GubernosPrivacy policy
Effective 1 November 2026 · applies to the Gubernos app for iPhone and Apple Watch and to Gubernos for Mac
In short: your tasks, notes, habits and health numbers are stored as plain files in your iCloud folder and on your Mac. The developer runs no server and collects nothing: no account, no analytics, no ads, no tracking.
Who we are
Gubernos is made by Alexander Safonov, an individual developer (“we”). Contact: me@alexandersafonov.com.
What we collect
Nothing. Gubernos has no server of its own, so none of your data reaches us. We can’t see your tasks, and we can’t delete or hand over data we never receive.
Where your data lives
- Your system folder. You pick a folder in iCloud Drive (or Obsidian’s iCloud folder). Gubernos reads and writes Markdown files there. Apple’s iCloud syncs them between your own devices under Apple’s privacy policy.
- On the iPhone. The app keeps its settings, a copy of the folder for offline use and changes waiting to be sent, all in its own storage on the device.
- Your Mac (optional). If you install Gubernos for Mac, the iPhone talks to your own Mac directly over your private Tailscale network. A pairing code keeps other devices out.
Permissions the app asks for
| Permission | What it is for | Where the data goes |
|---|---|---|
| Microphone, Speech Recognition | Dictating tasks and notes | Recognised on the iPhone where the device supports it. With your Mac connected, audio is sent to your Mac and transcribed there (Whisper, locally). A recording is deleted once it has been turned into text. |
| Apple Health (read) | Ticking off habits you link to Health: steps, active energy, water, daylight, mindful minutes, workouts, sleep | Daily totals are written into your daily notes in your folder (and your Mac). Never to us, never to advertisers. |
| Apple Health (write) | Saving the minutes of a mindfulness timer | Apple Health on your devices |
| Notifications | Reminders, check-ins, “agent finished” | Scheduled on the iPhone. Pushes come from your own Mac through Apple Push Notification service; the device token is stored only on your Mac. |
Health data is never used for advertising or sold, and is not shared with anyone except the places you set up yourself.
Services you connect yourself
These are optional and run on your Mac, under your own accounts and their own privacy policies. Gubernos only passes your data to them when you use the feature.
- An AI model (Claude Code by Anthropic, Codex by OpenAI or Gemini CLI by Google), on your own plan or key. When the app triages your inbox, answers in the chat, reads a voice note or runs an agent on a task, the relevant notes go to that provider. Read their terms, especially on free tiers, where a provider may use prompts to improve its models.
- Google Calendar, Gmail, Contacts, Drive, if you connect them on your Mac with your own Google sign-in. The data goes directly between your Mac and Google. Agents may only read it. Nothing is sent and no event is created without your confirmation in the app.
- Oura, if you add your own token on the Mac, for sleep habits.
Bug reports
When you send a bug report or an idea from the app, it becomes a public issue in the app’s GitHub repository, posted under your own GitHub account from your Mac. It contains your text, the screen name, the device and recent errors, and, if Publish screenshots is ticked, a screenshot and a snapshot of the screen, which can show your tasks. Untick it to send only the text. You can delete the issue on GitHub at any time.
If you use TestFlight, Apple shares crash reports and the feedback you send through TestFlight with us, under Apple’s privacy policy.
Children
Gubernos is not directed at children under 13 and collects no data from anyone.
Your choices
Everything Gubernos keeps is in your folder and on your devices: you can read, export, move or delete it at any time with Files, Finder or any text editor. Deleting the app removes its on-device storage. Disconnect a service in Settings, or revoke access in that service’s account settings.
Changes
If this policy changes, the new version will be posted on this page with a new effective date. The history of this page is public in the site’s repository.