Privacy Policy

Effective date: 2026-09-27

Remade is made and supported by Sam Montoya, an independent developer (sole proprietor) in the United States. You can reach me at sam@musicdisciple.com.

What this app holds

Your rule of life: habits, their schedules and history of changes, daily kept/missed entries, pauses, identity statements, liturgies and their reps, commitments, evidence, reading plan, reviews, and a change log.

What we collect

Nothing. Remade has no account system, no server, and no backend of its own. No data of any kind is transmitted to us: not your habits, not your notes, not analytics, not crash reports, not a device identifier. The App Store privacy label for this app says "Data Not Collected," and this policy is the long version of why that label is true. Because we collect nothing, there is nothing for us to retain, sell, share, or delete on your behalf. What follows explains where your data lives and how you stay in control of it.

Where it lives

On your phone. This app never sends your data to us, because there is nowhere for it to go.

That part is absolute and it is the part we control. The rest of this policy is about where your own phone puts your words once they are on it, because "it stays on your phone" is an easy thing to say and an easy thing to get wrong. There are four places, and they are the four sections below.

1. Your daily backup

Each day you open the app, it writes a backup file so a lost or broken phone does not cost you your history. If iCloud Drive is available the file lands in your own iCloud Drive, under your own Apple account. If it is not, the file stays on this phone, and the app tells you which of the two happened under Rules, then Settings, then Status & Diagnostics, then Status.

That backup carries the structured record: habit names and schedules, kept and missed entries, pauses and their short reasons, the reasons you gave for changing a habit, identity statements, liturgy structure, commitments, the reading plan, the gaps you are working on and the people you named as sources, the dates and links of your reviews, the change log, and, if the app has you marked as unlocked for good because you were here before the paywall, that mark, so that restoring onto a new phone does not cost it.

It also carries several things you write in a field rather than a note, and they are worth naming because people put real weight in them: why you took a habit on, its scripture reference, its smallest version, the anchor you attached it to, the elaboration under an identity statement, the definition of a gap, and your vetting notes on a book.

It deliberately leaves your free text out. Day notes, per-entry notes, the prayers and free text inside liturgies, decision answers, gate notes, your written Rule of Life document (unless you include it, below), the words of an evidence record, the notes you write on a Bible verse, and what you wrote in a review are stripped before the file is written, and that is enforced in code rather than promised in policy. So are your place anchors. If you would not want a sentence sitting in a file in your iCloud Drive, put it in a day note, which never goes there.

Two items can be moved across that line by hand, each with a switch that says "include in backup," off by default: an evidence record, and your written Rule of Life document. Turning a switch on puts those words in future backups. Turning it back off keeps them out of future ones; backup files already written keep what they already have.

2. Your phone's own iCloud Backup

Separate from the app's backup file, and much broader. If you have iCloud Backup switched on, which is the iPhone default, your phone backs itself up to Apple and this app's database is included exactly like every other app's. Everything in the app's database that its own backup file leaves out is in there: your day notes and entry notes, prayers, decision answers, your Rule of Life document, the notes you write on a Bible verse, your place anchors. It sits under your own Apple account, and unless you export them yourself it is the only way those words would survive a lost phone, which is why the app does not exclude itself from it. It is your phone's setting rather than something this app does, and you will find it in Settings under your name, then iCloud, then iCloud Backup.

3. Publishing to your calendar

This is off unless you turn it on. When it is on, the app writes both your habits and your liturgies as events into a calendar on this device. Anything on set days publishes automatically once calendar publishing is on - as a timed event when it has a reminder time, or as an all-day event marked Free if you switch that on for it; you can turn an individual one off in its editor. A backup file does not carry those choices, so check them again after a restore. iOS decides which account that calendar belongs to, and on most phones that is an account which syncs, such as iCloud, Google, or Exchange. If it does, those names travel to that provider under your own account and are handled under their privacy policy, not this one.

Only names, dates, and times are written. None of your free text is ever put in an event, and the prayer inside a liturgy is never written. Worth knowing: the name of a liturgy can be revealing on its own, even though the prayer inside it is never written into the event. If you would rather nothing left the phone this way, leave calendar publishing off, or turn off the individual habit or liturgy you would rather keep to yourself.

4. Screens and speakers outside the app

App Lock guards the app. It does not guard the surfaces iOS renders on your behalf, and some of your words appear there.

Reminders. A reminder shows the habit or liturgy name, and for a habit that has one, its smallest version. iOS shows that on the lock screen, mirrors it to a paired Apple Watch, and can read it aloud through AirPods or CarPlay if Announce Notifications is on. The place name of a location reminder is deliberately never included, so an arrival reminder says only that you have arrived. If a habit's name or its smallest version is something you would not want read out in a room, name it something else or turn its reminder off.

Widgets. A widget renders outside App Lock by design. The habit widgets show habit and group names, the lock-screen accessory shows the name of the next unlogged habit, the Control Center button shows the habit you chose, and the Identity widget shows one identity statement and its verse. Lock-screen and StandBy widgets are visible without unlocking, so a phone face up on a desk or docked overnight is showing whatever you put there. Remove the widget if you would rather it did not.

