Privacy for the Cavatim iPhone, iPad, and Mac apps

Who is responsible

James William Boyce, operating under Boyce Property Services Ltd. (company number 06258012), is responsible for the app-specific processing described here. The registered postal address is 6 Bexley Square, Salford, Greater Manchester, England, M3 6BZ. Contact support@cavatim.com for a privacy request or question.

The Apple apps are independent from the legacy Cavatim web planner. App planner and journal content is not uploaded to the legacy planner backend.

Data the apps use

• Content you enter: lifetime and period goals, links, tasks, recurrence history, daily plans, actual times, journal answers, notes, settings, and migration provenance.
• Private sync data: append-only planning events stored locally and, when iCloud sync is enabled, in your private CloudKit database for the Apple ID signed into the device.
• Purchase data: product, entitlement, renewal, expiry, revocation, billing-retry, grace-period, and Family Sharing status supplied by Apple through StoreKit. Cavatim does not receive your full payment-card details.
• Optional feature analytics: privacy-limited event names for onboarding, planning, journalling, widgets, notifications, and subscriptions. These are off by default and never contain goal, task, note, or journal text or an Apple/iCloud identifier.
• Diagnostics: Apple-provided MetricKit performance and crash information and privacy-redacted app logs. A support attachment is created only for you to review and choose to send.

Why the data is used

• To save, display, search, export, and reconcile the planning book you ask the app to maintain.
• To sync the same person’s devices, show pending changes and conflicts, and prevent data from different Apple IDs being merged.
• To provide purchased features, restore access, honour refunds or revocations, and keep expired accounts in the promised read-only and export state.
• With your optional analytics choice, to understand whether product flows work and where they fail without reading private planner content.
• To diagnose reliability or accessibility problems and answer support requests.

UK GDPR bases

Core local storage, private sync, export, support, and subscription handling are used to perform the app service you request and administer the contract. Limited security and reliability processing may also rely on Cavatim’s legitimate interests in keeping the app safe and dependable, balanced against your privacy.

Optional first-party feature analytics is based on your consent. You can leave it off or withdraw it in Settings without losing your planner. A withdrawal does not affect processing that occurred while consent was valid.

Apple services and other recipients

• Apple provides App Store distribution, StoreKit billing and entitlements, private CloudKit sync, push notification delivery, Family Sharing, App Store analytics, and MetricKit diagnostics under Apple’s own terms and privacy information.
• Cavatim does not sell planner data, use it for behavioural advertising, or share one person’s goals or household plans with another person.
• Support information is disclosed only to the services and people needed to answer the request, investigate abuse, comply with law, or protect the service.

Retention, export, and deletion

Planner history is intentionally append-only so the app can show what was planned and what later happened. It remains until you delete the workspace or the record must be retained for a legal reason. Removing the app from one device does not necessarily remove its private iCloud data.

The app provides a complete structured archive and human-readable PDF pages. It also provides a delete-workspace control and preserves an old local workspace for reconnect or export rather than silently merging it into a different Apple ID.

Optional feature telemetry is removed from the live telemetry table after 90 days. Encrypted operational database snapshots then age out through Cavatim’s separate 7-day backup rotation. Privacy-redacted support diagnostics are retained only as long as reasonably needed to resolve the request and meet security or legal obligations.

Your rights and choices

• You may ask for access, correction, deletion, restriction, portability, or objection where UK data-protection law provides the right.
• You may withdraw optional analytics consent in the app, export before deletion, turn journal Face ID or Touch ID protection on or off, and manage iCloud from Apple device settings.
• Email support@cavatim.com to exercise a right. You may also complain to the UK Information Commissioner’s Office at ico.org.uk.

Journal and account security

Journal lock uses the device’s Face ID, Touch ID, or passcode authentication. Cavatim does not receive biometric templates. Protect your Apple ID and device passcode, keep devices updated, and export before making major account changes.