Stokes Labs

Privacy policy

We do not collect your data.

This policy covers the Cleat app for iPhone, Apple Watch and Mac, and this website. It is written in plain English because there is not much to say, and what there is should be easy to check.

Last updated 13 August 2026

The short version

Cleat has no accounts and no server of ours behind it. Your habits stay on your devices and in your own iCloud, where we cannot read them. There is no analytics, no tracking, no advertising and no third-party code in the app. Its App Store privacy label says Data Not Collected, and that is meant literally.

Who is responsible

Cleat is made by Stokes Labs LLC, a South Carolina limited liability company, which is the controller of any personal data described here. You can reach us at support@stokeslabs.dev.

What Cleat collects

Nothing. Cleat has no accounts, no login and no email capture. It does not ask who you are, and there is no Stokes Labs server for it to tell. Nothing about your habits, your usage or your device is sent to us.

Where your habit data lives

On your devices, and in your own iCloud. Cleat syncs through the CloudKit private database of the Apple Account signed in on your device - your private iCloud storage, not ours. That is what lets your iPhone, Apple Watch and Mac agree with each other without anything passing through us.

Stokes Labs cannot read that data. We have no access to your iCloud account and no copy of what is in it. Apple's own terms and privacy policy govern iCloud itself.

Analytics, tracking and advertising

There is none of it. Cleat contains no analytics, no crash reporting service, no advertising, no attribution or fingerprinting, and no third-party SDKs at all. Nobody is measuring what you tap.

This is why Cleat's App Store privacy label is Data Not Collected and its privacy manifest declares no tracking and no collected data types. That was a deliberate choice, and it is a choice we would have to reverse in code and re-declare to Apple before it could stop being true.

The purchase

Cleat is a one-time purchase, handled entirely by Apple through StoreKit. We never see your payment details - not your card, not your name, not your billing address. Apple does not give them to us and we would not want them.

Cleat keeps no receipt of its own either. When it needs to know whether the app has been paid for, it asks Apple about the Apple Account on that device and remembers only the answer, on the device.

Taking your data out, and deleting it

Cleat exports your complete history as JSON or CSV at any time, free, from its settings. It is your record, in formats you can open elsewhere, with nothing held back.

Deleting is just as much yours. Removing habits in the app, or removing Cleat's iCloud data through your Apple Account settings, takes the data away. There is no copy of ours for you to request the deletion of, because we never had one - which also means a deletion request to us cannot reach data we cannot see.

If you email us

Support runs on ordinary email, so it works the way email works: when you write to support@stokeslabs.dev, that message arrives in a mailbox and is read by a person here. It contains whatever you chose to put in it - typically your email address, your name if your mail client sends one, and the app version, system version and device model Cleat's bug report fills in.

We use it to answer you and to fix what you reported, and we keep it only as long as that is useful. It is never sold, never shared for marketing, and never added to a mailing list, because there is no mailing list.

This website

These pages are plain static HTML and CSS. There are no cookies, no analytics, no tag managers, no embedded trackers, and no third-party fonts, scripts or images - every asset is served from this domain. Nothing here follows you, and there is no consent banner because there is nothing to consent to.

The site is hosted on Vercel, which serves the pages and, like any web host, processes basic request information such as your IP address and browser user agent in order to deliver them. We do not build profiles from that or use it for anything beyond keeping the site up.

Changes to this policy

If this policy changes, the date at the top changes with it. If Cleat ever begins collecting something - which is not the plan - we will say so here plainly, and describe exactly what and why, rather than quietly widening a sentence.

Questions

Ask. support@stokeslabs.dev is the same address as everything else, and privacy questions get an honest answer. The support page covers bug reports and what to include in one.