Privacy
My Next Studio is built on a simple principle: your content belongs to you. Every app in the My Next family is designed to work without an account, without ads, and without sending anything you write to us.
Your todos, lists, and notes stay on your device. There are no advertising SDKs, no advertising tracking across other apps or websites, and no data sold to data brokers. Privacy is not a feature — it is the baseline.
Two limited things do leave the device, and neither of them is your content.
The first is anonymous product analytics: a record that an app was opened, which app it was, whether the launch was cold or warm, the app's language, a timestamp, and a randomly generated anonymous identifier used only to group app-opening events. Nothing you write is included. It exists so we can tell whether the apps are being used and what to improve — and you can turn it off completely in each app's Settings.
The second is subscription information, handled by RevenueCat. To offer My Next: Extra, each app sends RevenueCat a randomly generated customer ID — no name, no email address, no account ID — and RevenueCat processes the purchase and entitlement status Apple reports. It validates receipts, prevents fraud, unlocks and restores Extra, and shares one Extra subscription across Todo, List, and Note. Apple processes every payment, so no card details reach us or RevenueCat, and none of it is used for advertising or cross-company tracking. Because Extra cannot work without it, this one is not covered by the analytics switch.
That customer ID lives in a shared keychain entry on your own device, which is how one subscription unlocks all three apps without an account. It also travels inside your backup file so Extra can follow you to a replacement phone — which is a good reason to treat backup files as private.
When sync is introduced in future versions, it will be opt-in and built with the same principles: you control your content, and you choose where it lives.
Each app's policy below sets out exactly what is sent to whom, what is never sent, what happens when you switch analytics off, and why subscription processing sits outside that switch.