1. Who is responsible
The data controller is Eutopix Labs P.S.A. (prosta spółka akcyjna), ul. Hoża 86/410, 00-682 Warszawa, Poland, registered by the Sąd Rejonowy dla m.st. Warszawy w Warszawie, XII Wydział Gospodarczy KRS under KRS 0001237465 · NIP 7011310736 · EU VAT PL7011310736 · REGON 544584646 · share capital PLN 20,000. Privacy questions and data-rights requests: support@ganttpeek.com. Full company details are in the legal notice.
2. Information handled by the app
Project files and exports
You choose which project file GanttPeek may open. On macOS, the app copies the selected file into a randomly named private sandbox folder, parses it locally with a sandboxed helper, validates the result, and removes the working folder after the operation. On iPhone and iPad, the app reads the user-selected file through Apple’s document picker and parses it on the device. GanttPeek does not upload the file or schedule contents to Eutopix Labs and never modifies the source file. Sharing an export or sending a snapshot to your own paired Apple Watch happens only when you choose that action.
On macOS, PDF and CSV exports are written to a location you select. On iPhone and iPad, an export is created under a unique name in the app’s temporary directory and offered through Apple’s share sheet; GanttPeek removes its temporary copy when sharing finishes. The receiving app or destination you choose controls any copy you share.
Data kept only on your device
- Recent files. The app keeps a short recent-file list (file name, path, last-opened time and a read-only bookmark) in its local preferences so you can reopen a file. You can remove entries or use Clear Recents in the app, and the list is removed when you uninstall it.
- Private annotations. Flags, notes and “my tasks” stars you add are saved as local files in the app’s own storage, keyed by a fingerprint of the schedule. They are never written into the project file and are not synced; you can change or remove them in the app.
- Free allowance. To apply the free allowance fairly, GanttPeek stores one-way cryptographic fingerprints of the files opened for free (and, from older versions, project identifiers derived from project metadata) in the device Keychain or local preferences. They contain no file path or schedule contents and cannot be used to rebuild a file.
- Access status. Pro and Lifetime access status is cached locally and rechecked with Apple.
- Trial reminder. If you start a free trial and allow notifications, the app schedules a local reminder on your device before the trial ends. The reminder is created by your device, not sent by us.
We cannot remotely see, access, or delete this local data. It stays under your control. Removal and backup behavior depends on the action you choose and your platform, as described below.
Project notebooks, recordings and review bundles
In version 1.2.0 and later, project notebooks contain notes, meeting minutes, action owners and due dates, task references, drafts, and files or photos you select. These are separate local files in GanttPeek’s app storage. They do not modify the source schedule and are not uploaded to Eutopix Labs. Notebooks do not automatically sync between your Mac and iPhone.
Voice recording starts only after you choose Record voice memo and grant microphone access. Recording is limited to ten minutes and stops when you leave the recording screen or the app is interrupted. Audio is stored locally; readable interrupted recordings are kept so you can recover them. GanttPeek does not automatically record meetings or send audio to a transcription service.
Removing a note or attachment reference can retain its local attachment file for recovery. Delete attachment permanently removes that app-owned file and its notebook references after your confirmation; it does not delete your imported original or copies already shared. Shared review ZIP files contain saved notes, attached evidence and calendar action dates; unsaved drafts, internal transfer receipts and the original schedule file are excluded. The receiving app or person controls a copy you share.
Optional on-device drafting
Version 1.2.0 can use Apple’s Foundation Models on eligible devices, supported systems and available languages. Drafting is started by you, uses a bounded selection of displayed source evidence on the device, and has no cloud fallback. Generated text is editable and must be reviewed. Unsupported devices retain manual editing. Local diagnostic events record model availability, outcome and timing, without adding prompts, project text or generated notes. Diagnostics are shared only through an export or copy action you choose.
Your paired Apple Watch
If you choose Send snapshot to Apple Watch, version 1.2.0 sends a bounded schedule snapshot through Apple’s Watch Connectivity framework to your paired Watch. It contains the project name, up to forty task names and references, supplied dates and progress, milestones, and the snapshot date. It is saved locally on Watch for offline viewing. It is not a live schedule editor.
