Effective September 29, 2026. This policy covers the Sowens Studios website (sowensstudios.com) and our apps: Stocked (iPhone, iPad, Apple Watch, Mac), Sesh, Nova, AppPulse, Let’s Date, Atlas, Steady and The Know. GIR, our Discord bot, is covered in its own section. Jump to the section for your app.
Who we are
Sowens Studios is an independent Apple software studio. See About & business details. You can reach us at support@sowensstudios.com.
The short version
- We do not sell your personal information and we do not share it for cross-context behavioral advertising.
- No app contains third-party advertising, analytics or attribution SDKs. We do not track you across other companies’ apps or websites.
- Most data stays on your device. Data leaves your device only for the features described below, and most of those are optional.
- You can delete on-device data inside each app, and you can ask us to delete anything we hold on our servers from the deletion request page.
What we collect and why
What an app handles depends on the features you turn on. In general:
- Content you create or import (inventory, recipes, journals, notes, plans, bills, guides, media libraries). Stored on your device. If you enable iCloud or household/community sync, it is also stored in your iCloud account or on our sync service so your devices and household members can see it.
- Identifiers needed for sync and sign-in (an app-generated account or household identifier, and your Apple or Discord identifier when you sign in with them). Used to route your data to you and to prevent abuse.
- Device permissions you grant (camera, photos, microphone, speech recognition, location while using the app, Face ID, notifications, Apple Music, Health). Each is optional. Camera, microphone and speech input are processed on your device unless a feature says otherwise; Face ID is handled entirely by iOS and we never receive biometric data.
- Technical data received when an app contacts our servers: IP address, request time, app version and a rate-limit key. Used to deliver the response, secure the service and limit abuse. Logs are limited to operational metadata and are not meant to contain credentials or private content.
- Support messages you send us (email address and what you write), used only to answer you.
Who receives data
We use a small number of service providers, and only to deliver a feature you use:
- Apple (iCloud/CloudKit, WeatherKit, MapKit, push notifications, StoreKit, Apple Music).
- Cloudflare, which hosts our own API (api.sowensstudios.com) using Workers, Durable Objects and KV, and delivers this website. Netlify hosts this website and its forms.
- Content and data providers that receive the search or lookup you ask for, for example recipe and grocery data providers (Stocked), TMDB/OMDb, Trakt, Simkl and Real-Debrid when you connect them (Nova), Spotify (Sesh), OpenStreetMap/Overpass and Wikipedia (Let’s Date), YouTube (Atlas), Plaid (Steady bank connections). They receive the request needed to answer it and are governed by their own policies.
- AI model providers, only when you use an AI feature. The text, image or document you submit is sent to the provider through our server to produce a result. Do not submit anything you would not want processed this way.
- Legal and safety. We may disclose information where required by law or to protect people or the service.
We do not sell or rent personal information, and we do not use it for advertising.
By app
Stocked (iPhone, iPad, Watch, Mac)
Pantry, grocery, recipe, meal-plan, receipt and household information is treated as private app data and stored on your device first. Optional features: household sync (identifiers and the shared lists travel through iCloud and our sync service to members you invite), Mac-to-iPhone recipe delivery, recipe search and AI recipe help (your query or ingredient list is sent to our server and a provider), store and grocery lookups (approximate location only while you use the feature, and a Kroger account only if you connect it), Apple Health (nutrition data is read or written only if you allow it), and photo/receipt scanning. An optional Household Sync purchase is handled by Apple; see refunds.
Sesh (adults 21+ where cannabis is legal)
Session journals, notes, mood and health-adjacent observations are sensitive. Core journaling works locally. Accounts, community features, push notifications, Spotify or Apple Music connections and sync are optional and send only the data those features need. Sesh is for adults of legal age and we do not knowingly collect data from anyone under 21. It does not offer or facilitate sales.
Nova
Nova stores your source locations, library metadata, profiles, playback progress and settings on your device, with optional iCloud sync and optional tracking through our tracker service. Nova does not supply media. When you configure a source or provider (for example an SMB share, a Stremio-style add-on, TMDB, Trakt, Simkl or Real-Debrid) requests go to that source using credentials you provide, which we keep in the iOS Keychain. Real-Debrid is a third-party paid service with its own terms and billing.
AppPulse
AppPulse works on recordings and screenshots you choose. Media is processed on your device. Saving a result to Photos uses add-only Photos permission. Optional network features contact our API.
