Privacy Policy

Last updated 1 November 2026

This policy explains how Kick the Bucket List (the "app", available on Android and at https://kick-the-bucket-list.pages.dev) handles information. The app is made by an individual developer based in Adelaide, South Australia ("we", "us"). We aim to handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

1. Data stored on your device

Your goals, tasks, notes, dates, journal entries, photos, achievements and settings are stored locally in your browser or app storage (IndexedDB). We cannot see this data. It stays on your device unless you choose to export it, use the AI Guide, or turn on cloud backup. Photos never leave your device except inside an encrypted cloud backup you turn on.

2. Anonymous app ID

The app creates a random anonymous ID (it starts with ktbl_, shown as your "Support ID"). It is not linked to your name, email or Google account by us. It is used to count your monthly AI Guide usage, to check whether you have Premium, and to help with support requests.

3. AI Guide

When you chat with the AI Guide, the app sends your message, the recent conversation, and context about the goal you are asking about (such as its title, description, notes, tasks and dates) to our server, a Cloudflare Worker. The server forwards this to OpenRouter, which passes it to an AI model provider to run the model (currently Meta Llama 3.3 70B Instruct) to generate a reply. Do not include sensitive personal information you do not want processed this way.

Our server does not store your chat messages. It keeps short-lived counters: a per-minute rate limit keyed by your IP address, and a monthly AI usage count keyed by your anonymous app ID (or by IP address if no ID is sent), which expire automatically (the monthly count after about 40 days). OpenRouter and the model provider handle the request under their own privacy policies (see openrouter.ai/privacy). Cloudflare, which hosts our server and website, may process standard technical data such as IP addresses for security and operation (see cloudflare.com/privacypolicy).

4. Encrypted cloud backup and sync (Premium)

If you turn on cloud backup, your data (including any photos) is encrypted on your device with a key derived from your sync code and passphrase before it is uploaded. We store only the encrypted data, a hash used to check the passphrase, the time of the last update and your anonymous app ID, in Cloudflare KV storage. We cannot read your backup, and we cannot recover it if you lose your sync code or passphrase. Backups are kept until you delete them. You can do this yourself in the app (Settings > Delete my cloud backup), or email us (see Delete your data). Deleting a backup removes it from Cloudflare KV straight away; it does not change the data on your device.

5. Purchases

Premium is sold through Google Play Billing and managed with RevenueCat. Google handles your payment details; we never see your card. RevenueCat receives your anonymous app ID and purchase information (such as product, purchase date, renewal and expiry) so the app and our server can confirm whether you have Premium. Our server asks RevenueCat about your anonymous ID and caches the yes/no answer for up to 10 minutes. See revenuecat.com/privacy and policies.google.com/privacy.

6. What we do not do

• No advertising and no ad identifiers.
• No analytics, tracking or crash-reporting SDKs.
• No selling or renting of personal information.
• No account sign-up, so we do not collect your name or email unless you email us.

7. Overseas processing

Cloudflare, OpenRouter, the AI model provider, RevenueCat and Google may process data outside Australia, including in the United States. By using those features you understand your data may be handled overseas by these providers.

8. Your choices and rights

You can export or delete all local data at any time in Settings ("Delete all data"), or by uninstalling the app or clearing site data. You can delete your encrypted cloud backup at any time in Settings ("Delete my cloud backup"). You can stop using the AI Guide or cloud backup at any time. You may ask us for access to, correction of, or deletion of information we hold about you by emailing amercerappdev@gmail.com. Data deletion steps are on the Delete your data page. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).

9. Children

The app is not directed to children under 13, and we do not knowingly collect their personal information.

10. Security

Data in transit uses HTTPS. Cloud backups are end-to-end encrypted. No system is perfectly secure, so please keep your sync code and passphrase private and export backups now and then.

11. Changes

We may update this policy. The date at the top shows the latest version. Significant changes will be noted in the app or on this page.

Questions? Email amercerappdev@gmail.com.