The short version
Your tasks and session data stay on your device — we never see them. The one exception: if you use the "Extract from notes" AI feature, the text you paste is sent to our server and processed by OpenAI to generate your task list. It is not stored. If you subscribe to Finish Pro, Apple and RevenueCat process your payment and subscription status. We don't sell your data. Ever.
1. Who We Are
DCF Concepts is the developer of Finish List ("we," "us," "our"). We are the data controller for any personal data processed in connection with the App. For privacy inquiries, contact: info@dcfconcepts.com.
2. Data We Collect
App content (stored locally only)
Your tasks, session data, backlog items, and history are stored exclusively on your device using iOS local storage (AsyncStorage). This data is never transmitted to any server, never accessible by us, and never shared with third parties.
AI task extraction (Finish Pro — optional, on demand)
Finish Pro includes an optional "Extract from notes" feature. When you choose to use it, the text you paste into the extraction box is sent over HTTPS to our server, which forwards it to OpenAI (accessed via Replit's AI infrastructure) to identify action items and return them as a task list.
- The text is not stored by us, not logged to disk, and not associated with your identity.
- Processing is transient — the text exists only for the duration of the request and is discarded immediately after the response is returned.
- This feature is entirely optional. If you do not use it, no text is ever sent anywhere.
- To prevent abuse, requests are rate-limited by IP address. IP addresses are processed transiently in memory and are never written to disk or associated with any user identity.
Subscription & purchase data (Finish Pro)
If you subscribe to Finish Pro, the following data is processed by Apple and RevenueCat:
- Apple: Processes your payment method, billing address, and transaction history. We receive only a transaction receipt and subscription status — not your payment card details.
- RevenueCat: Manages subscription state, entitlement verification, and purchase history using an anonymous app user ID. RevenueCat may collect device identifiers and transaction data. See RevenueCat's Privacy Policy.
Crash & diagnostic data
We do not collect crash reports, analytics, or diagnostic data. If the App crashes, no data is transmitted to us.
What we do NOT collect
We do not collect: name, email address, phone number, location data, contacts, camera or microphone data, advertising identifiers, browsing history, or any usage analytics. We do not persistently store IP addresses — they are processed transiently in memory for rate limiting only and are never written to disk.
3. How We Use Your Data
App functionality
Your local data is used solely to operate the App features on your device. We have no access to it.
Subscription management
Subscription status received from RevenueCat and Apple is used only to unlock Pro features on your device. We do not retain this data on our own servers.
Legal basis (GDPR)
For users in the EU/EEA/UK, our legal bases are: (a) Contractual necessity — to provide the App features you requested; (b) Legitimate interests — subscription verification to deliver Pro features; (c) Legal obligation — where required by applicable law.
4. Data Sharing & Third Parties
We do not sell your data
We never sell, rent, or trade personal information. This applies to all users, including California residents under CCPA.
Service providers
Apple Inc. — payment processing and app distribution. Apple Privacy Policy.
RevenueCat, Inc. — subscription management. RevenueCat Privacy Policy.
OpenAI, L.L.C. / Replit, Inc. — AI processing for the optional "Extract from notes" feature (Finish Pro only). Text submitted to this feature is governed by OpenAI's Privacy Policy and Replit's Privacy Policy during processing. Text is not retained beyond the request.
These parties act as data processors and are contractually bound to process data only as instructed and in compliance with applicable privacy laws.
Legal disclosures
We may disclose information if required by law, court order, or to protect the rights and safety of others.
5. International Data Transfers
Apple and RevenueCat may transfer subscription-related data internationally, including to the United States. These transfers are governed by Standard Contractual Clauses (for EU/EEA users) or equivalent safeguards under applicable law. Your local app data never transfers anywhere.
6. Data Retention
Local app data
Retained on your device until you delete it or uninstall the App. We have no control over this data.
Subscription data
RevenueCat retains subscription and purchase history per their retention policy. Apple retains transaction records per their standard practices. We do not maintain our own subscription database.
7. Your Rights
All users — local data
You can delete all local app data at any time by clearing app storage in iOS Settings or uninstalling the App. There is no server-side data held by us to request.
EU/EEA/UK users (GDPR & UK GDPR)
You have the right to: access your personal data; correct inaccurate data; request erasure ("right to be forgotten"); restrict processing; data portability; and object to processing. You also have the right to lodge a complaint with your local supervisory authority. To exercise these rights, contact info@dcfconcepts.com. For subscription data held by RevenueCat, contact them directly at revenuecat.com/privacy.
California residents (CCPA/CPRA)
You have the right to know what personal information we collect, the right to delete it, the right to opt out of sale (we don't sell data), and the right to non-discrimination for exercising your rights. We do not collect sensitive personal information as defined by CPRA. To submit a verifiable request, email info@dcfconcepts.com.
Canadian residents (PIPEDA)
You have the right to access and correct personal information we hold about you, and to withdraw consent. Contact us at info@dcfconcepts.com.
Brazilian residents (LGPD)
You have the rights provided under Lei Geral de Proteção de Dados, including confirmation of processing, access, correction, anonymization, portability, deletion, and information about sharing. Contact info@dcfconcepts.com.
Australian residents (Privacy Act)
You have the right to access and seek correction of personal information we hold. If you believe we have breached the Australian Privacy Principles, you may contact us to make a complaint.
8. Children's Privacy (COPPA)
Finish List is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. Since we do not collect personal information from anyone, no special measures for children's data are required beyond this commitment.
If you are a parent or guardian and believe a child under 13 has used the App and provided personal information, please contact us at info@dcfconcepts.com and we will take appropriate action.
9. Security
Your local data is protected by your device's built-in security features, including device encryption and app sandboxing on iOS. Since we do not transmit or store your data on external servers, there is no server-side security risk to your app content.
Subscription transactions are handled entirely by Apple using industry-standard encryption and security practices.
10. Cookies & Tracking
The App does not use cookies, web beacons, pixels, or any tracking technologies. Our website (finish.dcfconcepts.com) does not use analytics tracking or advertising cookies.
11. Changes to This Policy
We will update this policy when our practices change. The effective date at the top will reflect the most recent revision. For material changes, we will notify you through the App prior to the change taking effect. Continued use of the App after changes constitutes acceptance of the updated policy.
12. Contact & Complaints
Privacy inquiries & data requests
info@dcfconcepts.comWe will respond to verifiable requests within 30 days (or as required by applicable law). EU/EEA users may also lodge complaints with their local data protection authority.