Privacy Policy

Last updated 27 October 2026

Unmiss is made by MainGauge ("we"). This policy covers the Unmiss app and this website. It is written plainly and is not legal advice.

Using Unmiss on your own

Unmiss needs no account. If you use it by yourself and do not turn on backup, what you write in it, such as the names of your to-dos, routines, reminders, steps and focus blocks, and your notes, stays on your device. We never receive it, and there is nothing for us to hold. When you tick something off, the app records that it happened, along with the usage events described under Analytics.

If you scan a written list, Unmiss uses your camera to read the text, and the reading happens on your device. The photo is never saved or sent anywhere; only the to-dos you choose to add are kept, on your device.

If you sign in

Signing in is optional. You can sign in with Apple or with Google to turn on backup, to use Unmiss on more than one device, or to invite an accountability partner.

• Sign in with Apple: the app asks Apple for your name only, never your email address. We keep an identifier Apple gives us for your account, and your first name.
• Sign in with Google: Google gives us your email address, your name and an identifier for your Google account. We keep these with your Unmiss account and use them only to sign you in and to tell accounts apart. No part of Unmiss shows your email address or your full name to anyone, and only your first name can ever reach a partner.

Apple or Google knows that you signed in to Unmiss with them. Unmiss's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use it for advertising, we do not sell it, and we do not use it to train AI models.

Backup and sync

If you turn on backup, Unmiss sends a copy of what you keep in it to our servers: your to-dos with their notes and subtasks, your lists, routines and their steps, planned focus blocks, what you answered and finished, and your settings. Each item is encrypted on your device before it leaves, with a key we never receive. The key is kept in your iCloud Keychain, and the recovery code you can save also opens it. We cannot read your backup, and nobody else can without one of your devices or your recovery code. With Unmiss Plus, the same encrypted copy keeps your devices in step.

To keep the backup working, our servers do see some things about it: which account it belongs to; how many items it holds and roughly how large each one is; when each of your devices sends changes and when each is connected; how many devices you use, with each one's notification token and the public keys used to approve a new device; whether you subscribe to Plus; and your IP address when a device connects. Your devices' names are encrypted like everything else.

A device you remove from your backup keeps what it had already downloaded. If you lose every device and your recovery code, nobody, including us, can open the backup. Apple protects your iCloud Keychain under its own terms, unlocked by your device passcode.

If you invite an accountability partner

Sharing a reminder or a routine with a partner is the only way any of that content reaches us in a form we can read. It is opt-in, per reminder or routine, and you can turn it off. While it is on we store:

• Your account's identifier (see If you sign in), which is how we know two accounts are paired.
• Your first name only, so your partner sees who they are supporting. Our server rejects anything longer, so a surname or an email address typed into that field is discarded before it is stored.
• The title of each reminder or routine you share, with when it is due (for a routine, when it starts and ends) and whether you confirmed or kept it. Your partner sees the title in the notification they receive. Nothing about the steps inside a routine is sent to your partner or stored on our servers: not their names or how many there are. The start and end we store are the routine's, which for most routines are also its first step's time and its last step's end.
• A notification token for your device, so Apple can deliver that notification.
• A one-way hash of a confirmation secret, so a confirmation can be proven to have come from your device. We do not store the secret itself.

Your partner sees your first name and the titles of the reminders and routines you chose to share. They never see your other reminders or routines, your email, your payment details, or anything about your subscription.

Unmiss Plus and your subscription

Apple processes the payment. We never see your card, your billing address, or your Apple ID. What your device reports to us is the status of the subscription: when the current period ends, whether it renews monthly or yearly, whether it is set to auto-renew, and, if it stopped, Apple's reason. We use that to know whether your subscription is active.

If you are signed in, the status is reported for your account whether you back up or not, so a device that cannot reach Apple still knows your plan. Whether or not you subscribe, Unmiss asks RevenueCat whether Plus is active each time it starts. RevenueCat receives the purchase information Apple provides, such as which plan you bought and when, together with a random identifier its software creates for this installation and the usual details of a network request, such as the app version, your language and your IP address. We do not give RevenueCat your name, your email, or your Apple ID, and Unmiss does not connect that identifier to your account.

Analytics

In-app analytics are processed by PostHog and measure how features are used, not who used them. While we move to PostHog, most of the same events also go to TelemetryDeck, which we used before.

The app sends PostHog what happened, such as a routine being kept or a focus block ending, together with details about the device and app (the model, the iOS version, the app version and how it was installed, the screen size, the language, whether it is on Wi-Fi or cellular, and a session identifier) and a few facts about how you use Unmiss: whether you subscribe to Plus, which sign-in method you used (Apple or Google, never your email), whether you have finished setting it up, and whether you have an accountability partner or are one, never who. When you run a routine, it also sends how many steps the run had and how many you finished or skipped, never their names. It never sends a name, an email, the title of a reminder, routine, step or to-do, a note, or anything about your partner.

