major.
Privacy Policy
Last updated: 1 July 2026
Major ("Major", "we", "us") is a focus app that helps you choose one
meaningful task each day and break it into small, manageable steps. This
policy explains what data we collect, why, and your rights over it. We've
tried to write it plainly rather than in dense legalese.
Major is operated by an individual sole developer based in the United
Kingdom, trading as "Major". For any privacy questions or requests, contact
us at hello@trymajor.uk.
The short version
- We collect only what's needed to run the app: your name, email, a
securely hashed password, and the tasks, steps, reflections, and
feelings you create.
- We do not use analytics, tracking, advertising,
cookies, or crash reporting. We do not sell or share
your data for marketing.
- When you ask the app to break a task into steps, only the
task title is sent to our AI provider (Anthropic) to
generate the steps — nothing that identifies you.
- You can delete your account and all associated data at any time from
within the app.
What we collect and store
Account information
- Name — the display name you provide at signup.
- Email address — used to sign in and to send
password-reset emails.
- Password — stored only as a secure bcrypt
hash. We never store or can see your actual password.
- Account timestamps — when your account was created.
Your task data
- The tasks you create (the title of your "one thing"),
the steps they are broken into, which step you're on, and
whether a task is complete.
- Optional reflections (free-text notes) and
feelings (short words) you add when completing a task.
- Timestamps for when tasks are created and completed.
On your device only (never sent to us)
- Your login token, a cached copy of your profile, and your app settings
(such as font, text size, sound, and reminder preferences) are stored
securely on your device and are not transmitted to our servers.
Password-reset codes
- When you request a password reset, we temporarily store a hashed
version of the reset code and the email it was sent to. These expire
automatically and are deleted when you delete your account.
What we do NOT collect
- No analytics or tracking. We use no analytics,
tracking, or behavioural monitoring tools of any kind.
- No advertising. We show no ads and use no advertising
identifiers.
- No location data. We use your device's timezone
offset only to work out what "today" is for you; this is not stored.
- No cookies.
- No crash-reporting or third-party monitoring SDKs.
Third parties that process your data
We use a small number of trusted service providers to run the app. We only
send them the minimum needed:
- Anthropic (AI provider) — when you ask Major to break
a task into steps, we send only the task title to
Anthropic's API to generate the steps. No name, email, account ID, or other
identifying information is sent.
- Resend (email delivery) — used only to send
password-reset emails. We send your email address and the reset code;
nothing else.
- MongoDB Atlas (database hosting) — securely stores the
account and task data described above.
- Render (application hosting) — runs the app's backend.
As with any web host, Render processes standard technical request logs
(such as IP address and timestamp) at the infrastructure level to operate
and secure the service.
We do not sell your data, and we do not share it with anyone for
advertising or marketing.
Apple Health (optional)
If you choose to enable Health Sync, Major uses Apple's on-device
HealthKit framework. Any health-related data stays on your
device — it is not sent to our servers or any third party. This
feature is optional and off by default.
How long we keep your data
- Account and task data are kept for as long as your account exists.
- Password-reset codes expire automatically after a short period.
- When you delete your account, your data is deleted (see below).
Your rights and choices
You can:
- Access and update your name and password from within
the app.
- Delete your account and all associated data at any
time using the "Delete account" option in Settings. This permanently
removes your account record, your tasks, steps, reflections, feelings, and
any reset codes associated with your email.
Because we are based in the UK and may serve users in the UK and EU, you
also have rights under UK GDPR / the EU GDPR, including the
right to access, correct, delete, or restrict the processing of your personal
data, and the right to complain to a data-protection authority (in the UK,
the Information Commissioner's Office, ico.org.uk).
To exercise any of these rights, email
hello@trymajor.uk.
Security
- Passwords are stored only as bcrypt hashes.
- Login uses secure tokens stored in your device's secure storage (the
iOS Keychain or Android encrypted storage).
- Data is transmitted over encrypted (HTTPS) connections.
No system is perfectly secure, but we take reasonable measures to protect
your information.
Children
Major is not directed at children under 13, and we do not knowingly
collect data from them.
Changes to this policy
We may update this policy from time to time. The "Last updated" date at
the top will reflect the latest version. Significant changes will be
communicated within the app or by email where appropriate.
Contact
For any questions or to exercise your data rights, contact:
hello@trymajor.uk.
This policy reflects Major's actual data practices as of the
date above. It is provided in good faith and in plain language; it is not
legal advice.