Privacy policy
What we hold, why we hold it, and how to get it back.
Last updated 13 September 2026 · applies to thistleyard.com and the JotNext apps
Who we are
Thistleyard Ltd is the data controller for the information described here. We are registered in England and Wales, company number 17455649, registered office 68 St. Marys Drive, Crawley, England, RH10 3BN. For anything in this policy, write to privacy@thistleyard.com.
What we collect, and why
| What | Why we have it | Lawful basis |
|---|---|---|
| Account details | Your email address, and a one-way hash of your password — never the password itself — so you can sign in and so we can reach you about the service. | Performance of a contract |
| Your content | Tasks, lists, notes, due dates, the places you attach to them, and your app settings. This is the thing the app exists to store and sync between your devices. | Performance of a contract |
| Device tokens | An identifier Apple gives us so notifications can reach your phone or watch. It identifies a device, not you. | Performance of a contract |
| Where you are, for a journey | When you ask how long a journey will take, your starting point and destination are sent to Google to work it out. We do not keep a history of where you have been. | Consent |
| Where you are, for arrival and departure reminders | If you ask to be reminded when you reach or leave a place, iOS watches for that in the background and tells the app. This needs the “Always” location permission. The watching is done by iOS on your device; we do not receive a stream of your position. | Consent |
| Technical logs | IP address, timestamps and error details, kept briefly so we can keep the service running and investigate faults and abuse. | Legitimate interests |
| Crash reports | If you leave Apple’s crash reporting on, Apple sends us anonymised reports — device model, system version, and where the code stopped. You can turn this off in iOS Settings and the app works exactly the same. | Consent, given to Apple |
| Emails you send us | So we can answer you, and so we remember the conversation if you write again. | Legitimate interests |
Where the basis is consent you can withdraw it at any time — in iOS Settings for location, or by turning the feature off in the app. Everything else in the app keeps working.
What stays on your device
If you let JotNext read your Apple Calendar, it does that on your phone, so your day can show your appointments alongside your tasks. Those events are not uploaded to our servers, not stored by us, and not shared with anyone. Turn the permission off in iOS Settings and the app simply stops showing them.
Contacts, photos, health data and your microphone are not used by our apps at all.
If you publish your tasks to another calendar
JotNext can give you a private web address that turns your tasks into a calendar other apps can subscribe to. This is off unless you switch it on. If you then subscribe to it from Google Calendar or Outlook, those companies fetch your task titles and times from us on their own schedule, and what they do with them is governed by their terms, not ours. Subscribing in Apple Calendar on your Mac or iPhone fetches it directly from your device. You can revoke the address at any time in the app, which immediately breaks every subscription made with it.
What we do not do
- No advertising, and no advertising identifiers.
- No selling your personal data, and no sharing it for anyone else’s marketing.
- No analytics or tracking software in the apps or on this website — no Google Analytics, no pixels, no session recording.
- No cookies on this website. We set none at all, which is why there is no cookie banner.
- No profiling and no automated decisions that have a legal or similarly significant effect on you.
This website
The pages you are reading load their typefaces from Google Fonts. That means your browser fetches files from fonts.googleapis.com and fonts.gstatic.com, and Google therefore sees your IP address and which page requested them. Google states it does not use these requests to build advertising profiles, but it is a request to a third party and you should know it happens. Cloudflare hosts the site and processes the same request data on our behalf to serve and protect it.
Who else is involved
Some suppliers act only on our instructions, under written contract, and may not use your information for their own purposes — these are our processors:
- Application hosting and database — to run the service and store your content.
- Email delivery — to send sign-in, invitation and service emails.
- Website hosting — to serve these pages.
Others decide for themselves what they do with the information they receive. They are independent controllers, they are not acting on our instructions, and their own privacy terms apply to that data:
- Google — when you ask for a journey time, and when this website loads its typefaces.
- Apple — to deliver notifications to your devices, and, if you buy a subscription, as the seller who takes the payment. We never see your card details.
- A weather provider — which receives the town you have saved, so the app can show the forecast for your day.
- Google or Microsoft — only if you choose to subscribe to your task calendar from their products, as described above.
We will also disclose information where the law requires it, or to establish or defend legal claims.
Where it is kept
We host in the United Kingdom or the European Economic Area wherever we can. Some of the companies above are based in the United States. Where personal data is transferred outside the UK we rely on the UK International Data Transfer Addendum to the European Commission’s Standard Contractual Clauses, or on UK adequacy regulations. Write to us and we will send you a copy of the safeguards that apply, as you are entitled to ask.
How long we keep it
- Your content and account — for as long as your account exists.
- After you delete your account — removed from live systems promptly. Backups are kept on a rolling cycle and are overwritten within 35 days, so a deleted account disappears from those too within that period.
- Technical logs — normally 30 days.
- Support emails — up to two years.
- Records we must keep by law, such as sales records — for the period the law requires, usually six years.
Keeping it safe
Traffic to and from our servers is encrypted, stored data is encrypted at rest by our hosting providers, passwords are stored only as salted one-way hashes, backups are encrypted, and access is limited to those who need it. No system is perfect; if a breach ever put your rights at risk, we will tell you and the ICO as the law requires.
Children
Our apps are not aimed at children. We do not knowingly collect data from anyone under 13 in the UK, or under the age of consent where you live — which is 16 in some EU countries. If you believe a child has given us information, write to us and we will delete it.
Your rights
Under UK data protection law you may ask us to:
- give you a copy of the personal data we hold about you;
- correct anything that is wrong;
- delete it;
- restrict or object to how we use it;
- send it to you or another provider in a portable format;
- withdraw consent at any time, where consent is the basis — which does not affect what was done before.
Email privacy@thistleyard.com. We answer within one month and it costs you nothing. If you are unhappy with our answer you can complain to the Information Commissioner’s Office at ico.org.uk, though we would rather you gave us the chance to put it right first. If you are in the EU, you may also complain to your own national supervisory authority.
Changes
If we change this policy we will update the date at the top, and for anything significant we will tell you in the app or by email before it takes effect.