Last updated: October 12, 2026
Deliver is a personal task app. There is no account and no sign-in, no advertising and no tracking. This page says exactly what leaves your iPhone, where it goes and why.
Your captures, actions, Owed-to-me items, notes and check-ins are stored in the app's private storage on your iPhone. The app also keeps simple on-device counters (for example how often voice recognition succeeds) to improve reliability; they contain no task content and never leave the device.
Deliver automatically backs up its data to your own private iCloud database (Apple CloudKit), so it survives deleting the app or moving to a new iPhone. Only your Apple ID can read it; we cannot. If iCloud is off, nothing is backed up. You can also export a backup file yourself in Settings → Backup & Restore.
When you record a capture, a check-in reply or a chat message, the recording is sent over an encrypted connection to our server (a Cloudflare Worker), which passes it to OpenAI's speech-to-text service to be written out. Your phone's language settings and a short list of names and terms from your own data (area names, people you're waiting on, recent proper nouns) are sent with it, so the transcript gets them right. The text comes back to your phone; our server does not keep the recording or the text. OpenAI processes it under its API terms, does not use it to train its models, and may keep it for up to 30 days to detect abuse. If you turn off Settings → Chief of Staff → Cloud voice recognition, or you're offline, recognition happens on your iPhone (or through Apple's speech recognition, under Apple's privacy policy) and nothing is sent to us.
When you use the AI Chief of Staff (chat or check-ins), the app sends your message plus a snapshot of your current plan — task and capture text, dates, Owed-to-me items, area names, recent completions and flagged items — over an encrypted connection to our server, which passes it to Anthropic's Claude API to write the reply and propose changes. Our server does not store the conversation. Anthropic processes it under its API terms, does not use it to train its models, and may keep it for a limited time for safety. If the AI Chief of Staff is off, or you're offline, the Chief of Staff answers locally and nothing is sent.
To check that a request comes from a subscriber, the app sends Apple's signed proof of your subscription to our server. The server verifies it and keeps only an anonymous, one-way identifier with usage counts (for fair-use limits, such as requests per hour). It never receives your name, email or Apple ID. Payments are handled entirely by Apple.
Microphone and Speech Recognition are used only while you record. Calendar is used only if you approve a focus block, to write and update that block. You can revoke any permission in iOS Settings; the rest of the app keeps working.
No advertising, no ad networks, no third-party analytics SDKs, no tracking across apps or websites, and no sale or sharing of your data.
Deleting the app removes the data on your iPhone. Your iCloud backup can be deleted in iOS Settings → [your name] → iCloud → Manage Storage → Deliver. Our server keeps only the anonymous usage counters described above, which expire on their own.
Deliver is not directed to children under 13.