← Back to Home

Privacy Policy

Welcome to Sudo Built Apps LLC ("sudoBuiltApps," "we," "us," or "our"). This Privacy Policy explains how we handle your information across all our products and services.

Who We Are

Company: Sudo Built Apps LLC
Address: PO Box 252, Fulton, NY 13069
Email: jay@sudobuiltapps.com
Website: www.sudobuiltapps.com

Scope of This Policy

This policy covers all of our products and services, including:

• Simpl Apps — our iOS app suite (SimpleQR, SimplFlicks, SimplChores, SimplKanban, SimplSplit, SimplVoice)
• rerun — our music player app for iPhone
• EverydayKitchen — our recipe manager, meal planner and grocery list app for iPhone, iPad and Mac
• Checkup: Security Health — our account security app for iPhone, iPad and Mac
• CampusBound — our college planning app for iPhone (also covered by its own privacy policy)
• Everyday Identity Newsletter — our email newsletter on identity and access management
• Everyday Identity Blog — blog.everydayidentity.tech
• AltDraft — our NFL/NBA draft content site
• AI Agent Playbook — our digital product
• IAM Health Check — our consulting services

What Data We Collect

Mobile Apps (Simpl Apps Suite)

Our Simpl Apps are built with privacy as the foundation:

• No personal information — Apps do not require accounts, email, or identifying information
• Device-level processing only — Data is processed on your device and never transmitted to our servers
• No analytics tracking — We do not collect usage data, crash reports, or behavioral analytics
• Offline capable — Apps work without internet connection
• No third-party SDKs — No ad networks, no crash reporters, no trackers
• No third-party AI services — Apps that use speech recognition (such as SimplVoice) rely exclusively on Apple's built-in SFSpeechRecognizer framework. All speech processing occurs on your device. No audio data, recordings, or transcriptions are sent to any third-party AI service or external server
• Purchase data — In-app purchases are processed by Apple. We receive confirmation but never see payment details

All data you create in our Simpl Apps stays on your device. We literally cannot access it because we never receive it.

Speech Recognition (SimplVoice)

SimplVoice uses Apple's native Speech framework (SFSpeechRecognizer) for voice-to-text transcription. This is important to understand:

• On-device processing — Speech recognition is performed locally on your device using Apple's built-in technology
• No third-party AI — We do not use OpenAI, Google, or any other third-party AI service for speech processing
• No data transmission — Your audio recordings and transcriptions are never sent to our servers or any third party
• Apple's role — Apple's Speech framework may process audio on-device or via Apple's servers depending on your device model and iOS version. This is governed by Apple's own privacy policy and your device settings, not by SimplVoice
• Local storage only — All recordings and transcriptions are stored locally on your device and are not accessible to us

rerun (Music Player)

rerun plays music you already have access to: your own music folders, media servers you run or have access to, free internet radio, and (with the optional unlock) Apple Music. Like our other apps, rerun has no accounts, no ads, no analytics, no crash reporters and no third-party tracking SDKs. We do not receive your library, listening history or settings.

• Stored on your device only — Your library index, playlists, favorites, recently played items, colorway and other settings stay on your device. Server passwords and access tokens are stored in the iOS Keychain
• Music folders — rerun only reads folders you choose with the iOS folder picker, including iCloud Drive folders. It reads song tags and cover art from those files to build its library on your device. If a file is stored in iCloud, iOS may download it from Apple's servers so it can play
• Your media servers — rerun connects only to the servers you add (such as Plex, Jellyfin or Navidrome), using the address and sign-in details you enter. Signing in to Plex goes through Plex's own sign-in service. Those servers are operated by you or by whoever runs them, and their own privacy policies apply
• Internet radio — Station listings come from the community-run Radio Browser directory. When you search or play a station, rerun sends that request to Radio Browser, including a count of which station was played. The audio streams directly from the station's own server. As with any website, Radio Browser and the station can see your device's IP address. We do not operate or control these services
• Apple Music (optional unlock) — If you unlock Apple Music and give rerun permission, rerun uses Apple's MusicKit to play music and read your Apple Music library. That data is handled by Apple under Apple's privacy policy; it is not sent to us. You can turn off access at any time in iOS Settings
• Purchases — The rerun unlock is a one-time in-app purchase processed by Apple. We receive confirmation of the purchase but never see your payment details

Because rerun keeps everything on your device, deleting the app deletes its data.

EverydayKitchen

EverydayKitchen has no accounts, no ads, no analytics, no crash reporters and no third-party tracking SDKs. We do not receive your recipes, meal plans, pantry or grocery lists.

