Privacy Policy

1. Scope

It covers the Fracta iOS app on the App Store (including its widgets, notifications and Live Activity) and the MCP connector (https://mcp.fracta.protoductai.com/mcp).

The older web app "Fractal", previously served on this domain (fractalai.net), has been discontinued and is not covered here.

2. Information we collect

Account

Email address, display name and user ID when you sign in with Apple or Google. Clerk handles authentication; our database (Convex) stores your email, display name and user ID.

Your content

Tasks you enter (title, notes, dates, priority, recurrence, habit streaks and so on) and memos.

Google Calendar data

Only if you turn on Google Calendar. See section 4.

Purchases

Subscription status (whether Fracta Pro is active, its expiry and product ID). Apple processes payment and RevenueCat manages subscription state. Card numbers never reach us.

Push token

The APNs device token, if you allow notifications.

In-app activity

The kind and time of actions such as opening or completing a task from a widget or notification. Stored in our database; not sent to advertisers or external analytics services.

Voice input

When you dictate a task, speech is converted to text by iOS speech recognition (Apple). Depending on device settings and language, audio may be sent to Apple servers. Fracta does not store the audio; the resulting text is part of the task you save.

The Service contains no advertising SDKs and no cross-app tracking.

3. How we use it

• To provide the app: tasks, memos, calendar, widgets and notifications
• To sign you in, check your subscription (Fracta Pro) and delete your account
• To carry out actions you request through the MCP connector
• To answer support requests, investigate bugs and prevent abuse

We do not use it for other purposes, and we do not sell personal information.

4. Google user data (Google Calendar)

Fracta uses the following two read-only scopes only after you choose "Connect Google Calendar" in Settings and approve them on the Google consent screen.

calendar.calendarlist.readonly

To read the names, colors and time zones of your calendars so each event can show which calendar it belongs to.

calendar.events.readonly

To read event titles and times and show them on the Today and Calendar screens of the app.

What we fetch and store. We read events from your primary calendar and the calendars you have selected as visible in Google Calendar, from 30 days in the past to 180 days ahead. We store the calendar ID, name, color and time zone, and for each event its ID, title, start and end times, whether it is all-day, its busy/free setting, the link to open it in Google Calendar, and its last-updated time. We do not store event descriptions, locations, attendees, meeting links or attachments. Fracta never creates, edits or deletes anything in Google Calendar.

Where it is processed. Our server (Convex) fetches the data. Google access tokens are held by our authentication provider, Clerk, and the server requests one from Clerk each time; we do not store tokens in our database. Fetched events are stored in Convex and refreshed about every 15 minutes, even when the app is closed.

How it is used. Stored events are used only to show them to you in the app. We do not use them for advertising and we do not sell or rent them. Our staff do not read the content of Google user data except where required by law or needed for security investigations.

AI and model training. Google user data is not used to develop, train or improve AI or machine-learning models, and it is not transferred to AI tools, including external AI clients such as ChatGPT or Claude. The 10 tools exposed by the Fracta MCP connector work only with tasks and memos; none of them can read or write events imported from Google Calendar.

Transfers. Apart from the storage above (Convex) and Clerk, which holds the token, Google user data is not transferred to third parties.

Retention and deletion. Events are kept only while the connection is active. Events removed in Google, or that fall outside the sync window, are removed from our storage at the next sync. Choosing "Disconnect" in Settings stops syncing and queues the imported events and calendar information for immediate deletion. Deleting your account also deletes all imported Google Calendar data.

Revoking access. "Disconnect" in Fracta deletes our copy and stops syncing. To revoke the permission itself at Google, open your Google Account, go to Security, then "Third-party apps & services" (or "Sign in with Google"), select Fracta and remove access.

Fracta's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. AI and the MCP connector

The Fracta app and its servers contain no LLM, and Fracta does not send your data to AI providers such as OpenAI or Anthropic. AI enters only through external clients that you connect yourself.

When you connect the MCP connector (Fracta Pro required) to ChatGPT, Claude or a similar client, that client signs in as you through OAuth and can reach the following.

• Your tasks and memos: list, search and fetch tasks; create, update, complete and delete tasks; set today's one thing; add memos
• Not shared: events imported from Google Calendar, your email address, purchase information and push tokens

What a client retrieves is handled under that client's own terms and privacy policy (OpenAI, Anthropic and so on), which we do not control. You can disconnect at any time from the client's settings (see the MCP connector docs).

Our relay (Cloudflare) logs only the request method and path for the MCP endpoint, never the contents of your tasks or memos.

6. Service providers

Clerk

Authentication, sessions, Google and Apple account linking, holding the Google access token

Convex

Storage and server processing for tasks, memos, calendar data, subscription state and push tokens

RevenueCat

Subscription (Fracta Pro) state

Apple

Sign in with Apple, App Store payments, push notifications (APNs), speech recognition

Google

Sign-in with Google and the Google Calendar API (section 4)

Cloudflare

Relay for the MCP connector (section 5)

These providers handle information only as needed to run the Service and may process it on servers outside Japan.

7. Retention and account deletion

We keep your data while your account exists, to provide the Service.

You can delete your account at any time from "Delete account" in the app's Settings. This deletes your profile, tasks, memos, subscription state, push tokens, imported Google Calendar data, habit completion history and activity records from our database, and also deletes your RevenueCat customer record, then signs you out. It cannot be undone. Your login (Clerk) is shared with other ProtoductAI apps, so it is kept; contact us if you want it deleted as well.

Deleting your account does not cancel an App Store subscription. Cancel first under Manage subscriptions. The Sign in with Apple permission stays on your Apple Account; stop using Fracta from iOS Settings if you wish.

If you cannot use the app, contact us and we will delete your data after verifying your identity.

8. Your rights

Subject to applicable law, you may ask to access, correct, delete or restrict the use of your information. Contact us below; we may ask you to verify your identity.

9. Security

Traffic is encrypted and data access is restricted per user ID. The MCP connector uses OAuth; we do not issue long-lived static tokens. No system is perfectly secure.

10. Changes

If we change this policy we will post it here with a new effective date, and tell you in the app for material changes.

11. Contact

ProtoductAI Inc. / Email: support@protoductai.com