Who's responsible
Kian Jain, Sonnenstr. 83, 40227 Düsseldorf, Germany, info@prodline.build (the controller under the GDPR). See the Impressum.
The short version
- No account, no ads, no analytics SDKs, no tracking.
- Your projects, goals and numbers live on your iPhone and in your own private iCloud.
- API keys stay in the iOS Keychain and go only to the service they belong to. Social sign-ins pass through our relay once and aren't kept there.
- The optional relay keeps only what it needs to send pushes to your device.
- Waitlist emails are used for beta invites and nothing else.
Data on your device and in iCloud
Projects, checkpoints, goals, metrics, cover photos and your progress (streak, XP) are stored on your iPhone with Apple's SwiftData and synced through your private iCloud database (CloudKit). Apple stores this data; we can't read it. Widgets and Live Activities read a copy that stays on the device.
Keys and connected services
When you connect a service such as Stripe, App Store Connect, YouTube or GitHub, the key or token you enter is stored in the iOS Keychain (and your iCloud Keychain if it's on). The app calls each service directly from your iPhone to fetch your numbers or repository data. Those requests are handled under that service's own privacy policy. Prodline doesn't send your keys or the fetched data to any server of ours.
TikTok, Instagram and Threads only issue access to a server that holds Prodline's app credentials, so signing in to them goes through Prodline's relay: it receives the sign-in code from the service, exchanges it for read-only tokens, and holds them for at most a few minutes until your iPhone collects them, then deletes them. For TikTok, the relay also renews the token about once a day when your iPhone asks; it passes the new token straight back and doesn't store it. After that, the app talks to these services directly, like the others.
Instant updates relay (optional)
If instant updates are on, the app registers with Prodline's relay, which runs on Cloudflare Workers. The relay stores:
- a random device ID, a hash of a random device secret, and the Apple push tokens for your device;
- for each project with a GitHub webhook: a random webhook ID, its secret and the device IDs that follow it;
- for deadline Live Activities that start while the app is closed: the project name, checkpoint title, up to three goal titles and the deadline, for the coming week.
It uses this only to send pushes to your device. Schedule entries are replaced each time your device updates them and removed once used. GitHub webhook contents are not stored. Turn the relay off under Me → Configuration, and ask us to delete your entries at any time.
Notifications
All notifications (reminders, streak nudges, weekly wraps and win notifications) are created on your iPhone. With instant updates on, the relay sends silent pushes through Apple's push service to wake the app, and starts deadline Live Activities while the app is closed; those pushes carry only the webhook ID, repository name, event type and number of commits, or the deadline details listed above.
On-device suggestions
Suggested goals are drafted on your iPhone with Apple Intelligence. Nothing is sent to us.
This website and the waitlist
The website uses no cookies and no analytics. If you join the waitlist, we store your email address and the time you signed up, on Cloudflare, to send you a TestFlight invite. We don't share it or use it for marketing. Ask us and we'll delete it.
Children
Prodline is not directed at children under 13 and we don't knowingly collect their data.
Legal bases and processors
The relay processes data to provide the features you turn on (Art. 6(1)(b) GDPR). The waitlist relies on your consent when you sign up (Art. 6(1)(a)), which you can withdraw at any time. The relay, the waitlist and this website run on Cloudflare (Cloudflare, Inc., USA) as our processor, under the EU–US Data Privacy Framework and standard contractual clauses. Cloudflare briefly processes IP addresses to deliver and protect the service.
Your rights
You can see and delete your data in the app at any time (Me → Delete all data). Under the GDPR you also have the right to access, correct, delete, restrict or port your data, to object to processing, and to withdraw consent. For relay or waitlist data, or any privacy question, contact us and we'll respond within 30 days. You can also complain to a data protection authority, for example the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen.
Changes
If this policy changes, we'll update this page and its effective date. Significant changes will be announced in the app.