Privacy Policy

Last updated: November 4, 2026 · Sudohnim

Sudohnim ("we", "our", or "us") builds mobile apps. This Privacy Policy explains how we handle information across all of our products. We believe in collecting as little data as possible — only what's strictly necessary to deliver the app experience.

1. Who This Covers

This policy applies to all apps published by Sudohnim, including:

Stance Lab — a drill training app for wrestlers (iOS and Android)

dequeue — a task-management ("to-do") app with cross-device sync (coming soon)

enqueue - a private second brain for notes, links and files, on Mac and Android, with optional end-to-end encrypted sync

As we publish additional apps, they will be listed here and covered by this policy.

2. What We Collect

How much we collect depends on the app. Stance Lab requires no account and collects no information that identifies you personally. dequeue requires you to sign in and syncs your data across devices, so it necessarily collects more — detailed below. enqueue works without an account. Signing in is only for its optional hosted sync (enqueue sync) and the AI included with it. The library it syncs is encrypted on your device so that we cannot read it; text you send to the included AI passes through our server on its way to the AI provider, as described in section 4.

Across all apps:

Anonymous user ID — a randomly generated identifier used to track purchase status via RevenueCat.
Purchase history — if you make an in-app purchase, transaction data (product ID, purchase date, entitlement status) is processed by RevenueCat and the relevant app store (Apple or Google) to verify and restore your purchase.
Device identifiers — standard identifiers used by Apple App Store and Google Play as part of their in-app purchase infrastructure.

dequeue only:

Account identity — you sign in with Google or Apple. We receive and store your email address (with Apple, this may be a private relay address you choose), your Google or Apple account identifier, your display name, and, with Google only, the web address of your profile picture. We never receive your password. You can also continue without an account: we then make a random guest account that holds no email or name of yours.
Your content — the tasks, lists, and settings you create in dequeue are stored on our servers so they sync across your devices.
Devices — a list of the devices you use dequeue on, each with a name and type (for example "Mac" or "iPhone") and when it was last seen, so you can see and remove them.
Google Calendar (optional) - if you connect Google Calendar, we store the access it grants (encrypted), your Google email and the id of the "Dequeue" calendar we create for you, so tasks with a due date appear as events in that calendar. You can connect more than one Google account in Settings > Calendars. For each account we read the list of its calendars, so you can choose which ones to show, and the events of the days you are looking at from those calendars, to show them in your task queue and the date picker; we keep them for at most a minute and never store them otherwise. We store only which calendars you turned on or off.
Usage events — when you take an action such as creating, completing or deleting a task, our server records that the action happened, with a few details about it (for example whether the task has a due time or is recurring, or how many items a list has). The event is tied to your random dequeue account ID, not your email or name. It never holds the text of a task, a list or a note.
Error reports — when something fails on our server, it records the kind of error, where in dequeue's code it happened, the request that caused it (its method and path), your app's user agent, and your random dequeue account ID. It never holds the text of your tasks.

enqueue only (if you use enqueue sync):

Account identity - you sign in with Google or Apple. We receive and store your email address (with Apple, this may be a private relay address you choose), your Google or Apple account identifier, your display name, and, with Google only, the web address of your profile picture. We never receive your password.
Linked devices - a list of the devices you link, each with a name (for example your Mac's computer name, or "Phone"), when it was added and when it last synced, so you can see and remove them.
Encrypted library - your notes, links, files and settings are encrypted on your device before they are uploaded, with a key we never have. We store this encrypted copy and can see only how many items there are, their approximate sizes (rounded into broad size groups) and when they change. We cannot read, search or recover what is inside.
Your plan - whether you are on the free plan or enqueue Pro, and until when Pro lasts. It is attached to your enqueue sync account so that all your devices see it.
Included AI usage - if you use the AI included with enqueue, for each calendar month: how many requests you made, how many tokens they used and what they cost us. We keep these counts to apply your plan's monthly limit. We never keep the text of a request or an answer.

enqueue error reports (all enqueue users, unless you turn them off):