Observations you save on Watch remain in its local queue until the iPhone confirms saving them in the matching project notebook. Retries use local receipt identifiers to avoid duplicate notes, including after deletion. Watch drafts retain their original project and task reference. GanttPeek operates no server for these transfers. System dictation, if you use it, is provided by Apple under your device’s dictation settings and Apple’s privacy terms; it is not GanttPeek’s on-device drafting feature.
Your device’s backup and app-storage settings may retain local app data. On Mac, deleting the application alone may leave its app container or Application Support data. Exported or shared files and data on another paired device are not erased by removing the app from one device. Contact support for help locating app-owned data; we cannot remotely access or erase it.
Optional usage sharing
GanttPeek does not create an account and does not contain an analytics, advertising, tracking, or third-party crash-reporting SDK. In versions that offer Usage analytics, you can choose to share basic counts to help Eutopix Labs improve GanttPeek. Counts never include file names, schedule contents, annotations, notebooks, recordings or device identifiers.
Your choice
Usage sharing is optional and off by default. In versions that offer Usage analytics, you can explicitly choose Share or Don’t share and change your choice at any time in Settings. Your choice does not change features, prices or access. Nothing is collected or queued for this program before consent. Earlier versions without this option do not send these counts.
Sole purpose
Eutopix Labs uses these counts only to improve this app and its services: understand whether tasks work, diagnose failures and loading problems, and improve purchase-screen and task-continuation usability. These counts are not used for advertising, marketing communications, advertising attribution, product personalization, cross-company tracking or data-broker sharing. They are not joined to advertising or account datasets.
What is shared
Fixed event categories cover launches, successful tasks, coarse failures and time ranges, permission outcomes, free limits, paywall views and exits, plan choices, checkout outcomes, verified access, trial starts, positive-price purchases, renewals, restores and useful returns. Only supported and instrumented features contribute. Counts include app version/build, platform, release channel, UTC day, coarse plan/context categories and the week sharing began.
Small local journey counters
A device may temporarily associate a single unambiguous offer with checkout, verified access and a successfully completed resumed task for at most one hour in the same process and consent generation. Only aggregate outcome counters are uploaded; no journey, session, user, account, installation or device identifier is sent. Relaunches and ambiguous offers are excluded. Access can include a free trial and is not proof of paid revenue.
One-time optional summary
After you opt in, existing local functional state may supply a coarse summary: onboarding complete/incomplete, zero/one–two/three-plus useful uses, whether a free limit was reached, and install age zero–one/two–seven/eight-plus days, categorized by plan. Exact counts and dates are not sent. Turning sharing off and later opting in can send a fresh summary. This is not a history of pre-consent events.
What is not shared
This program excludes files, filenames, document/email contents, text entered by you, photographs, recordings, precise locations, financial amounts, health/fitness records, body or pose data, names, email addresses, advertising IDs and persistent user/device identifiers. Purchase categories exclude transaction IDs, product IDs and payment amounts. Transaction IDs used locally for deduplication stay on the device. A random temporary batch ID recognizes delivery retries; it is not a person identifier.
Provider and processing
Eutopix Labs operates the first-party collector with Cloudflare Workers and Cloudflare D1. The D1 database is restricted to the European Union. Cloudflare’s network can process requests elsewhere and necessarily sees a network address during transport. The collector application does not retain IP addresses, request headers or raw request bodies; its invocation/application logging is disabled. Cloudflare may separately process infrastructure/security information to provide its service. We do not promise absolute anonymity or entirely EU network processing. Cloudflare’s Data Processing Addendum and applicable transfer safeguards govern processor handling.
Retention and withdrawal
Unsent counts expire after seven days. Daily cleanup removes retry IDs older than eight days and aggregate counts older than 400 days. Provider recovery copies can retain earlier states for a further recovery window, currently up to 30 days depending on plan. Turning sharing off deletes unsent counts and local sharing metadata; an already-sent request may already have been accepted. Reports have no person identifier, so we cannot locate or erase an individual contribution from combined totals.
Legal basis and rights
The legal basis for this optional program is your consent (Article 6(1)(a) GDPR where applicable). You may withdraw at any time without affecting earlier lawful processing. For information we can identify, you may request access, correction, deletion, restriction or portability, or object where applicable, by contacting support@ganttpeek.com. You may complain to your local data-protection authority, including Poland’s UODO. No charge or loss of features follows refusal or withdrawal.
