Your data,
in plain English.

Who is responsible

Bland Coffee Ltd, company number 16307518, trading as Reset, is the controller responsible for personal data handled through Reset.

This notice covers the Reset app, this website and related support services. If you have a privacy question or want to exercise a right, use our support form.

What Reset uses

Reset requires a free account. Sign-in is passwordless: you enter an email address and receive a short-lived, one-time code. Reset does not ask you to create a password.

Reset does not collect your location, contacts, photos, camera data, Health app data, motion data, browsing history or cross-app tracking data.

Why Reset is allowed to use it

• Contract for your account, subscriptions and the services you ask Reset to provide.
• Legitimate interests for core productivity features, security, diagnostics and service improvement, where those interests do not override your rights.
• Legitimate interests to respond to support messages, investigate problems and keep a proportionate record of support conversations.
• Consent for optional AI, voice, notifications and sensitive wellbeing-adjacent processing. You can withdraw that consent.
• Vital interests for a limited safety second-opinion check where the text suggests an immediate emergency.
• Legal obligation where records must be kept or disclosed by law.

Storage and encrypted backups

Your tasks, intentions, planned items, reflections and saved session records are stored on your device. Reset also keeps one account backup so your data can survive reinstalling the app or moving to another device.

The backup is encrypted on your device before upload. Its key stays in your device Keychain and can sync privately through iCloud Keychain. Reset and its backup provider store encrypted content but do not receive the key needed to read it.

Distress and safety-signposting moments are deliberately left out of the account backup. Raw audio and raw transcripts are not included either.

Voice and AI features

Voice is transcribed on your device. Reset does not record audio to a file or send raw audio away from your device. When you choose an AI feature, the app may send the minimum text needed to create the result.

That text can include recent session utterances, task titles or notes, the context needed to make a useful suggestion, and derived labels such as energy or friction if you choose to save them. Full raw transcripts are not kept in your history or exports.

AI results are suggestions for planning and reflection. You can edit, reject or ignore them. Reset does not use them to make decisions with legal or similarly significant effects.

If something you type or say suggests immediate risk, a short text excerpt may be sent for a second safety check so Reset can decide whether to show support resources. Reset does not contact emergency services or another person on your behalf.

Optional AI, voice and wellbeing-adjacent processing is explained in the app before first use. You can withdraw optional consent in Settings and continue using the core planning tools.

Calendar access and reminders

Calendar integration is optional on Pro and Ultimate. If you enable it, Reset can write timed items to a dedicated Reset calendar on your device and show existing calendar events beside your plan.

Events read from your other calendars are used only to draw the day you are viewing. Reset does not save those events to its database, include them in your backup or send them to an AI provider. You can turn calendar access off in iOS Settings.

Notifications are optional and scheduled on your device. A task reminder may include the task title on your lock screen, depending on your notification settings.

Non-personalised ads on Free

The Free plan uses Google Mobile Ads. Ads are requested as non-personalised and with Restricted Data Processing. Reset does not use Apple's advertising identifier for cross-app tracking.

Google may receive standard network and device information, such as an IP address, device model, operating system and language, plus a small identifier used for frequency limits and fraud prevention. Google does not receive your tasks, session content, voice data or derived wellbeing labels from Reset.

Paid plans do not show ads. Where local law requires an advertising consent choice, Reset uses Google's in-app consent flow and lets you revisit that choice in Settings.

Services that help Reset work

Reset uses a small number of providers for specific jobs:

• Supabase for passwordless accounts, EU-hosted backend functions and encrypted backup storage.
• OpenAI for the AI features you choose to use. Model training on Reset user content is disabled under the service arrangement.
• Email delivery providers to deliver one-time sign-in codes. If you contact support through the website, the form prepares a message in your chosen email app and your own email provider sends it to Reset.
• Apple for app distribution, purchases, notifications, on-device speech recognition and platform diagnostics.
• Google Mobile Ads for non-personalised ads on the Free plan.

Some providers operate outside the UK. Reset uses the transfer protections required by UK data protection law, such as approved contractual clauses or an applicable adequacy framework.

Reset does not sell personal data or share it for cross-context behavioural advertising.

How long data is kept

• Your tasks, plans, reflections and saved sessions stay until you delete them.
• Your encrypted account backup is overwritten by each new backup and deleted when you delete your data or account.
• One-time sign-in codes are short-lived and single-use.
• Raw audio is never recorded or stored. Raw transcript text is not persisted.
• Backend AI request logs may be kept for up to 30 days without message content.
• Support messages are normally kept for two years from the last contact, unless they are needed for a dispute or legal obligation.
• Purchase and consent records may be kept for the time required by accounting, fraud-prevention or legal rules.

Messages sent to support

When you use the website support form, Reset uses the name, email address, concern and message you provide to respond, investigate the issue and keep a record of the conversation. This is based on Reset's legitimate interest in providing support and running the service responsibly.

The form prepares the email on your device. Nothing leaves the webpage until you choose to open your email app; you can then review, change or discard the message before sending it. Your chosen email provider delivers it to Reset's support inbox. Support messages are normally kept for two years from the last contact, unless they are needed for a dispute or legal obligation. Please leave out personal notes and full focus-session content.

Your choices and rights

In Reset's data controls you can export your data, delete local data, clear the account backup, delete backend session data and delete your account. Account deletion also removes the on-device backup key.

You can ask to access, correct, delete or receive a copy of personal data, and withdraw consent for optional processing. Depending on where you live, you may also have rights to restrict or object to processing.

Use the support form for a privacy request. We may need to confirm that the account is yours before acting. UK users can also complain to the Information Commissioner's Office.

Age, sensitive information and safety

Reset is only for people aged 16 and over. We do not knowingly allow anyone under 16 to use the Service or collect personal data from them. If we learn that an under-16 has created an account, we will take reasonable steps to close it and delete the personal data we hold.

Things you choose to say or type can reveal health, disability, mental health or emotional information. Reset treats this as sensitive, health-adjacent data even though the app is not a medical record, diagnosis or treatment service.

Privacy-protective settings are used by default. AI companion replies are off until enabled, notifications are opt-in, saving a session is a choice, and Free-plan advertising is non-personalised.

Security

Reset uses client-side encryption for account backups, encryption in transit, backend access controls, passwordless sign-in and authenticated backend functions. No app, device or online service can promise complete security.

If you think your account or information may have been compromised, use the support form as soon as you can.

Changes to this notice

We will update this page when Reset's data use changes. If a change is material, we will also explain it in the app before it takes effect where required.

This notice describes how the current app is designed to work. It is not a claim that the product has received external legal certification or review.