HydraTask Privacy Policy

Last updated: September 8, 2026

Who we are

HydraTask is made and published by Khejan [LEGAL REVIEW: full legal entity name, entity type, and mailing address or jurisdiction], referred to in this policy as "we" or "us". This policy covers the HydraTask app for iPhone and Apple Watch, its widgets, and this website.

What HydraTask stores, and where

Your tasks, projects, routines, focus sessions, game progress, settings, and any photos you take as proof of a finished task are stored inside the app, on your device. This data does not leave your device except in the ways you control, described below: exports you make, your device's own backups, and the copy shown on your paired Apple Watch and in your widgets.

Your device's own backups (iCloud Backup or a backup to a computer) may include HydraTask's data, in the same way they include data from other apps. Those backups are made by Apple's software under Apple's privacy policy, and you control them in your device settings.

Deleting HydraTask from your device deletes all of its data, including proof photos. We hold no copy and cannot restore it.

What we collect

Nothing. HydraTask has no account system, no sign-in, no cloud sync, no crash reporting service, and no analytics. The app makes no network requests of its own; the only network activity is Apple's in-app purchase system, described below. In App Store Connect terms, the app's privacy label is Data Not Collected, and the app ships with a privacy manifest that says the same.

Camera and photos

HydraTask asks for camera access only when you choose to attach photo proof to a task that has an accountability partner or, when the feature is available, a guardian. Photos are taken live, stored inside the app on your device, and deleted when the task is approved or declined, or when the task is deleted. HydraTask does not access your photo library. Camera access is optional and the app works fully without it.

Apple Watch and widgets

If you use the HydraTask watch app, your Today's Hydra list is sent to your paired Apple Watch over Apple's device-to-device connection, and completions you make on the watch are sent back to your iPhone. Home-screen and lock-screen widgets, and the Focus timer shown as a Live Activity, read the same data from a container shared between the app and its extensions on your device. None of this passes through us or any server of ours.

Backups you export

You can export an encrypted backup (an .ht3 file, protected with a passphrase you choose using PBKDF2 and AES-GCM). That file goes only where you send it — to Files, iCloud Drive, AirDrop, or wherever you choose. We never receive it, and we cannot recover it if you lose the passphrase.

Purchases and subscriptions

Optional wagons and the Wagoneer Pass are sold through Apple's in-app purchase system. Apple processes the payment and manages subscriptions under Apple's privacy policy. To unlock what you bought, the app reads a signed transaction record from Apple that contains product and transaction identifiers only — no name, email, address, or payment details. That record stays on your device. You can manage or cancel subscriptions in your Apple ID settings.

Siri and Shortcuts

HydraTask offers Siri intents (capture a task, read Today's Hydra, open NOW) and an optional "grey mode" that runs Shortcuts you create yourself. These features run on your device through Apple's frameworks. No request content is sent to us. Apple's handling of Siri requests is governed by Apple's privacy policy.

Family features

Accountability features work on a single device, and guardian features, when available, work the same way. A guardian PIN is stored only as a cryptographic hash on that device. There are no family accounts, no linked devices, and no remote access.

Children

HydraTask is rated 9+. Because we collect no information from anyone, we collect no information from children. If a child uses HydraTask, the data stays on the device it is used on, under the control of whoever manages that device.

Your rights

Because we hold no data about you, there is nothing for us to access, correct, export, or delete on request; every piece of your HydraTask data is already on your device and under your control. If you believe we hold personal information about you (for example, from an email you sent us), contact us at the address below and we will tell you what we have, correct it, or delete it.

If you contact us

If you email us, we receive your email address, your message, and anything you attach. We use that only to reply and to resolve your request, we do not add you to any list, and we delete it when the matter is closed or within [LEGAL REVIEW: retention period, e.g. 12 months] at the latest.

This website

hydratask.com is a static site with no analytics, no advertising, and no tracking cookies. Like any website, it is served by a hosting provider [LEGAL REVIEW: name the host] that may keep ordinary server logs (IP address, browser type, pages requested) for security and operation under its own policy. We do not use those logs to identify visitors.

Changes to this policy

If HydraTask ever adds a feature that sends data anywhere, we will update this page before the feature ships, change the date at the top, and describe the change plainly in the app's release notes.

Contact

Questions about privacy: support [at] hydratask [dot] com