Privacy Policy

Who is responsible.

Gear is operated by Egor Sazanov, working under the brand addicted. For privacy questions or requests, contact gear@addicted.sh. This policy applies to gear.addicted.sh and Gear’s app services.

Information we handle.

• Local app records: item names, notes, photos, tasks, intervals, odometer readings, service dates and history, and imported activity entries are stored on your device and synchronised through Apple’s private iCloud database when available. Gear has no separate user account. Exported Gear backups include these records and photos; you choose their storage destination. Strava sign-in tokens and purchases are excluded. Device backups are managed by Apple or your backup provider.
• Assistant requests: relevant item or task names and notes, existing task names, and selected images are sent to Gear’s server and Anthropic to generate the requested response. Images are resized before upload. Gear asks for explicit permission before the first request. With Pro and AI sharing allowed, choosing a photo during item creation automatically starts identification; other assistant tools run when you invoke them. Without Pro, Gear offers one free photo setup when you add your first item: the photo is processed the same way, after the same permission. To confirm the app was obtained from Apple and that the free setup is used only once, Gear sends Apple’s signed app download record to its server. Turn off future sharing in Settings → Permissions. Do not include sensitive personal information you do not want processed.
• Strava connection: authorisation codes and access or refresh tokens pass through Gear’s server during connection and renewal. Tokens and the connected athlete name are stored in your device’s Keychain. The app reads gear identifiers, names and mileage, and activity identifiers, sport types, dates and durations. Gear stores the activity entries needed for hour-based tasks locally. It does not send your Strava activity feed to the AI assistant; item names or notes you use in an assistant request may contain information you originally obtained from Strava.
• Purchases and service operations: Gear processes signed Apple transaction information, product and transaction identifiers, subscription status, request type, usage counts and errors. Apple processes payment details; Gear does not receive your full payment-card number. Hosting and infrastructure providers may process IP addresses, request times, device or browser information, and security logs.
• Calendar: if you turn on Add tasks to Calendar for an item, Gear asks for full calendar access and creates, replaces or removes the events for that item’s tasks on your device. Gear does not read your other events and does not send calendar data to its server.
• Usage statistics: the app sends anonymous events through TelemetryDeck, such as an item being created and its type (for example bike or plant), a task being completed, the paywall being shown, or an assistant tool being used, together with app version, system version and device type. Events are tied to a hashed installation identifier that cannot be traced back to you and are not used for tracking or advertising. They never include item names, notes, photos or Strava data. Turn them off in Settings → Permissions.
• Support: your email address, message and attachments are used to answer your request.

Why we use it.

We use information to provide features you request, verify subscriptions, connect Strava, generate assistant responses, answer support requests, prevent abuse, keep the service reliable, and understand which features are used. The app does not include advertising, and this website has no marketing trackers. App usage statistics are anonymous and described below.

Where applicable data-protection law requires a legal basis, we rely on performing our agreement with you for requested services, legitimate interests for security and troubleshooting, consent where required for optional processing, and compliance with legal obligations. You may object to processing based on legitimate interests or withdraw consent for processing that relies on it.

Services involved.

• Apple: purchases, subscription verification, system permissions, private iCloud sync and any device backup services you enable. See Apple’s privacy information.
• Anthropic: processes assistant inputs and outputs through its commercial API. Its published default is not to use commercial API inputs and outputs for model training, subject to its terms and any agreed settings. See Anthropic’s training policy.
• Strava: provides connected account, gear and activity information after you authorise access. See Strava’s Privacy Policy.
• TelemetryDeck: receives the anonymous usage statistics described above. See TelemetryDeck’s Privacy Policy.
• Vercel: hosts the website and server functions. See Vercel’s Privacy Policy.
• Upstash / Redis infrastructure: when enabled, stores request counters keyed to a purchase identifier to enforce assistant limits, and a one-way hash of Apple’s app download identifier marking the free photo setup as used. See Upstash’s Privacy Policy.

These providers may process information outside your country, including in the United States. Their processing locations and protections depend on the service and agreement in use. Contact us for information about applicable safeguards. We may also disclose information where legally required or necessary to address abuse or protect rights.

How long information stays.

• Local and iCloud records remain until you delete them. Deletions sync across your devices. Removing the app’s local data does not itself erase records already in iCloud. Gear’s Delete All Data removes items, tasks, photos and history and clears Strava tokens from Keychain. Exported backup files, device backups and saved calendar events are managed separately and remain until you remove them.
• Gear’s server forwards assistant content for processing and does not maintain a separate assistant conversation archive. Request metadata and error diagnostics may remain in operational logs under the hosting service’s retention settings.
• Anthropic’s standard API retention is up to 30 days, with exceptions for safety, legal obligations or an applicable agreement. See its retention policy.
• When usage limiting is enabled, assistant counters expire within 32 days. The marker for a used free photo setup is a hash without your photo or item details; it is kept while the offer exists so it cannot be claimed again. Subscription-status results may be cached briefly to avoid repeated checks with Apple.
• Support messages are kept as needed to resolve the request, handle related follow-up, and meet legal obligations. Operational information is retained as needed for reliability, security, incident investigation and applicable legal requirements.

Your choices and rights.

You can export and restore a Gear backup, edit or delete items and tasks, use Delete All Data, disconnect Strava in Gear, revoke Gear’s access in Strava, and manage permissions in the Settings app on your iPhone or iPad. Disconnecting stops further authorised use by Gear but does not erase already imported records. Deleting the app does not cancel an Apple subscription.

Depending on your location, you may have rights to access, correct, delete or receive a copy of personal information, restrict processing, object to processing, or withdraw consent. Email gear@addicted.sh. We may need information to verify and locate your request. We cannot retrieve records that exist only on your device. You may also complain to your local data-protection authority.

Children and sensitive information.

Gear is not directed at children under 13. If you believe a child has submitted personal information to our online services, contact us. Avoid including medical records, payment details, identification documents or other sensitive information in photos, notes sent to the assistant, or support messages.

Changes to this policy.

We will update this page when our practices change and revise the date above. Material changes will be communicated as required by applicable law. For a short overview, visit Privacy at a glance.