Privacy
My Next Studio is built on a simple principle: your content belongs to you. Every app in the My Next family is designed to work without an account, without ads, and without sending anything you write to us.
Your todos, lists, and notes stay on your device. There are no advertising SDKs, no advertising tracking across other apps or websites, and no data sold to data brokers. Privacy is not a feature — it is the baseline.
Two limited things do leave the device, and neither of them is your content.
The first is limited anonymous product analytics, processed by OpenPanel. Depending on the app and version, this covers app and feature usage, broad usage patterns, non-content feature settings, and whether supported operations succeed or fail. It helps us understand which features are useful, where people encounter difficulties, and what to improve.
Analytics can include basic app information, such as version and language, event timestamps, and a randomly generated identifier used to group activity from the same app installation. It is not linked to your name, email address, or subscription customer ID. Nothing you write is included: no todo, list, or note content, titles, or link destinations. Alarm times and sleep duration are not included either. Analytics is not used for advertising or tracking you across other companies' apps and websites.
You can turn analytics off completely in each app's Settings. This stops future analytics sends and deletes the pending local queue; it does not retroactively delete events already received by OpenPanel. Subscription processing is separate, as explained below.
The second is subscription information, handled by RevenueCat. To offer My Next: Extra, each app sends RevenueCat a randomly generated customer ID — no name, no email address, no account ID — and RevenueCat processes the purchase and entitlement status Apple reports. It validates receipts, prevents fraud, unlocks and restores Extra, and shares one Extra subscription across Todo, List, and Note. Apple processes every payment, so no card details reach us or RevenueCat, and none of it is used for advertising or cross-company tracking. Because Extra cannot work without it, this one is not covered by the analytics switch.
That customer ID lives in a shared keychain entry on your own device, which is how one subscription unlocks all three apps without an account. It also travels inside your backup file so Extra can follow you to a replacement phone — which is a good reason to treat backup files as private.
When sync is introduced in future versions, it will be opt-in and built with the same principles: you control your content, and you choose where it lives.
Each app's policy below sets out exactly what is sent to whom, what is never sent, what happens when you switch analytics off, and why subscription processing sits outside that switch.