Optional local diagnostics
GanttPeek can keep Apple-provided crash and performance diagnostics (MetricKit) and fixed technical event codes on your device to help troubleshoot problems. Reports can include technical details such as app and operating-system versions, timestamps, and crash stacks. The app does not add schedule contents, filenames, or file paths to its event records, and does not upload reports. In Diagnostics, you can export a JSON report to a location you choose or delete local reports. Open and review the exported report before choosing to send it to support; the recipient or destination you choose controls the shared copy.
Local retention is bounded to 14 days and 16 report files, with a maximum of 1 MiB per report. Retention cleanup runs when the app accesses diagnostics; exported copies are not removed by this cleanup. If you intentionally send a report to support, it is handled under the support correspondence terms below.
Purchases through Apple
GanttPeek Pro is offered as an auto-renewing monthly or annual subscription or as a one-time Lifetime purchase. Apple processes App Store purchases, payment, receipts, renewals, cancellations and refunds under Apple’s own terms and privacy policy. Through StoreKit the app receives only product information and your entitlement status (for example, whether Pro or Lifetime access is active); GanttPeek does not receive your name, Apple Account details or payment-card information. Aggregated sales and diagnostic information Apple makes available to developers is handled within App Store Connect for product operation and improvement.
Apple ad attribution (iPhone and iPad)
GanttPeek shows no ads, does not use the advertising identifier (IDFA), never shows an App Tracking Transparency (ATT) prompt and does not track you across other companies’ apps or websites. Apple’s own measurement: if you install GanttPeek after tapping an Apple Ads advertisement, Apple may count the install and attribute it to that ad using its own App Store measurement. Apple is responsible for that processing; see Apple’s privacy policy (apple.com/legal/privacy). From the first update of GanttPeek released after 14 October 2026, the app sends no SKAdNetwork or AdAttributionKit conversion value in the EU/EEA, the UK or Switzerland. Earlier versions may send the coarse, aggregate value described below in every country. Outside these regions (and, in earlier versions, everywhere), the App Store version for iPhone and iPad may send a coarse, aggregate conversion value through Apple’s SKAdNetwork/AdAttributionKit: a number from 0 to 3 describing progress during the first 35 days after installation (opened the app, first successful use, viewed plans, unlocked Pro). It contains no identifier, no IDFA and nothing about you, and no ATT prompt is shown. Apple passes it on delayed and combined with other installs; Eutopix Labs receives only aggregated postbacks that identify no one. Legal basis for those regions: our legitimate interest in measuring our own advertising (Art. 6(1)(f) GDPR where applicable). The Mac version does not use these frameworks.
Other Apple system features
If you use Shortcuts, Siri suggestions, notifications or the App Store rating prompt, Apple’s operating system provides these features under Apple’s privacy terms. Depending on your device settings, Apple may share crash and usage diagnostics with developers in aggregated or de-identified form.
3. This website
The GanttPeek website does not set cookies, use browser storage, use analytics, show ads, embed social-media trackers, or provide a web contact form. App Store links carry a fixed campaign label naming the page you came from, so Apple can report aggregate downloads per page; no visitor identifier is added. The site is hosted on Cloudflare, which processes request information such as IP address, requested path, timestamp, user agent, and security signals to deliver the site, prevent abuse, and diagnose failures. The legal basis is our legitimate interest in providing a secure, reliable website (GDPR Article 6(1)(f)). Our own request logging is disabled; Cloudflare retains security and delivery logs for the limited periods set by its service configuration, unless an incident or legal obligation requires longer preservation.
4. Support messages
If you email support, we process the contact details and content you choose to provide so we can answer, troubleshoot, protect the service, and maintain business records. Email is hosted by Soverin. The legal bases are steps to perform our agreement and our legitimate interest in customer support (GDPR Articles 6(1)(b) and 6(1)(f)); legally required records may be retained under Article 6(1)(c).
Support correspondence is ordinarily deleted or anonymized within 24 months after the issue is resolved, unless a longer period is required to establish, exercise, or defend legal claims or comply with law. Please do not send a confidential project file unless support specifically asks for a minimal test file and you are authorized to share it.
