🔒 Your Content Stays on Your Device
The workouts, tasks, notes and other records you create are stored on your device and are never uploaded to our servers. We use anonymous product analytics and a subscription service — described in full below — and we never sell your data, show ads, or track you across other companies' apps.
Last updated: July 27, 2026
Overview
RubixScript builds mobile and web applications, including OneRep, Pomodo, OnePage, HabitSmash, TechStack, SkillQuest, ZapRecipe and others. Our apps are designed "content-local-first": the things you create — your workouts, tasks, notes, books, recipes and similar records — are stored on your device and are never uploaded to our servers. We do, however, use a small number of third-party services for anonymous product analytics and for processing subscriptions. This page explains exactly what those services receive.
What Stays On Your Device
Your content never leaves your device. This includes:
- Workouts, routines, exercises, personal records and progress photos (OneRep)
- Tasks, focus sessions, timers and habits (Pomodo, HabitSmash)
- Books, reading lists and notes (OnePage)
- Recipes, flashcards, decks and any other records you create
- We have no account system, no login and no server-side copy of this content
What We Do Collect
We collect anonymous usage analytics so we can understand which features are used and fix problems. This data is not linked to your name, email or any account, because we do not have accounts.
Product analytics
Collected via PostHog and, in some apps, Mixpanel:
- Screen views and in-app events (for example: a workout was logged, a timer completed)
- App lifecycle events such as launches, and opened deep links
- A randomly generated, device-scoped identifier used to group events into a session
- Technical context: app version, device model, operating system version, language and an approximate region derived from your IP address
- We never send the contents of your workouts, tasks, notes or photos
Subscriptions and purchases
Collected via RevenueCat when you view or buy a subscription:
- Your subscription status and purchase receipts, validated with Apple or Google
- An anonymous app user identifier and basic device information
- Payment itself is handled entirely by Apple or Google — we never see or store your card details
Third-Party Services We Use
These are the only third parties that receive any data from our apps:
- PostHog — product analytics (privacy policy: posthog.com/privacy)
- Mixpanel — product analytics in some apps (privacy policy: mixpanel.com/legal/privacy-policy)
- RevenueCat — subscription management (privacy policy: revenuecat.com/privacy)
- Apple and Google — app distribution and payment processing
What We Never Do
We want to be explicit about the things we do not do:
- We do not sell or rent your data to anyone
- We do not use advertising networks or show ads
- We do not collect the Advertising Identifier (IDFA) and do not track you across other companies' apps or websites
- We do not share data with data brokers
- We do not use your data to train machine learning models
App Permissions
Our apps request device permissions only for features you choose to use:
- Storage: to save your data locally on your device
- Notifications: for local reminders (optional)
- Camera and photo library: only in apps with progress photos, and only when you add one
Your Choices and Data Control
You remain in control:
- Deleting the app removes all of your content, permanently and immediately
- Analytics are anonymous and device-scoped; deleting the app ends collection
- To request deletion of analytics data associated with your device, email privacy@rubixscript.com and we will action it
- Manage or cancel subscriptions at any time in your Apple Account or Google Play settings
Children's Privacy
Our apps are not directed at children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us with information, contact us and we will delete it.
Data Retention and Security
Analytics events are retained by our analytics providers for a limited period and then deleted. All data in transit is encrypted using HTTPS. Because your content never leaves your device, its security is governed by your device's own protections — we recommend keeping a passcode enabled.
International Transfers
Our analytics and subscription providers process data on servers in the United States. By using our apps you consent to this transfer.
Updates to This Policy
We may update this policy as our apps change. The date at the top of this page reflects the most recent revision, and material changes will be noted in the app's release notes.
Contact Us
For any questions about this privacy policy, or to make a data request, contact us at:
- Email: privacy@rubixscript.com
- Support: support@rubixscript.com
- Address: Milton, L9T7V3 Canada
- Phone: +1 (604) 396-1032