What breaks - when something goes wrong in the app, it sends a short error report: the kind of error, where in enqueue's code it happened (file, function and line), which part of the app it was (for example sync or search), the app version, whether it was the Mac, Android or iPhone app, and your operating system version.
A random install ID - each installation makes a random identifier so repeated reports from one device can be counted together. It is not linked to your enqueue sync account, your email or your name.
What is never in a report - nothing you saved, searched for or asked, no titles, no file names, no web addresses, no IP address and no location. Error messages are cleaned on your device before they are sent: anything quoted, any web address, e-mail address, identifier or long token is removed.
Turning it off - in enqueue on the Mac, Settings, Activity, switch off "Send error reports". Your phone follows your Mac.

3. How We Use It

To verify and restore purchases across devices.
To unlock features tied to your purchase entitlement.
(dequeue) To authenticate your account and sync your tasks across your devices.
(dequeue) To understand which features are used and to find and fix errors, from the usage events and error reports described above.
(enqueue) To authenticate your account, keep your devices linked, and pass your encrypted library between them.
(enqueue) To run the included AI for you, to apply the models and monthly limit of your plan, and to know whether you have enqueue Pro.
(enqueue) To find and fix errors in the app, from the error reports described above.

We do not use any data for advertising or profiling. Apart from the dequeue usage events above, we do not use any data for usage analytics, or for any purpose beyond delivering, improving and fixing our apps. We do not sell your data.

4. App-Specific Notes

Stance Lab

Speech synthesis — the app uses your device's built-in text-to-speech engine to call out drill cues. This runs entirely on-device. No audio is recorded, transmitted, or stored.
No health data — the app does not access or store any health or fitness data from your device.

dequeue

Sign-in — dequeue signs you in with Google (basic profile and email scope only) or Sign in with Apple. We never receive your password.
Cloud sync — your tasks and lists are stored on our servers and transmitted over encrypted (HTTPS) connections so they stay in sync across your devices. Each device also keeps a copy of your tasks so that it works offline.
Google Calendar - only if you connect it. dequeue asks only for permission to make its own calendars. It creates one calendar named "Dequeue" and writes the events for your dated tasks there. It cannot change your other calendars or events. For the accounts you connect in Settings > Calendars, dequeue also reads the list of your calendars and, from the ones you turn on, the events for the days you are looking at, and shows them in your task queue and the date picker on your device; it does not store them beyond a minute of caching. Turning a calendar off stops reading it. When you remove an account in Settings > Calendars, dequeue gives up its access, and deletes the "Dequeue" calendar if that account held it.
Reminders — task reminders are scheduled on your device. No push service receives your tasks.

enqueue

Local first - your library lives on your Mac, and the Android app keeps an encrypted copy on your phone. If you use neither enqueue sync nor the included AI, nothing you save in enqueue reaches our servers.
End-to-end encryption - the key that opens your library never leaves your devices and is never sent to us. Signing in proves who you are; it does not give us, or anyone holding your account, the ability to read your library.
Linking devices - to add a device you use a one-time linking code. Codes that are not used expire after 30 minutes. Removing a device cuts it off from sync at once. Each device has its own secret for talking to our server, and we blank these out of our server logs.
AI features with your own key - if you turn on an AI feature, you choose the AI provider and bring your own key (for example Anthropic, OpenAI, OpenRouter or OpenCode Go), or run a model on your own Mac through Ollama, in which case nothing leaves your Mac. Your device sends the text that feature needs directly to that provider, under that provider's terms. That text does not pass through any Sudohnim server.
What never goes to an online AI - items you mark as local-only are never sent to an online model. Text that looks like a password or an API key is blanked out before anything is sent to an online model.
Included AI - if you are signed in to enqueue sync and choose "Included with enqueue" as your assistant, AI features work without a key of your own: fast models with a monthly limit on the free plan, and more models and a higher limit with enqueue Pro. The text a feature needs (for example the notes that answer a question, or a note being summarized) is sent from your device to our server, which passes it to OpenRouter, which passes it to the company that runs the model you picked (Anthropic, OpenAI, Google, DeepSeek or Alibaba). We do not store or log that text, and the reply is passed back to your device the same way. We ask OpenRouter to use only providers that do not store prompts or train on them. Local-only items are never sent. Bringing your own key stays available on every plan and keeps the direct path described above.
Link previews - when you save a link, your device fetches that page itself to build a preview. You can turn this off.
Backups - backups go to a folder you pick (for example one synced by Proton Drive). They are encrypted with your library key before they leave your Mac.