Siri and Shortcuts. Asking Siri what is next can have it speak an identity statement, a liturgy name, or a habit name with how many reps it still needs. When a commitment is overdue, Siri says only that one is overdue and since when; the words of the commitment itself are never spoken, because a commitment is often the most personal sentence in the app. Logging by voice has Siri say the habit name back. The Shortcuts app lists your habit names so you can build shortcuts from them.

Before Siri speaks that line, the iPhone's own built-in language model may reword it to sound less mechanical. That model runs on this phone. Your words are not sent to Apple or to us for it, and the reworded sentence is spoken and then discarded, never saved and never logged.

Exporting and sharing

You can export your habit history yourself as CSV, or one month as Markdown. Exports carry habits, entries, pauses, and the days you wrote a note on. The "Include private notes" switch, off by default, adds the text of both your day notes and your per-entry notes. Diagnostics can be shared from the Diagnostics screen in the same way. Nothing moves until you tap share, and where the file goes after that is up to you.

The private vault

There is one deliberate way to carry your free text off this phone: the vault. It is an export you start by hand, with a confirmation naming exactly what leaves, sealed with a passphrase you type in that moment. The passphrase is stored nowhere — not in the app, not in the Keychain, not in the file — so a vault file can be opened only by someone who knows it, and a forgotten passphrase cannot be recovered by anyone, including us. The file is encrypted before it exists anywhere outside the app, and where you put it afterwards is up to you. Nothing writes a vault on a schedule and no other feature can reuse this door; it exists so that your words can survive a lost phone without ever sitting anywhere in the clear.

Screen Time

If you use the app shield, iOS manages which apps are shielded through Screen Time using tokens the app cannot read. The app never learns which apps you chose and does not receive or store your usage data.

No tracking

There is no third-party analytics, advertising, or tracking SDK in this app; in fact there is no third-party code in it at all. Diagnostics use Apple's built-in frameworks only and stay on your device unless you share them yourself.

Third parties

The only third party in the picture is Apple, and only because your own Apple account holds your iCloud Drive, your iCloud Backup, and usually your calendar, and, if you unlock the app, processes your purchase. That data sits under your account and Apple's privacy policy (apple.com/legal/privacy), on the same terms as everything else your phone stores there. If your calendar syncs through Google or Exchange instead, that is your own account with that provider, under their policy. No third party processes data on our behalf, because nothing is ever transmitted to us to process. If the app is unlocked on this device, it asks the App Store not to show the Unlock promotion here.

App Store purchases

If you unlock the app, the purchase is processed by Apple through your App Store account, under Apple's terms and privacy policy. We receive no payment details, no name, and no account identity — the app sees only an anonymous receipt on this device saying the unlock was bought or redeemed. There is nothing for us to store, because we have no server to store it on.

Security

The local database is encrypted at rest by iOS data protection. App Lock is on by default and uses Face ID, Touch ID, or your passcode. Before an app update opens your database, the app copies it, so an update that goes wrong cannot take your notes with it. No app can honestly promise perfect security, so we will not; what we can say is that the strongest protection here is structural: data that is never transmitted cannot be leaked in transit or breached from a server, because neither exists.

Retention, deletion, and changing your mind

The app keeps your history for as long as you keep the app; nothing expires on its own, because a rule of life is a long record by design. Deleting is in your hands. Delete the app and the local database goes with it. Backup files written to your iCloud Drive are under your own Apple account and are yours to delete there. When iCloud Drive was unavailable the backups were kept inside the app on this phone instead, where deleting the app removes them. Your phone's iCloud Backup is managed in your iOS settings. If you published to a calendar, delete that calendar to remove those events from the account they were written to. There is no server copy to ask us to purge, because there is no server.

Every permission you grant can be taken back. Turn calendar publishing off in the app, or revoke Calendar access entirely in iOS Settings. Remove widgets, turn off reminders, and disable Siri for the app in the usual iOS places. Turning something off stops it going forward; anything already written elsewhere, such as a calendar event or a backup file, is covered above and is yours to delete.

Children

This app does not collect personal information from anyone, including children under 13.

California residents

We do not collect, sell, or share personal information as defined by the CCPA and CPRA, and we do not meet the thresholds that bring a business under those laws. There is nothing to request access to, correction of, or deletion of from us, because we hold nothing about you.

Users in the EU and UK

We do not process your personal data, so there is no controller-style processing for the GDPR to attach to. The rights it grants, access, correction, erasure, and portability, are already fully in your hands: your data is on your phone, exportable from the app whenever you like, and deletable by you as described above.

International transfers

We transfer nothing across any border. The only way your data crosses one is through your own Apple, Google, or Exchange account syncing it for you, under that account's terms.

Changes to this policy

If this policy changes, the updated version ships inside an app update with a new effective date at the top, and the same text replaces this one at the hosted address. A change will never quietly loosen what happens to your data; anything that moves your words somewhere new will be stated as plainly as everything above.

If you are reading this on a web page, that page is a static copy of this text: it sets no cookies and runs no analytics.

Contact

sam@musicdisciple.com