Let’s Date
Dates, budgets, memories, wishlists and reminders are stored on your device. If you allow location while using the app, it is used for nearby ideas and weather (Apple WeatherKit) and is not kept by us. Nearby place lookups go to OpenStreetMap/Overpass. Photos you attach stay on your device.
Atlas
Guides, saved items and documents you add are stored on your device with optional iCloud sync. Camera, microphone and speech input are used for features you start and are processed on your device unless a feature states otherwise. Video guides use the YouTube player, which may set cookies or collect data under Google’s policies; see cookies. Ask/AI features send your question to our server and an AI provider.
Steady (household finance)
Bills, accounts, goals and any statements you import are sensitive financial information. They are stored on your device and protected with Face ID if you enable it. Optional sync goes to a private service run by us for your household. Bank linking through Plaid is not available in the current version. If we turn it on, the connection will be made through Plaid, which shows its own consent screen; we do not see or store your bank login credentials, and Plaid’s policy applies to what it collects. Imported statements are parsed on your device. Optional AI help sends only what you choose to submit to an AI provider through our server. Steady is not financial, tax or legal advice.
The Know
The Know keeps its content on your device and does not require an account. It makes no network requests and has no analytics or advertising. Its settings include Legal & Data, where you can erase local data and reach our deletion form. The Know is not directed to children under 13.
GIR (Discord bot)
GIR stores the Discord identifiers, moderation records, settings, logs and service state needed for the server features its operator enables. Its dashboard requires Discord sign-in and explicit authorization. Server operators control their own retention and access policies. GIR is not for children under 13 (or the minimum age in your country).
This website
The website sets no cookies and includes no analytics, advertising or social-media scripts. Netlify and Cloudflare process standard server logs (IP address, pages requested, time) to deliver and secure the site. If you use the support form, the updates form or the deletion form, we receive what you type and use it only for that purpose.
Testing and diagnostics tools
Some apps include an optional tester diagnostics and feedback tool. It is off by default. It sends nothing unless you turn it on and choose to submit a report, and a report contains only what you see in it (for example a note and device model and app version).
How long we keep data
On-device data stays until you delete it or remove the app. Data in iCloud stays in your iCloud account until you delete it there. Data on our servers (sync records, tracker records, shared-list records) is kept while your account, household or share is active and is deleted within 30 days of a verified deletion request, except records we must keep for security or legal reasons and rolling backups, which age out within 90 days. Rate-limiting data and operational logs expire automatically and are short-lived. Support emails are kept for up to 24 months.
Your choices and rights
- Delete on-device data from Settings in each app, or by deleting the app. Deleting an app does not delete data in your iCloud account or on our servers.
- Delete server data using the deletion request page or by emailing support@sowensstudios.com.
- Access, correct, export or object. Email us and we will respond within 30 days (45 days where the law allows an extension). Many apps also offer in-app export.
- Region-specific rights. If you are in the EEA, UK, California or another region with privacy law, you may have rights to access, correct, delete, restrict, port and object, to withdraw consent, and to complain to your regulator. We honor these rights for everyone. We will not treat you differently for exercising them.
- Permissions can be changed any time in iOS Settings. Declining an optional permission only disables the related feature.
- Marketing email. We send email only to people who ask for updates. Every message has an unsubscribe link, or use the unsubscribe page.
Legal bases (EEA/UK)
We process data to perform our contract with you (providing the app), with your consent (optional permissions, updates email), for our legitimate interests (security, abuse prevention, support) and to comply with law. Data may be processed in the United States and other countries where our providers operate, protected by contractual safeguards such as standard contractual clauses where required.
Security
Connections use HTTPS. Credentials and tokens are stored in the iOS Keychain. Production secrets are held as encrypted server bindings and are not in our apps. No system is perfectly secure, so keep your device updated and back up important data.
Children
Our apps and website are not directed to children under 13, and we do not knowingly collect personal information from children under 13 (or under 16 where local law sets that age). Sesh is limited to adults of legal age. If you believe a child has given us personal information, email support@sowensstudios.com and we will delete it. Apple’s Family Sharing and Screen Time controls apply on top of this.
Changes
We will post changes here with a new effective date, and in the app for material changes.
Contact
Sowens Studios, support@sowensstudios.com. Mailing address is provided on request to the same address.