# Privacy Policy

Source: https://gear.addicted.sh/policy
Updated: 2026-10-02

This policy explains how Gear handles information in the iPhone and iPad app, its
connected services, and this website.

## Who is responsible.

Gear is operated by Egor Sazanov, working under the brand addicted. For
privacy questions or requests, contact
[gear@addicted.sh](mailto:gear@addicted.sh). This policy applies
to [gear.addicted.sh](https://gear.addicted.sh/) and Gear’s app
services.

## Information we handle.

- 
**Local app records:** item names, notes, photos, tasks,
intervals, odometer readings, service dates and history, and imported
activity entries are stored on your device and synchronised through
Apple’s private iCloud database when available. Gear has no separate
user account. Exported Gear backups include these records and photos;
you choose their storage destination. Strava sign-in tokens and purchases
are excluded. Device backups are managed by Apple or your backup provider.

- 
**Assistant requests:** relevant item or task names and
notes, existing task names, and selected images are sent to Gear’s server
and Anthropic to generate the requested response. Images are resized
before upload. Gear asks for explicit permission before the first request.
With Pro and AI sharing allowed, choosing a photo during item creation
automatically starts identification; other assistant tools run when you
invoke them. Without Pro, Gear offers one free photo setup when you add
your first item: the photo is processed the same way, after the same
permission. To confirm the app was obtained from Apple and that the free
setup is used only once, Gear sends Apple’s signed app download record
to its server. Turn off future sharing in Settings → Permissions. Do not include sensitive personal information you do not want
processed.

- 
**Strava connection:** authorisation codes and access or
refresh tokens pass through Gear’s server during connection and renewal.
Tokens and the connected athlete name are stored in your device’s
Keychain. The app reads gear identifiers, names and mileage, and activity
identifiers, sport types, dates and durations. Gear stores the activity
entries needed for hour-based tasks locally. It does not send your Strava
activity feed to the AI assistant; item names or notes you use in an
assistant request may contain information you originally obtained from
Strava.

- 
**Purchases and service operations:** Gear processes signed
Apple transaction information, product and transaction identifiers,
subscription status, request type, usage counts and errors. Apple
processes payment details; Gear does not receive your full payment-card
number. Hosting and infrastructure providers may process IP addresses,
request times, device or browser information, and security logs.

- 
**Calendar:** if you turn on Add tasks to Calendar for an
item, Gear asks for full calendar access and creates, replaces or removes
the events for that item’s tasks on your device. Gear does not read your
other events and does not send calendar data to its server.

- 
**Usage statistics:** the app sends anonymous events through
TelemetryDeck, such as an item being created and its type (for example
bike or plant), a task being completed, the paywall being shown, or an
assistant tool being used, together with app version, system version and
device type. Events are tied to a hashed installation identifier that
cannot be traced back to you and are not used for tracking or
advertising. They never include item names, notes, photos or Strava
data. Turn them off in Settings → Permissions.

- 
**Support:** your email address, message and attachments are
used to answer your request.

## Why we use it.

We use information to provide features you request, verify subscriptions,
connect Strava, generate assistant responses, answer support requests,
prevent abuse, keep the service reliable, and understand which features
are used. The app does not include advertising, and this website has no
marketing trackers. App usage statistics are anonymous and described
below.

Where applicable data-protection law requires a legal basis, we rely on
performing our agreement with you for requested services, legitimate
interests for security and troubleshooting, consent where required for
optional processing, and compliance with legal obligations. You may object
to processing based on legitimate interests or withdraw consent for
processing that relies on it.

## Services involved.

- 
**Apple:** purchases, subscription verification, system
permissions, private iCloud sync and any device backup services you enable. See
[Apple’s privacy information.

- 
**Anthropic:** processes assistant inputs and outputs through
its commercial API. Its published default is not to use commercial API
inputs and outputs for model training, subject to its terms and any agreed
settings. See
Anthropic’s training policy.

- 
**Strava:** provides connected account, gear and activity
information after you authorise access. See
Strava’s Privacy Policy.

- 
**TelemetryDeck:** receives the anonymous usage statistics
described above. See
TelemetryDeck’s Privacy Policy.

- 
**Vercel:** hosts the website and server functions. See
Vercel’s Privacy Policy.

- 
**Upstash / Redis infrastructure:** when enabled, stores
request counters keyed to a purchase identifier to enforce assistant
limits, and a one-way hash of Apple’s app download identifier marking the
free photo setup as used. See
Upstash’s Privacy Policy.

These providers may process information outside your country, including in
the United States. Their processing locations and protections depend on the
service and agreement in use. Contact us for information about applicable
safeguards. We may also disclose information where legally required or
necessary to address abuse or protect rights.

## How long information stays.

- 
Local and iCloud records remain until you delete them. Deletions sync
across your devices. Removing the app’s local data does not itself
erase records already in iCloud. Gear’s **Delete All Data**
removes items, tasks, photos and history and clears Strava tokens from
Keychain. Exported backup files, device backups and saved calendar events
are managed separately and remain until you remove them.

- 
Gear’s server forwards assistant content for processing and does not
maintain a separate assistant conversation archive. Request metadata and
error diagnostics may remain in operational logs under the hosting
service’s retention settings.

- 
Anthropic’s standard API retention is up to 30 days, with exceptions for
safety, legal obligations or an applicable agreement. See its
retention policy.

- 
When usage limiting is enabled, assistant counters expire within 32 days.
The marker for a used free photo setup is a hash without your photo or
item details; it is kept while the offer exists so it cannot be claimed
again.
Subscription-status results may be cached briefly to avoid repeated checks
with Apple.

- 
Support messages are kept as needed to resolve the request, handle related
follow-up, and meet legal obligations. Operational information is retained
as needed for reliability, security, incident investigation and applicable
legal requirements.

## Your choices and rights.

You can export and restore a Gear backup, edit or delete items and tasks,
use **Delete All Data**, disconnect Strava in Gear,
revoke Gear’s access in Strava, and manage permissions in the Settings app on your iPhone or iPad.
Disconnecting stops further authorised use by Gear but does not erase
already imported records. Deleting the app does not cancel an Apple
subscription.

Depending on your location, you may have rights to access, correct, delete
or receive a copy of personal information, restrict processing, object to
processing, or withdraw consent. Email
gear@addicted.sh. We may need information to verify and locate your request. We cannot
retrieve records that exist only on your device. You may also complain to
your local data-protection authority.

## Children and sensitive information.

Gear is not directed at children under 13. If you believe a child has
submitted personal information to our online services, contact us. Avoid
including medical records, payment details, identification documents or
other sensitive information in photos, notes sent to the assistant, or
support messages.

## Changes to this policy.

We will update this page when our practices change and revise the date
above. Material changes will be communicated as required by applicable law.
For a short overview, visit Privacy at a glance](https://www.apple.com/legal/privacy/).
