Trayzero Privacy Policy

Effective date: 2026-06-01 App: Trayzero (package app.cleartray on Android and iOS) Publisher contact: support@trayzero.app

Trayzero is an independent productivity app inspired by the Getting Things Done® (GTD) methodology. This policy explains exactly what the app does — and does not do — with your data.

The short version: everything you put into Trayzero — your tasks, notes, and attachments — lives on your device. The app has no user account, no server backend for your task content, and no analytics SDKs. Two narrow exceptions involve data leaving your device, and only these: opt-in crash reporting (off by default), and, if you choose to make an in-app purchase, the purchase record needed to deliver and restore it. Both are detailed below. Neither is linked to your identity or used for advertising.

Data you create in the app

Everything you capture in Trayzero — items, projects, contexts, areas, attachments (photos, voice memos), reviews, settings — is written to a local SQLite database in the app's private storage on your device.

We do not transmit this content anywhere. There is no cloud sync, no remote backup, no "Trayzero account." We cannot see your tasks, your notes, or any attachments.

If you uninstall the app, this content is removed by the operating system along with the app's storage. We hold no copy of your task content to delete on request, because your tasks, notes, and attachments never leave your device. (The separate purchase and crash-report data described below is covered under "Data deletion requests.")

Backup and restore

Trayzero includes a JSON export/import in Settings → Backup. When you tap Export, the app writes a JSON file and hands it to the system share sheet. From there you choose where it goes (Files, Drive, email, another app). The file is your data, in plain JSON, under your control. We never receive it.

Restoring works the same way in reverse: you pick a previously exported file and the app reads it locally.

Permissions and why we ask for them

Each permission is used only for the feature named, and the resulting data stays on your device.

Permission	What it enables	Data leaves device?
Notifications	Show reminder notifications (due dates, weekly-review nudge).	No
Exact alarms	Fire reminders at the exact scheduled minute.	No
Run after reboot	Re-arm pending reminders after a reboot or app update.	No
Microphone	Voice-to-text capture and voice-memo attachments. Speech-to-text routes through your device's configured recognizer; audio attachments are stored locally.	Speech-to-text uses your device's recognizer (see its policy). Audio files never leave the device.
Camera	Attach freshly taken photos to items. Gallery picks go through the system photo picker. Photos are copied into the app's private storage.	No
Calendar	Opt-in two-way sync with your system calendar. Disabled until you turn it on. Dated items mirror into a Trayzero-owned calendar on your device.	No — only the on-device system calendar is touched.
Internet	Declared so in-app purchases, optional crash reporting, and link-opening can work. The app performs no network requests with your task content.	Only purchase data (if you buy), crash reports (if enabled), or when you tap a link.

Crash reporting — opt-in, off by default

The app ships with Sentry crash reporting integrated, but disabled. The toggle lives in Settings → Privacy; the default is off.

If you turn it on, uncaught crashes and unhandled errors are sent to Sentry (Functional Software Inc.). We configure Sentry with personally-identifying data and screenshots disabled, and use a low trace-sample rate. We do not attach your item content or attachments. You can turn it back off at any time.

Sentry's own privacy policy: https://sentry.io/privacy/

In-app purchases

Trayzero is free, and every feature works without paying. The app offers optional in-app purchases: two one-time "tips" and a "Supporter" subscription (monthly or yearly) that simply shows a thank-you. They unlock nothing functional.

Payment itself is handled entirely by the App Store (Apple) or Google Play (Google) — Trayzero never sees or receives your card or bank details.

To deliver, restore, and validate these purchases, the app uses RevenueCat (RevenueCat, Inc.) as a processor. When the app starts and when you make or restore a purchase, RevenueCat records your purchase history and an anonymous app-user/device identifier. This is used only to provide the purchase functionality (entitlement delivery and restore). It is not linked to your identity (there is no account), and it is never used for advertising, marketing, tracking, or sold to anyone.

RevenueCat's own privacy policy: https://www.revenuecat.com/privacy/ Apple's and Google's handling of the payment is governed by their respective policies.

Data deletion requests

Your task content lives only on your device — uninstalling removes it, and we hold no copy. For the two categories that do leave the device:

Crash reports (Sentry): turn the opt-in off in Settings → Privacy to stop future reports, and email support@trayzero.app to have past reports deleted.
Purchase records (RevenueCat): email support@trayzero.app and we will delete the associated records.

We action verified deletion requests within 30 days.

Website analytics

This marketing website uses Vercel Web Analytics to understand aggregate page traffic. That website measurement is separate from the Trayzero mobile app: it does not send your task data, notes, projects, attachments, backups, or app settings anywhere.

What we do not do

We do not show ads.
We do not run analytics SDKs in the mobile app.
We do not have user accounts.
We do not sell, share, rent, or trade any data.
We do not use your data for advertising, marketing, or any kind of profiling.
We do not run a Trayzero server for your task content — your tasks, notes, and attachments are never sent anywhere. The only outbound traffic is to our processors (RevenueCat for purchases; Sentry for crash reports, if you opt in) and any link you tap.