Your errands are none of our business.

Where your data lives

Everything you say to Doorway — your errands, checklists, History, settings — is stored on your own devices and synced between them through your personal iCloud account (Apple's CloudKit private database). That data belongs to your Apple ID. We can't see it, query it, or hand it to anyone, because it never passes through anything we run.

What we collect

Nothing. There's no sign-up, no email list, no analytics inside the app, no advertising identifiers, and no tracking of any kind. We never see your name, your tasks, or your soda runs.

Voice input

When you speak an errand, your words go through Apple's speech recognition. Depending on your device and its settings, Apple may process that audio on-device or on Apple's servers, under Apple's privacy policy. Doorway itself only receives the transcribed text, and the splitting of that text into a checklist happens on your device.

Shared nudges

When you invite someone, the two of you open a private iCloud share — a small shared zone in CloudKit that only your two Apple IDs can reach. It holds the minimum a shared nudge needs: a profile card for each of you (the display name you chose) and the nudges you send each other — the task text, its checklist, and its status, so the sender gets their little celebration when you finish. Your personal task lists are never shared; a nudge someone sends you is the only thing they can see, and ending the connection cuts off the mailbox.

Invitation links carry their payload in the part of the URL that browsers never send to any server (the fragment), so even the invite page can't log who invited whom.

This website

doorway.help is a static site hosted on Vercel. It uses Vercel Analytics and Speed Insights to count page views and measure loading performance in aggregate — no cookies, no cross-site tracking, and visitors are anonymized rather than identified. That's the whole list.

Deleting your data

Your data, your door. Delete the app and its data from your devices and your copy is gone; anything synced through iCloud lives in your own iCloud account, which you control. To dissolve a shared-nudges connection, end the bond in the app (or stop participating in the share from iCloud settings) and the shared zone goes with it. There's no account to close because there was never an account.

Selling your data

We don't sell, rent, trade, or share your data with anyone. We don't have it, and we like it that way.

Changes to this policy

If Doorway's architecture ever changes in a way that touches your data, this page will change first, with a fresh effective date at the top. The promise we intend to keep: your errands stay between you and your wrist.

Questions

Knock anytime: ahoy@shipshape.io