5. Purposes, legal bases and retention at a glance
- Opening, annotating and exporting files: done on your device to provide the app you asked for; we receive nothing. Kept until you delete it or uninstall the app.
- Purchases and access status: performance of the contract (Article 6(1)(b)); Apple keeps purchase records under its own policy and tax obligations; the app’s cached status stays on your device.
- Accounting and tax records: legal obligation (Article 6(1)(c)); Apple’s aggregated sales reports are kept for as long as Polish accounting and tax law require — usually 5 years from the end of the calendar year in which the related tax fell due (Accounting Act art. 74; Tax Ordinance arts. 70 and 86). App purchases are sold by Apple, so your purchases do not appear in our accounting records.
- Ad attribution (outside the EU/EEA, the UK and Switzerland; in versions released up to 14 October 2026, everywhere): legitimate interest (Article 6(1)(f)); the on-device stage record is used only during the first 35 days; Apple and ad networks receive aggregated postbacks only.
- Optional usage counts: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time in Usage analytics settings. Retention as described in “Optional usage sharing” above (unsent 7 days, retry identifiers 8 days, aggregate counts 400 days, provider recovery copies up to 30 more days).
- Local diagnostics: legitimate interest in reliability (Article 6(1)(f)); at most 14 days on your device, and only shared if you choose to send them.
- Website delivery and security: legitimate interest (Article 6(1)(f)); short-term Cloudflare logs.
- Support: contract or pre-contract steps and legitimate interest (Article 6(1)(b), (f)), legal obligation for records (Article 6(1)(c)); normally up to 24 months after resolution.
6. Recipients and international transfers
We share personal information only with the providers needed for the processing above: Apple (App Store distribution, purchases, ad attribution and platform services, acting under its own terms), Cloudflare (website hosting, delivery and security) and Soverin (business email). We limit access to what is needed for those services. Apple and Cloudflare may process data outside the European Economic Area, including in the United States; where they do, we rely on the EU–US Data Privacy Framework where the provider is certified, the European Commission’s Standard Contractual Clauses, or another lawful transfer mechanism. We do not sell personal information and do not use it for advertising profiles.
7. Your choices and rights
Under the GDPR and UK GDPR you may ask for access to, rectification, erasure, or restriction of your personal data, ask for portability, object to processing based on legitimate interests (including the ad-attribution measurement), and withdraw any consent at any time without affecting earlier processing. Because the app does not send us schedule contents or identify app users, we hold no app data about you; app-local information stays under your control, and you can delete exports at their destination, clear recents, remove annotations, or uninstall GanttPeek. You can turn off notifications in your device settings, and you can limit Apple’s ad attribution and analytics sharing in your device privacy settings.
Contact support@ganttpeek.com to exercise a right; we normally reply within one month. You may also lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl, or with the supervisory authority where you live or work. We do not use automated decision-making or profiling.
8. California and other US state privacy laws
We do not sell or share personal information, as those terms are defined by the California Consumer Privacy Act as amended by the CPRA and similar US state laws, and we do not use sensitive personal information. In the last 12 months the only categories we may have collected are identifiers and the content of your message when you email support, and internet or network activity (website request data processed by Cloudflare). You may request to know, delete or correct this information by emailing support, and we will not discriminate against you for exercising these rights.
Do Not Track: this site and our apps do not track you across third-party sites or services, so they behave the same whether or not your browser sends a Do Not Track or Global Privacy Control signal.
9. Children
GanttPeek is a professional schedule-viewing tool. It is not directed at children under 16, and we do not knowingly collect personal information from children.
10. Security and changes
We use app sandboxing, user-selected read-only file access, bounded parsing, private temporary storage, and code signing to reduce risk. No security measure is absolute. We will update this notice when data practices change and will revise the effective date above. Material changes will be communicated through an appropriate product or website notice.
Changes: version 1.3 (14 October 2026) adds subscriptions, Apple ad attribution, on-device recents, annotations and trial reminders, named providers, transfers, a legal-basis summary and US state-law information. Version 1.4 (14 October 2026): Apple ad measurement by region, accounting-record retention and Do Not Track clarified. Version 1.5 (15 October 2026): version 1.2.0 notebooks, local voice recordings, review exports, on-device drafting and paired Watch transfer, including retention and deletion behavior.