Privacy Policy

Last updated: 12 September 2026

Jupiter Optimus is built to keep your data yours. We operate no servers, use no analytics, advertising, or tracking, and we don't collect or receive your personal data. This is reflected in our App Store privacy label: Data Not Collected. This policy explains what the app does with your information.

Your tasks (iCloud)

Your tasks, projects, and related content are stored in your own private iCloud database via Apple CloudKit and sync across your devices. That includes the files and images you attach to tasks and notes, and — if you use the AI assistant — the transcripts of those conversations, so they follow you between your own devices. We operate no server that stores or can read your task data; storage and sync are handled by Apple under Apple's iCloud terms.

Vault

Each project can hold a small vault for short pieces of text you would rather not keep in plain view. Vault items are encrypted on your device (AES-GCM through Apple's CryptoKit) before they are stored, and only the encrypted form is saved in your private iCloud database and included in backups. The key is created on your device the first time you unlock the vault and kept in your iCloud Keychain, so your other devices signed into the same Apple Account can open it; it is never sent to us and we have no way to read or recover a vault. Opening the vault requires Face ID, Touch ID or your device passcode, and it locks again on its own. Vault contents are never indexed for search, never shown in widgets, and never included in what the AI assistant sees. If iCloud Keychain is off on a device, the vault cannot be opened there; if the key is lost from every device, the items cannot be decrypted by anyone.

Backups (iCloud Drive)

Once a day, the app writes a backup of your tasks and their attachments to its own folder in your iCloud Drive, so a mistake or a lost device stays recoverable. It keeps the last seven and you can turn it off in Settings. The file stays inside your own Apple account — we never receive it and it is shared with no one. You can open, move or delete it yourself in Files or Finder, and you can export or restore a backup manually at any time.

AI assistant (Maximus)

When you use Maximus, your prompt is sent directly from your device to the AI provider you configured (for example Anthropic, OpenAI, Google, or any OpenAI-compatible endpoint, including a model server you run yourself) using your own API key. So that the assistant can answer questions about your work, each request also includes an overview of your current tasks: titles, project names, priorities and due dates for the items that are overdue, due soon, stale, or completed in the last seven days. If you ask the assistant to suggest subtasks for a particular task, that task’s notes are sent with it. Attachments and images are never sent. We operate no AI servers and do not receive, store, or relay this data. Your data is governed by that provider's privacy policy. We ask for your permission before anything is sent the first time. Most of what the assistant does is a proposal you confirm before anything changes; asking it to suggest subtasks for a task adds them to that task directly, and you can delete any you do not want.

GitHub & GitLab

If you connect GitHub or GitLab, the access token you authorize is used only to exchange issue and pull-request data directly between your device and that service's API. We operate no intermediary server.

How much access you grant is your choice. A personal access token can be scoped to just the repositories and permissions the app needs, and that is what we recommend. The one-tap “Sign in with GitHub” option is quicker but grants the classic repo scope, which is read and write access to all of your repositories, including private ones — GitHub’s device sign-in cannot request anything narrower. You can revoke either at any time from your GitHub or GitLab account settings.

Writing back to your repository is off by default. If you turn on “Close issue when task is completed” in Settings, then completing a linked task closes its issue and un-completing it reopens the issue, without asking again each time — turning the setting on is the consent. Creating an issue from a task (since 1.6) is the other write: it happens only when you press Create in the task, and it sends the title, description and the tags you chose to the repository you picked. Everything else the app does with your repositories is read-only.

Keys & tokens

Your AI provider API keys and Git access tokens are stored in the Apple Keychain on your device and are never synced or sent to us. You can remove a key or revoke a token at any time in Settings to stop further data sharing. The vault key is the one item that does sync, through your own iCloud Keychain, so that your other devices can open the vault.

Apple Reminders & Calendar

With your permission, the app can import your Apple Reminders as tasks and add due-dated tasks to your Calendar. This stays within Apple's apps on your device. Local notifications and iCloud sync may use Apple's push notification service, handled by Apple.

Purchases

Jupiter Optimus is a paid subscription. Purchases, the free trial, and renewals are processed by Apple through the App Store — we never see or receive your payment details. Apple tells the app whether your subscription is active so it can unlock features; we store no billing information and operate no payment server.

No tracking

We use no analytics, advertising, or tracking SDKs. We do not track you across other companies' apps or websites, and we do not share any data with data brokers. The statistics share card is rendered on your device and leaves it only through the share sheet you open, to the recipient you choose.

Retention & deletion

Because your data lives in your own iCloud, you control it: delete tasks and vault items in the app, or remove the app's iCloud data through your Apple account. Revoke AI and Git access at any time by removing the relevant key or token in Settings. Because we collect no personal data, data-protection requests under laws such as the GDPR and CCPA generally do not apply to us — the data you create remains under your control, on your device and in your own iCloud.

Third-party services

Any third party you choose to connect — your AI provider, GitHub, or GitLab — handles your data under its own published privacy policy and is expected to protect it accordingly. Please review each provider's policy before connecting.

Children

Jupiter Optimus is not directed to children and does not knowingly collect personal data from anyone.

Changes

We may update this policy as the app evolves. Material changes will be reflected here with a new “last updated” date.

Contact

Questions about this policy? Email [email protected].