Operarius
Privacy policy
Last updated 26 October 2026
The short version. Operarius keeps your plans on your phone. There's no advertising, and I never see your tasks.
An account is optional. If you make one, it holds your name, your email address and when you made it. That's all.
Anonymous usage statistics (which screens confuse people, what gets used) are sent only if you say yes, never include anything you plan or type, and stop the moment you turn them off.
Who is responsible
Operarius is made by Oleksandr Shabaldas, Slovakia, who is the controller of the personal data described here ("I", "me"). Write to gamedev@ittt-production.uk.
What stays on your phone
Everything you plan in Operarius is stored only on your device, in the app's private storage. I don't receive it and can't see it, whether or not you have an account. That includes:
- tasks, their times, notes, subtasks, repeats and reminders;
- tags, places (their names, the Google Maps links you pick, their coordinates, and photos you choose from your gallery), presets and settings.
Backups. When you export a backup, Operarius writes a file where you choose to save it. The file isn't encrypted, so keep it somewhere safe. Android may also back up the app's data to your Google account (Android Backup, encrypted by Google); you can turn this off in your phone's settings.
Calendar sync. If you turn on Google Calendar sync, Operarius reads and writes events in the calendars on your phone, with your permission. Your phone's calendar account then syncs those events under that provider's own terms. Operarius sends nothing to me.
Reminders and widgets are scheduled and drawn on your phone.
What I process, and why
| When | What | Why, and on what legal basis | How long |
|---|---|---|---|
| You make an account or sign in | Your email address, your name (if you give one, or the one on your Google account), your Google profile picture's address (with Google sign-in), an account ID, how you sign in, and when the account was made and last used. With email sign-in, your password is stored by Firebase in hashed form; I never see it. For a short time Google also keeps the IP address and device type of sign-ins, to stop abuse. | To give you the account: backups, and restoring them on another phone. This is performance of our contract with you (Art. 6(1)(b) GDPR). | Until you delete the account. Sign-in logs are kept for a few weeks. |
| You confirm your email or reset your password | Your email address, to send you the link. | Performance of our contract (Art. 6(1)(b)). | Nothing beyond the account itself. |
| The app starts, or comes back to the front | It reads Operarius's settings document (settings that apply to everyone, such as whether signing in is required). Google receives the request with your phone's IP address. No data about you is stored. | To run the app the same way for everyone: my legitimate interest (Art. 6(1)(f)). | Not stored by me. |
| You go through the introduction on a new phone | One anonymous record of that run: which cards you reached, how long you spent on each and how often you went back; your answers (how your days feel, how you found Operarius and the few words you may type for “Somewhere else”, which areas fill your days, your day's start and end and first day of the week, the look and reminder style you pick); whether you planned a first task, sent a wish, said yes to anonymous usage or made an account; which reminder permissions were in order; whether each answer could have been read before it was given; the app and Android versions. It carries no ID of your phone or account, so it can't be linked to you. Replays and tests send nothing. | To see which parts of the introduction help and where people give up, and improve it: my legitimate interest (Art. 6(1)(f)). | 13 months. |
| Only if you say yes to anonymous usage (in the introduction or in Settings → About) | A random ID made on your phone when you say yes (not linked to your account or email); which screens are open and for how long; what gets used (for example a task moved or a reminder snoozed); moments that suggest something is unclear (a “?” opened, a tap the app refused, the same spot tapped again and again, an editor closed without saving, an Undo); what failed (the error codes of sign-in, calendar sync or backup files, the type of an app error, a screen slow to open); and each session's start and end, app and Android version, language and design. Sent once per session, when the app goes to the background. Never task names, notes, subtasks, places, tag names, links, anything you type, your account, email, location or contacts. | To find where people struggle and what to make simpler: your consent (Art. 6(1)(a)). You can turn it off at any time in Settings → About; until then, saying no means nothing is recorded. | 13 months. Turning it off stops it at once and asks for everything sent from that phone to be deleted, which happens without undue delay and within one month at the latest. |
| You suggest an improvement or report a problem in the app | Your message, its kind (idea, problem, wish) and where you sent it from; your email address only if you leave one for a reply; the app version and phone model if you choose to include them. | To read and answer it, and improve the app: my legitimate interest (Art. 6(1)(f)). | Until it's dealt with, then up to 2 years. |
| You write a review, in the app or on this website | Your stars, your words and your first name with the initial of your last name. Nothing is shown before I approve it; then it may appear in the app's introduction and on this website. | To show what people think of Operarius: your consent, which you give with the tick under the review (Art. 6(1)(a)). | Until you ask me to remove it, or I do. |
| Your review on Google Play | I may copy public Google Play reviews (stars, words, the name Google Play shows, the date) into the app's list of reviews. | To show what people think of Operarius: my legitimate interest (Art. 6(1)(f)). Ask me and I'll remove yours. | Until you ask me to remove it, or I do. |
| You write to support | Your email address, your message, and anything you choose to include (such as the support info the app can copy). | To answer you: my legitimate interest in helping (Art. 6(1)(f)), or our contract (Art. 6(1)(b)). | Until the matter is resolved, then up to 2 years. |
| You paste a shared Google Maps link into a place | The app opens that link on Google's servers to find the place's coordinates, so Google receives the request (with your phone's IP address). | To show your place on the map, as you asked (Art. 6(1)(b)). | I store nothing; see Google's privacy policy. |
I don't use advertising or anyone else's analytics or tracking tools, don't sell or rent data, and don't profile you. The anonymous usage statistics above are my own, read only by me, and need your yes.
Who else is involved
- Google Firebase (Google Ireland Limited, Google LLC) runs the accounts, the settings document, and stores the introduction's records, anonymous usage, feedback and reviews, as my processor under the Firebase Data Processing and Security Terms. Some of this data may be processed in the USA, protected by the EU–US Data Privacy Framework and the European Commission's standard contractual clauses.
- My email provider, to receive and answer support messages.
Your rights
You can ask me for access to your personal data, to correct or delete it, to restrict or object to its processing, and to receive it in a portable format. Write to gamedev@ittt-production.uk from the address of your account; I answer within one month.
Deleting your account: in the app, Settings → Account → Delete account. Without the app, see Delete your account.
To delete everything on your phone, use Settings → Data & backup → Delete all data, or uninstall the app.
Anonymous usage: because it isn't linked to you, I can't find your statistics by your name or email. Turning anonymous usage off in Settings → About deletes everything sent from your phone (see above). Uninstalling the app stops it too, and what was sent is deleted after 13 months.
You can also complain to a supervisory authority: in Slovakia, the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov SR, Hraničná 12, 820 07 Bratislava), or the authority where you live.
Children
Operarius isn't directed at children under 13, and I don't knowingly let them make an account.
Security
Your plans are protected by Android's app sandbox and your phone's screen lock. Connections to Firebase are encrypted, and passwords are stored only in hashed form. If a breach ever affected personal data I process, I would notify the authority within 72 hours, and you without undue delay where required.
Changes
If this policy changes, I'll update this page and its date, and point out important changes in the app.