Privacy, without the fine-print fog.

This policy describes how Later, operated by Travis McCormick ("Later," "we," or "us"), handles information in the Later iOS app and on thelaterapp.com.

Later does not sell your personal information. The app does not include advertising, behavioral analytics, or tracking SDKs. You can use the app without creating a separate Later account.

Your boards, tasks, notes, links, reminder settings, and completion history are stored on your device. When iCloud is available, Apple syncs this content through the app's private CloudKit database so it can appear on your devices. Later does not send this everyday content to a separate developer-operated task server. Link previews can contact the linked website, and you can deliberately export or share content, as described below.

Boards and items

The content you choose to save—including titles, notes, links, board assignments, dates, reminder settings, and completion state—is stored locally and, when enabled and available, synced by Apple through iCloud.

Saved-link previews

When Later displays a preview of a saved link, Apple's LinkPresentation framework may contact the linked website to retrieve its title or image. That website can receive standard request information, such as your IP address and the requested web address, under its own privacy practices. Opening a saved link uses your browser and is governed by the website's and browser's practices.

Photos you choose

If you use Scan a List, Later processes the image on your device with Apple's Vision framework to recognize text. Apple's system photo picker gives Later access only to the image you select; it does not give Later broad access to your photo library. A camera image or selected image is kept in memory while you review it, is not uploaded by Later, and is not copied into Later's data store. Recognized text becomes saved task content only after you review and save it.

Voice you record

If you use voice capture, Later processes microphone audio on your device with Apple's Speech framework. Later does not upload the audio or write it to a recording file. When Apple's on-device language model is available, Later also uses the Foundation Models framework on your device to suggest separate tasks, notes, reminder phrases, and board assignments from the transcript. A local fallback is used when that model is unavailable. Only the tasks you review and choose to save become ordinary task content and, when iCloud is available, sync through CloudKit.

Reminders and preferences

Reminder notifications are scheduled on your device. Appearance, onboarding, migration, and similar preferences are stored locally using Apple's system storage.

Exports you create

Export All Data creates a JSON copy of your boards and items in the app's temporary storage and presents Apple's system share sheet. Later does not automatically upload that file. A copy leaves Later only when you choose a destination such as Files, Mail, AirDrop, or another app. Later removes the app-created temporary copy when the share sheet closes and clears an abandoned temporary export before a later export or full data reset; the operating system may also clear temporary storage. A copy saved or sent elsewhere is controlled by you and the selected destination, is governed by that provider's practices, and cannot be removed by Later's Delete All Data command.

Later asks for access only when a feature needs it:

• Notifications deliver reminders you create.
• Microphone and speech recognition turn a spoken thought into text on your device.
• Camera lets you photograph a list for on-device text recognition.
• Selected photos are provided through Apple's system photo picker without granting Later broad library access.

You can decline these permissions and continue using the rest of Later. You can change them later in the Settings app on your device.

Apple

Later uses Apple services and frameworks including iCloud and CloudKit, notifications, Vision, Speech, Foundation Models, Siri and Shortcuts, the system share sheet, and Sign in with Apple where described below. Apple's handling of information is governed by the Apple Privacy Policy.

One-time cleanup for previous accounts

Earlier versions of Later used Supabase as a separate account service. If a saved previous-account session remains on your device, Settings may offer a one-time cleanup. Opening Settings examines only the cached session on your device and does not contact Supabase. Only after you choose to verify or delete the previous account may Later send Supabase a saved email address, user identifier, access or refresh token, a password you enter, or a Sign in with Apple identity token. Later uses this information only to verify the previous account and delete its obsolete remote identity; it is not used for advertising, marketing, or tracking.

Supabase also creates authentication, edge-network, and security logs when these requests occur. Depending on the request, those logs may include a user identifier, IP address, user agent or client version, timestamp, authentication event, requested route, and response status. Supabase uses this information to deliver and secure the service, apply rate limits, prevent abuse, troubleshoot failures, and maintain audit records. Log retention depends on the project's Supabase configuration and plan, and some security or legal records may remain after the obsolete identity is deleted. Supabase's handling of information is described in the Supabase Privacy Policy.

When remote deletion and local cleanup both succeed, Later removes the saved Supabase sign-in from Keychain. If remote deletion succeeds but Keychain removal cannot be verified, Later shows a retry instead of reporting full success. If a saved session is unreadable, Later can remove only that local sign-in; if no saved session remains, the in-app cleanup is not shown. To request deletion of a previous remote identity when in-app cleanup is unavailable, email [email protected] from the address associated with that account. We may ask for reasonable proof that you control the account, but we will never ask you to send a password by email.

Support

Contact Support opens your chosen mail app; nothing is sent to Later until you choose to send the message. If you email us, we receive the sender address and the message or attachments you choose to provide. We use that information to answer and manage your request, prevent abuse, and maintain necessary support records. The mail and routing providers involved in delivery also process the message under their own privacy terms.

This website

thelaterapp.com is hosted by Vercel and delivered and protected through Cloudflare. When you visit, those providers receive standard request and security information such as your IP address, browser or user agent, requested page, timestamp, response status, and security signals. This information is used to deliver the site, prevent abuse, maintain security, and troubleshoot availability. Retention is controlled by the applicable service configuration and provider terms. The site does not use advertising or cross-site tracking, and Later does not use these request logs to build a behavioral profile. See the Vercel Privacy Policy and Cloudflare Privacy Policy.

Protection by service providers

Later requires service providers that process information on its behalf to provide the same or equivalent protection described in this policy and required by applicable law, and to use the information only to provide, secure, and maintain the relevant service, except where the provider is legally required to do otherwise.

Saved Later content remains on your device and in the app's private CloudKit database until you delete it. You can delete individual items and boards in the app. Settings → Delete All Data deletes the boards and items currently available in Later and removes Later's pending and delivered notifications from that device. When iCloud is available, those record deletions are sent through CloudKit and appear on other synced devices after synchronization completes; deletion is not necessarily immediate. If a device was not fully synced or later contributes an older copy, open Later on that device, allow iCloud to finish syncing, and delete the remaining content there.

Delete All Data does not remove copies you exported, sent, or saved outside Later, and it does not perform the separate previous-account cleanup. Some local, non-content preferences—such as appearance choices—may remain until you change them or remove the app.

A successful previous-account cleanup deletes the obsolete Supabase identity without deleting current iCloud task content. Supabase may retain limited security, audit, or legally required records as described above. Support email is kept only as long as reasonably needed to resolve the request, maintain necessary support records, prevent abuse, or meet legal obligations. You may ask us to delete a support conversation or previous account by emailing us; we will delete information we control unless we must retain it for security or legal reasons.

Later relies on Apple's platform security, app sandboxing, Keychain protection for any legacy credentials, and encrypted network connections used during obsolete-account cleanup. No method of storage or transmission can be guaranteed completely secure, but Later limits the information it handles and the places it can go.

You can revoke camera, microphone, speech-recognition, and notification permissions in the Settings app on your device. You can delete saved content in Later, use Delete All Data as described above, and request deletion of support or previous-account information by contacting us. Features you access through Apple, your device, or another app may also be governed by that provider's terms and privacy choices.

If Later's data practices change, this page will be updated before the new practices apply, and the date above will change. If a change materially affects your choices, Later will provide an appropriate notice in the app or through the App Store.