PostHog groups the events from your device by an identifier the app creates from random numbers and the time it was created, and keeps on the device. It is sent as it is, and it is not made from anything that names you. That identifier belongs to this installation of Unmiss and not to you, so two of your devices count as two. Deleting your account from inside the app replaces it with a new one, and so does removing Unmiss and installing it again. TelemetryDeck instead groups events by a one-way digest of an identifier your device generates for our apps, which resets if you remove all our apps and install again. TelemetryDeck also adds its own standard details, such as time zone, accessibility settings and screen orientation, and records when a session starts.

PostHog stores this data in the United States. It is set to discard your IP address, and Unmiss never asks for your location. (If you sign in with Google, Google's sign-in library may record approximate location under Google's own policy.) The app does send two settings from your phone: its region, which is a country or territory such as Canada, and its time zone.

A small number of events about subscriptions that stopped are sent from our server instead, to PostHog and, during the move, to TelemetryDeck. Those are grouped by a one-way keyed digest of your account identifier, never by the identifier itself. Website analytics are provided by Cloudflare, count page views and referrers, and use no cookies and no fingerprinting.

Advertising measurement is processed by Meta Platforms, and only if you allow it. Once you have set up Unmiss, your iPhone asks whether Unmiss may track your activity. Meta's software in the app starts only if you choose Allow; until you do, it does not run and Unmiss sends Meta nothing. If you allow it, the app sends Meta an event when Meta's software first starts, each time you open the app, when you subscribe or start a trial (with the plan, its price and currency), and when you first create a routine, first keep one, or first pair with a partner, together with the device and app details Meta's software collects, so we can tell whether an ad led to the install. A subscription that is already active when Meta's software first starts is reported to Meta at that moment. If one of those firsts happens while tracking is not allowed, the app keeps only a note that it happened and sends it if you later allow tracking. Those details include a device identifier, which Meta may use for advertising and analytics; Unmiss turns off Meta's collection of the advertising identifier (IDFA). If you later turn tracking off in your iPhone's Settings, the app stops sending its own events at once; Meta's software, if it is already running, keeps running and may keep reporting until the app is closed, and it does not start again unless you turn tracking back on. Unmiss does not pass Meta any reminder or routine content, name or email.

Email addresses

This website no longer collects email addresses.

Why we collect it

To sign you in, to keep your backup and your devices in step, to deliver the accountability feature you asked for, to know whether your subscription is active, and to make the app work better. We do not build advertising profiles ourselves; Meta's part is described under Analytics.

Where it is stored, and who processes it

Data is stored with Supabase. This website is hosted by Cloudflare. Notifications are delivered by Apple, which also provides Sign in with Apple and processes purchases. Google provides Sign in with Google. Whether your subscription is active is checked through RevenueCat. In-app analytics are processed by PostHog and, until our move to PostHog is complete, by TelemetryDeck. Advertising measurement is processed by Meta Platforms. These providers process data on our behalf, except that Meta may also use what it receives for its own advertising, as described under Analytics. If your data is stored on servers outside Canada, for example in the United States, you consent to that transfer by using Unmiss.

How long we keep it

• Shared reminder and routine titles are deleted. Seven days after a shared reminder's grace period ends, the record is reduced to whether it was confirmed and when; a shared routine's record is deleted whole seven days after its grace period ends. The title is not carried over and is not kept.
• When either of you unpairs, the shared titles are deleted and the pairing ends. Your first name and notification token are kept until you delete your account, and so is the record that a pairing existed, which holds no titles. Deleting your account removes your profile and your pairings.
• Your backup is kept until you stop backing up everywhere, which deletes its contents from our servers, or delete your account.
• Deleting your account deletes your backup, the records of your devices and, if you signed in with Google, the email address and name Google gave us. An account you signed in to and no longer use keeps these until you delete it.
• Subscription status is kept while your account exists.
• PostHog keeps analytics events for one year, the retention that comes with our plan. To have the events from your installation deleted sooner, press and hold the version line in Settings to copy your analytics identifier, and email it to privacy@maingauge.com.

We do not sell your data

We have never sold personal data, and we will not.

Your choices

You can stop sharing any reminder at any time, unpair from a partner, turn off backup on one device or everywhere, or delete your account from inside the app, which removes your profile, your pairings, your shared reminders and your backup. You can ask us to show you, or delete, what we hold by emailing privacy@maingauge.com.

Notifications

Unmiss asks for notification permission when something you set up needs it: a reminder, a nudge, a routine's alerts, or pairing with a partner. Alarms that ring through Silent and Focus have their own iOS permission, asked when you turn one on, and Deep Focus asks for Screen Time access when you choose apps to block. You can decline any of them, and you can change them later in iOS Settings.

Age

Unmiss is not directed to children. Please do not use it if you are under 13.

Contact

MainGauge, privacy@maingauge.com.

Changes

If we change this policy, we will update the date above.