• Stored on your device — Your recipes, meal plans, pantry items, grocery lists and settings are stored on your device
• iCloud sync — To keep your devices in sync, EverydayKitchen stores a copy of your data in the private database of your own iCloud account using Apple's CloudKit. Only your Apple Account can access it; we cannot. You can turn iCloud off for EverydayKitchen in iOS or macOS Settings
• Recipe import — When you import a recipe from a website, the app downloads that page directly from the website. That website can see your device's IP address, as with any visit. The page and recipe are not sent to us
• On-device AI — Smart features use Apple's on-device Foundation Models (Apple Intelligence). Processing happens on your device; your data is not sent to us or to any third-party AI service
• Purchases — EverydayKitchen is purchased through the App Store. Apple processes the payment; we never see your payment details

Deleting the app removes its data from your device. To also remove the iCloud copy, delete EverydayKitchen's data in Settings → [your name] → iCloud → Manage Storage.

Checkup: Security Health

Checkup helps you take inventory of your online accounts and improve their security. It has no ads, no analytics, no crash reporters and no third-party tracking SDKs, and you do not need an account with us.

• Stored on your device — Your account inventory, security scores, checklists and settings are stored on your device. 2FA backup codes are kept in a vault protected by Face ID (or your device passcode) and stored in the iOS Keychain
• iCloud sync (optional) — If you turn on iCloud sync, your data is stored in the private database of your own iCloud account using Apple's CloudKit and iCloud Keychain, which Apple encrypts. We cannot access it
• Breach alerts (Checkup+) — If you turn on breach alerts, the email addresses you choose to monitor are sent over an encrypted connection to our breach-check service, which runs on Cloudflare. It forwards each address to Have I Been Pwned (HIBP) and returns the results to your device. Our service does not store or log email addresses; it keeps only aggregate counts (such as the number of requests) to manage capacity. HIBP's privacy policy applies to the lookup. Checks run no more than once per day per address, and you can remove an address or turn alerts off at any time
• Abuse prevention — Breach-check requests include an Apple device-verification token so our service cannot be misused by others. The token does not identify you
• Breach data — Breach data is provided by Have I Been Pwned under the Creative Commons Attribution 4.0 license
• Purchases — Checkup+ is an auto-renewing subscription processed by Apple. We receive confirmation of your subscription status but never see your payment details

Deleting the app removes its data from your device. If you used iCloud sync, you can remove the iCloud copy in Settings → [your name] → iCloud → Manage Storage.

CampusBound

CampusBound works differently from our other apps: because families and counselors share plans, it uses an account and stores your data in the cloud. Its full CampusBound Privacy Policy governs the app and controls if anything here differs. In summary:

• Account and profile — Name, email, grade level, school, date of birth (for age verification only), role and an optional profile image. Sign in with Apple is supported, including Apple's hide-my-email relay
• Your content — Tasks, scholarships, college applications, packing lists, messages and Family Circle invitations, stored with our database provider, Supabase, in the United States. The student controls what each family member or counselor can see
• Optional AI features — The Essay Coach, Financial Aid Pack and Scholarship Match are off by default. When you use them, only the content you submit is sent through our backend to Anthropic's Claude API to generate a response. It is not used to train AI models, and we do not keep essay content beyond what is needed to show it to you
• Technical data — Device model, iOS and app version, crash logs, basic usage information and, if you enable them, push notification tokens
• Affiliate links — Dorm wishlist links to Amazon may be affiliate links under the Amazon Associates Program
• Age — CampusBound is for U.S. users age 13 and older. Users aged 13–17 must have a parent's or guardian's consent
• Deleting your account — Delete your account in the app's Settings. Your personal data is removed within 30 days, except purchase records we must keep for tax purposes

CampusBound privacy questions: hello@getcampusbound.app.

Everyday Identity Newsletter

When you subscribe, we collect:

• Email address (required)
• First name (optional)
• Subscription date and source
• Email engagement data — opens, clicks, and interaction timestamps

We use this data to send you newsletter content and understand which topics resonate. Your data is managed through Kit (ConvertKit) per their privacy practices.

Everyday Identity Blog

When you visit blog.everydayidentity.tech, we may collect:

• Standard server logs — IP address, browser type, pages visited, timestamps
• Cookies — see our Cookie Policy below
• Comments — if you leave a comment, your display name and content are stored

AltDraft

When you visit our AltDraft content site:

• Standard server logs — IP address, browser type, pages visited, timestamps
• Cookies — see our Cookie Policy below
• No personal information is required or collected

AI Agent Playbook (Digital Product)

When you purchase the AI Agent Playbook, payment is processed by Gumroad/Stripe. We receive:

• Your name, email address, purchase amount, and transaction ID
• We use this data to deliver your product, provide support, and send purchase-related communications

IAM Health Check (Consulting)

During consulting engagements, we collect:

• Business contact information — name, email, phone, company
• Technical environment data — system configurations and infrastructure details as needed for the engagement
• Engagement records — scope of work, deliverables, and communications

Client data is handled under the terms of our consulting agreement and deleted or returned upon engagement completion unless otherwise agreed.

