Privacy Policy — Optic Gecko
Last updated 3 August 2026 · Zack McSweeney, Brisbane QLD, Australia · zackrmcsweeney@gmail.com
Optic Gecko does not collect your data. There is no account, no server and no analytics. Everything you type stays in the app's own storage on your device. The developer cannot see any of it.
What the app stores, and where
Every note, task, habit, goal, focus session, health entry, finance row, contact, memory and setting is written to your device's local storage (IndexedDB and localStorage) inside the app's private sandbox. It is not uploaded anywhere.
Uninstalling the app deletes this data. Use Settings → Backup → Export to keep a copy first.
Device cloud backup is switched off for this app on purpose. Android would otherwise copy the app's data — including imported health records — into your Google Drive automatically. That is disabled (allowBackup="false" plus data-extraction rules), so nothing is uploaded behind your back. The trade-off is real: if you lose the device, the exported file above is the only way back.
What the app does not do
- No user accounts, no sign-up. An optional profile name and passcode are stored on your device only and never transmitted.
- No analytics, telemetry, crash reporting, advertising or tracking SDKs of any kind.
- No selling or sharing of data with anyone, because none is collected.
- No background upload.
Optional features that contact the internet
The app makes no network requests at all unless you turn one of these on and use it. Each is off by default.
| Feature | What is sent | Where it goes |
|---|---|---|
| Book search | The title or author you type | openlibrary.org, gutendex.com |
| Book covers | The book identifier | covers.openlibrary.org |
| Place search | The place name you type | nominatim.openstreetmap.org |
| GitHub hub | Your GitHub personal access token | api.github.com only |
| Telegram reminders | Routine names, step counts, weekday schedule, completions | A Cloudflare Worker you deploy and own. Not the developer's server |
These are direct requests from your device to those services. The developer operates none of them and receives no copy. The app's Content Security Policy blocks any destination not on this list, so a future change cannot quietly widen it.
Links that open other websites
Reading offers shortcuts to look a book up on a retailer or library service. These are ordinary links — nothing is sent in the background — but tapping one opens that site with the book title in the search URL, and that site sees it as a normal visit. Affected: Audible, Amazon Kindle, Libby, Project Gutenberg. There is no affiliate relationship with any of them.
Health and fitness data
Health → Import reads an export file you choose from Apple Health, Samsung Health, Google Fit or Fitbit. It is parsed entirely on your device and saved to local storage.
- The app does not connect to HealthKit, Google Fit, or any health account.
- No health data is transmitted anywhere, ever.
- Health data is never used for advertising and is never shared.
Notifications
If you turn reminders on, the app schedules local notifications with your device's operating system. Nothing is sent to a push server — there is no push server. Notification content never leaves your device.
Sync between devices
Optional. If enabled, the app writes a backup file into a folder you choose, which your own tool (Syncthing, OneDrive, Dropbox, a network drive) then syncs. The developer has no access to that folder and operates no sync service.
Children
The app is not directed at children under 13 and collects nothing from anyone.
Your rights
Because no personal information is collected, held or disclosed by the developer, there is nothing for the developer to access, correct or delete on your behalf. You hold and control all of your data directly on your device; export or delete it at any time from Settings.
This approach is consistent with the Australian Privacy Act 1988 and the Australian Privacy Principles, and with the GDPR's data-minimisation principle.
Changes
Material changes will be published here with the date above updated. If a future version ever collects data, it will say so plainly and ask first.