly enable their domain.

Optional Sam’s List Cloud

Cloud is off by default and requires Sign in with Apple and active Premium access. Apple provides an account identifier and may provide your name and email, including a private relay address. We store account and session information for authentication. You choose Tasks, Spending, or both. Tasks include folders, notes, status, dates, and reminders; Spending includes expenses, amounts, notes, categories, dates, and currency. We store selected information, revisions, synchronization timestamps, and connection permissions to provide the service. Internal Apple import identifiers remain on your device.

Cloud uses an account-specific local store, separate from the original local/iCloud store. Handover leaves the original store intact and stops iCloud sync on the active store. Other devices must upgrade and switch to receive new changes. Signing out isolates account data and offers a local copy. A copy is not automatically uploaded into another account.

For independent product review, a separately provisioned demo account may use Neon Auth email/password sign-in instead of Apple. This is restricted to an explicitly authorized identity, has expiring review access, and contains synthetic data only. Its password is transmitted to Neon Auth for verification and is not stored by Sam’s List. We keep the review identity binding, session information and access/attempt metadata needed to secure this account. Customer login and Apple purchase verification are unchanged.

AI connections

Each optional ChatGPT or Claude connection has independent task-read, task-write, expense-read, and expense-write permissions. Reading is selected first; writing requires explicit permission. Authorized requests can send record contents, including notes, to that provider. Its privacy policy, retention rules, and model-training settings apply within its service. Sam’s List does not provide AI inference or request AI API keys. Review permissions and assistant-created changes carefully.

Revoking a connection in Third-Party Apps → AI Connections prevents future access. It cannot recall information already included in provider chats. Manage chat history and provider privacy requests with that provider separately.

Service providers and security

Neon hosts the cloud database, Railway hosts the cloud API/authentication service, and Vercel hosts the public website. Apple provides sign-in, purchases, and optional iCloud. These providers process information needed to operate their services. Information may be processed outside your country, including in the United States. Cloud transport uses HTTPS and app credentials are stored in device Keychain. Cloud content is not end-to-end encrypted: the service must read it to fulfill authorized requests. No security measure eliminates every risk.

Application operational logs exclude task text, notes, and amounts. Hosting and authentication services may process IP addresses, user agents, and security metadata. A small account activity history records which client changed a record and when. This information is used for service operation and security, not behavioral analytics or advertising.

Optional iCloud sync

If you turn on Sync Sam’s List, your todos, folders, spending records, and categories are synchronized through your private iCloud account using Apple’s CloudKit service. Apple processes iCloud data under its own terms and privacy practices. Why&Key does not have access to your private iCloud data through this app. You can turn sync off in Third-Party Apps; changes take effect after restarting the app.

Apple Reminders and Calendar

Sam’s List requests access to Apple Reminders or Calendar only when you choose an import action. Selected reminders or events, including notes and dates, are copied locally and uploaded only if you enable the corresponding cloud domain. You can change import permissions in device settings. Sam’s List does not read Wallet transactions or other apps’ notifications.

Notifications

If you enable notifications, reminders are scheduled locally by your device. Sam’s List does not send remote push notifications. Task reminder settings are included when you enable Tasks cloud sync. A chat save confirms a cloud commit, not that an offline device has scheduled the reminder.

Release notes

When the app is active, it may occasionally download a public release-notes file from whyandkei.com so it can show new features in What’s New. This request does not include your todos, spending entries, account information, or a Sam’s List profile. The latest valid notes are cached on your device for offline access.

Purchases

Apple processes Premium purchases; we do not receive payment-card numbers. For cloud access, our server verifies Apple-signed purchase information, checks subscription expiration, refunds, and revocations, and links a purchase identifier to one cloud account. Existing Lifetime Premium purchasers qualify. Purchase metadata is used for app functionality and fraud prevention, not advertising.

No sale, tracking, or analytics

We do not sell personal information, use it for targeted advertising, track you across apps or websites, or include advertising or behavioral analytics SDKs. Information is shared to provide selected services, fulfill your authorized connections, or meet legal obligations. We process account/cloud information to provide the requested service, obtain consent for optional connections, and use information as necessary for security and mandatory legal obligations.

Retention and deletion

You can delete individual records in the app; cloud deletions are queued until the device connects. Deleted record IDs and revisions may remain as deletion markers to prevent offline devices recreating content. Retry responses and connection activity are retained for up to 30 days. Domain removal erases affected active server records and retry responses and revokes affected connections while preserving the device copy. Restricted backups may retain deleted information until expiry, for no more than 30 days under our cloud retention configuration.

Use AI Connections to delete the cloud account. Deletion may require signing in again and revokes Apple authorization and assistant access. Uninstalling alone does not delete cloud accounts, iCloud data, or provider chats. Local account stores and snapshots remain on the device for recovery; removing the app and its data removes app-controlled local copies subject to system backups. Contact us for access, correction, deletion, portability, or other applicable privacy rights. We may need to verify requests. Mandatory legal obligations may require limited retention, which we will explain when applicable.

Changes and contact

We may update this policy as the app changes. For privacy questions, contact Why&Key LLC at contact@whyandkei.com.