5. Third-Party Services

RevenueCat — we use RevenueCat to manage in-app purchases and entitlement status across all our apps. RevenueCat receives your anonymous user ID and purchase data. See RevenueCat's Privacy Policy.

Google Sign-In (dequeue, enqueue) — used to authenticate your account. Governed by Google's Privacy Policy.

Sign in with Apple (dequeue, enqueue) - used to authenticate your account. Governed by Apple's Privacy Policy.

Railway (dequeue, enqueue) - hosts the dequeue server and its database, which hold your account, tasks and settings. It also hosts enqueue sync: an app server and a database that holds accounts and linked devices. It also stores your encrypted library, which it cannot read either.

AI providers (enqueue) - if you bring your own key, your device talks to the provider you choose directly, and that provider's privacy policy applies. If you use the included AI, we pass the text a feature needs to OpenRouter, which passes it to the company that runs the model you picked. Their policies apply to that text, and we route only to providers that do not store prompts or train on them.

RevenueCat and app stores for enqueue Pro - enqueue Pro is sold as a subscription through Google Play (the Apple App Store will follow), managed with RevenueCat. For enqueue, the user ID RevenueCat receives is your enqueue sync account ID, a random identifier and not your email, so that a purchase on your phone reaches every device on your account. RevenueCat tells our server when Pro starts, renews or ends, and we attach that to your account.

PostHog (dequeue, enqueue) - receives the dequeue usage events and error reports, and the enqueue error reports, described in section 2, in the United States, with IP addresses discarded. See PostHog's Privacy Policy.

Apple App Store / Google Play — purchases are processed by Apple or Google. Their privacy policies govern how payment and transaction data are handled.

6. Data Retention

Stance Lab: your anonymous user ID is stored on your device and persists until you delete the app; we maintain no independent user database. dequeue: your account identity and task data are retained until you delete your account, after which they are removed from our active systems. Completed tasks are deleted 7 days after you complete them, inbox tasks expire after the window you set, and deleted tasks are removed for good after 30 days. Usage events and error reports are kept in PostHog for as long as its plan keeps events (currently up to one year). enqueue: your account, device list, plan, monthly included-AI usage counts and encrypted library are kept until you delete your account; the text you send to the included AI is never kept. Unused linking codes expire after 30 minutes. Error reports are kept in PostHog for as long as its plan keeps events (currently up to one year), and are not linked to your account. Deleting your account ends every device at once and removes your encrypted library from our servers. The copy on your own devices stays yours. RevenueCat, Apple, and Google retain purchase records per their own data retention policies.

7. Children's Privacy

Our apps are not directed at children under 13. We do not knowingly collect any personal information from children.

8. Your Rights

Stance Lab: we hold no identity-linked data — to reset your anonymous user ID, delete and reinstall the app. dequeue: you may delete your account and all associated task data from the app's settings. To get a copy of your data, email hello@sudohnim.com. enqueue: you may remove any device or delete your account from the app's settings, or by emailing the same address. You can switch off error reports at any time in Settings, Activity. Because we cannot read your library, we cannot export it for you; your devices already hold it in full. For data held by RevenueCat, Apple, or Google, contact those services directly.

9. Changes to This Policy

We may update this policy as we ship new apps or change our data practices. The "last updated" date above will always reflect the most recent version. Continued use of our apps constitutes acceptance of the updated policy.

10. Contact

Questions? Reach us at hello@sudohnim.com