How We Use Your Data

We use collected data to:

• Deliver our products and services
• Process transactions and fulfill purchases
• Communicate with you about newsletters, products, and support
• Improve our offerings and fix bugs
• Comply with legal obligations

We do not: sell your data, use it for targeted advertising, build advertising profiles, or share it with data brokers.

Third-Party Services

We use the following third-party services that may process your data:

• Apple (App Store) — App distribution and in-app purchases
• Apple (MusicKit, iCloud Drive and CloudKit) — Apple Music playback and iCloud Drive folders in rerun, and sync of your own data in EverydayKitchen and Checkup through your private iCloud account, when you choose to use them
• Radio Browser and internet radio stations — Station directory and audio streams in rerun
• Media servers you add — Plex, Jellyfin, Navidrome or other servers you connect to in rerun
• Cloudflare — Hosts Checkup's breach-check service
• Have I Been Pwned — Breach data for Checkup breach alerts
• Supabase, Anthropic and Amazon Associates — Database, optional AI features and affiliate links in CampusBound (see the CampusBound section)
• Kit (ConvertKit) — Newsletter delivery and subscriber management
• Gumroad — Digital product sales
• Stripe — Payment processing
• GitHub Pages — Website and blog hosting
• Umami — Privacy-friendly website analytics that we host ourselves; it does not use cookies

Each service has its own privacy policy. We encourage you to review them independently.

Cookie Policy

What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help sites remember your preferences and understand how visitors use the site.

How We Use Cookies

Our websites may use:

• Essential cookies — For site functionality, session management, and security
• Analytics — We count page views with Umami, which we host ourselves and which does not set cookies or track you across sites
• Preference cookies — To remember your settings (e.g., dark mode)

We do not use: advertising cookies, cross-site tracking cookies, or third-party marketing cookies.

Managing Cookies

You can control cookies through your browser settings. Most browsers let you block, clear, or be notified when cookies are set.

Data Retention

• Newsletter subscriber data — Retained until unsubscribed, then deleted within 30 days
• Purchase records — 7 years (tax/legal compliance)
• Server logs — 90 days
• Blog comments — Until removed by you or us
• Consulting client data — Returned or deleted upon engagement completion
• Support correspondence — 2 years after last contact

Your Rights

You have the right to:

• Access — Request a copy of the personal data we hold about you
• Correction — Request correction of inaccurate data
• Deletion — Request deletion of your personal data (unless we have a legal obligation to retain it)
• Opt Out — Unsubscribe from newsletters (link in every email) or manage cookie preferences through your browser

For California residents (CCPA): You have additional rights including the right to know what data we collect, the right to delete, and the right to opt out of data sales (we do not sell your data).

To exercise any right, email jay@sudobuiltapps.com. We will respond within 30 days.

Visitors and Users in the EEA, UK and Switzerland (GDPR)

If you are in the European Economic Area, the United Kingdom or Switzerland, Sudo Built Apps LLC is the controller of the personal data described in this policy. We process it on these legal bases:

• Contract — to deliver products, purchases and consulting services you request
• Consent — for newsletter subscriptions, which you can withdraw at any time
• Legitimate interests — to run, secure and improve our websites and to answer support requests
• Legal obligation — to keep purchase and tax records

In addition to the rights above, you have the right to restrict or object to processing, to data portability, and to lodge a complaint with your local data protection authority. Our service providers may process data in the United States; where required, they rely on appropriate safeguards such as Standard Contractual Clauses. Except for CampusBound (a U.S.-only app) and the email addresses Checkup checks for breaches, our apps do not send your app data to us.

Children's Privacy

We take children's privacy seriously. Our apps, websites, and services are not directed at children under 13, and we do not knowingly collect personal information from children under 13.

Our apps, except CampusBound, do not require accounts. CampusBound is for users age 13 and older, and users aged 13–17 must have a parent's or guardian's consent. For users aged 13–17, newsletter subscription and purchases should be done with parental awareness.

Data Security

We implement reasonable measures to protect your data, including:

• Encrypted connections (HTTPS/TLS) on all websites
• Secure storage for data we maintain
• Use of reputable third-party processors with their own security programs
• Regular review of our data handling practices

If we become aware of a data breach, we will notify you as required by law.

Email Communications (CAN-SPAM Compliance)

Our email practices comply with the CAN-SPAM Act:

• We clearly identify ourselves as the sender
• Subject lines accurately reflect content
• Every marketing email includes an unsubscribe link
• We honor unsubscribe requests within 10 business days
• We include our physical mailing address

Changes to This Policy

We may update this policy from time to time. When we make significant changes, we will update the "Last Updated" date and notify newsletter subscribers via email. The current version is always available at www.sudobuiltapps.com/privacy.

Questions?

If you have questions about this Privacy Policy or your data, contact us at:

Sudo Built Apps LLC
PO Box 252, Fulton, NY 13069
jay@sudobuiltapps.com

We aim to respond to all privacy-related inquiries within 30 days.