Who runs Cue
Cue is made and run by Zach Waterfield, an independent developer (“I” and “me” below). If you have a question about your data, email [email protected].
What Cue collects
On a Mac or iPhone without sync, nothing. Your notes live on your device, and Cue doesn’t talk to any server of its own. The Mac app asks GitHub every few hours whether there’s a newer version of Cue, and downloads it from there if there is. That request carries nothing about you or your notes, though GitHub sees your IP address, as any website would.
With an account, which sync uses on the Mac and iPhone, Cue stores:
- Your email address, to sign you in and send your sign-in codes. With Sign in with Apple, Apple gives Cue an account identifier and an email address, which can be a private relay address, and your name if you choose to share it.
- Your notes: each line’s text, its date and place in the day, whether it’s done, and when it was created and last changed. Each change also carries a random code made by the copy of Cue that made it, so sync can settle two edits to the same line. It isn’t tied to your device’s hardware or used to track you.
- When you agreed to the Terms and this policy, and which version.
- Request logs kept by the hosting providers below, such as IP address and time, for security and fixing problems. They’re kept briefly and aren’t used to profile you.
That’s everything. No contacts, location, advertising or hardware identifiers, or usage analytics.
How it’s used
Only to run Cue: signing you in, keeping your notes in sync, keeping the service secure, and replying when you write to me. I don’t sell your data, share it for advertising, or use it to build a profile of you. I don’t read your notes, unless you ask me to help with a problem in your account or the law requires it.
Notes are encrypted in transit and at rest, but they aren’t end-to-end encrypted: the server can read them so that it can sync them and serve the assistants you connect. Inside the database, row-level security means an account can only ever read its own rows, and that rule is checked on every read and write, including the ones an assistant makes.
Who else is involved
A few services run parts of Cue for me, and use your data only to do that:
- Supabase hosts the database and sign-in, so it stores your account and notes.
- An email delivery service sends your sign-in codes.
- Apple handles Sign in with Apple, and distributes the iPhone app through TestFlight.
- Vercel hosts this website and passes assistant requests on to Supabase.
That is the whole list. The only servers Cue has are the Postgres database at Supabase, with the sign-in and the assistant endpoint that sit on it, and this website. They may store and process data in the United States and other countries.
What you choose to connect
- Assistants. If you connect Claude, ChatGPT or another assistant, it can read and edit your days for you, and what it does with them is covered by its own privacy policy. You can disconnect one at any time at usecue.today/oauth/consent.
- Link previews. When a line is only a link, your device fetches that page to show its title and image, just as if you’d opened it. Cue’s servers aren’t involved.
- Reporting an issue opens GitHub, where what you post is public.
This website
No cookies, analytics or trackers, and the fonts are served from this site. The page for connecting assistants loads its sign-in library from jsDelivr, a public code host.
Keeping and deleting your data
Your notes are kept for as long as you have an account. Delete it any time in Cue’s Settings, on the Mac or the iPhone, and your account and notes are deleted from the server straight away. Copies can stay in Supabase’s backups for up to 30 days, and copies on your own devices stay until you remove them. You can export everything from the Mac, as Markdown or JSON, at any time.
Your rights
Wherever you live, you can see, export, correct and delete your data. Most of that you can do yourself in Cue; for anything else, email me and I’ll reply within 30 days. If you’re in the EU or UK, I handle your data because it’s needed to provide the service you signed up for, and you can also complain to your local data protection authority.
Children
Cue isn’t meant for children under 13, or the minimum age where you live, and I don’t knowingly collect their data.
Changes
If this policy changes, the date at the top changes too. If it’s a significant change, I’ll tell you in the app or by email before it takes effect.