Datum

Privacy Policy

Last updated July 14, 2026

Datum is built around a simple rule: your data is yours. There is no Datum account, no sign-up, and no server of ours that stores what you track. This page explains exactly what that means, including the narrow, deliberate exceptions.

The short version

• No accounts. No sign-up. Nothing to link to your identity.
• Everything you track lives on your device and syncs only through your own private iCloud account, using Apple's CloudKit. We never receive, see, or have access to it.
• The only server we operate stores no tracker data of any kind — see "The one server exception" below. Its code is public so you don't have to take our word for it.
• In-app purchases are anonymous, identified only by a random, non-personal token.
• Datum is not directed at children and does not knowingly collect data from anyone under 13.

What Datum stores, and where

The trackers, entries, check-ins, notes, photos/video references, and settings you create in Datum are stored locally on your device. If you're signed into iCloud, they sync across your own devices via Apple's CloudKit private database — the same mechanism Apple's own apps use, governed by Apple's privacy policy. We do not have a copy of this data, cannot read it, and have no way to access it even if asked.

Optional attachment types (photos, videos, voice notes, calendar events, weather, music, workouts, location) are captured only when you explicitly enable them for a tracker, and are stored the same way — locally and in your own iCloud, or as on-device references (e.g. a photo stays in your Photos library; Datum stores a reference to it, not a copy).

If you enable location capture for a tracker, your coordinates are captured on-device and, to resolve a place name, may be sent to Apple's map services. This happens only for trackers you've opted in, and only at the moment of capture.

The one server exception

Datum operates exactly one server-side component beyond Apple's own infrastructure: an anonymous push-relay that delivers scheduled notifications your device can't reliably trigger on its own (for example, a reminder that should silently log an entry without opening the app). That relay stores only:

• a job schedule (e.g. "daily at 8am"),
• a job kind (what type of action to take),
• an anonymous key, and
• an Apple push-notification device token.

It never receives or stores tracker data, values, names, or notes. Its source code is public and open for independent review, precisely so this claim doesn't have to be taken on faith.

Support tickets

If you contact support from the app's Support screen or the form on this site, your message is tied to your device's anonymous Support ID (a random token, not an account) — not your name or identity. If you instead email us directly, or use the site's support form, that email address is used only to reply to you; it is never stored alongside your tracker data or treated as tracking information.

Screenshots or screen recordings you choose to attach to a support ticket are stored to help us resolve the issue, and are automatically deleted a limited time after the ticket is closed.

In-app purchases

Purchases are processed by Apple and a purchase-management provider, RevenueCat, and are identified only by a randomly generated, non-personal Support ID — never your name, email, or Apple ID. See Settings in the app for your Support ID.

Third parties we rely on

Because Datum is local-first, the only parties that ever see any data are the infrastructure providers that make the app itself work:

• Apple — iCloud/CloudKit sync, Maps (place-name lookups), WeatherKit, HealthKit, Photos, Calendar, and Music integrations, all governed by Apple's own privacy terms and only active for features you enable.
• RevenueCat — anonymous purchase processing, as described above.
• Amazon Web Services — hosts the one disclosed, PII-free notification relay described above, and the support-ticket system described above.

We do not sell data, and there is no advertising or analytics SDK in Datum.

Your choices

Because there's no account, there's nothing to delete on our end for ordinary use — deleting the app (or your data within it) removes it from your device and, if you choose, your iCloud. For a support ticket that included your email or an attachment, you can ask us to delete it by contacting support with your Support ID.

Changes to this policy

If this policy changes, we'll update the date at the top of this page. Material changes will be reflected here before they take effect.

Contact

Questions about this policy, or a request related to your data, can be sent through the app's Support screen or the form on datumapp.info.

Datum is made by EKPQA, LLC, a Delaware limited liability company.

← Back to datumapp.info