Very Simple Projects

Privacy Policy

Last updated 11 September 2026

This policy explains what Very Simple Projects collects, why, and what you can do about it. It is written plainly and describes what the app and service actually do. It is not legal advice.

Who we are

The Very Simple Projects iPhone app and the service at verysimpleprojects.com are provided by Portfoliobox Stockholm AB ("we"), org. no. 556894-4382, Rånövägen 30, 168 39 Bromma, Sweden. We are the data controller for the personal data described here. Contact: verysimple@portfoliobox.net.

What we collect

• Your account. When you sign in with Apple or Google, we receive a stable account identifier and, where you allow it, your email address and name. We never receive your Apple or Google password.
• Your projects, tickets and comments. The projects you create, the tickets in them (title, body, status, star, labels), the labels you define, and every comment in a ticket's thread, whether you or a connected agent wrote it. Stored so they sync across your devices and so the agents you connect can file and follow up.
• Your tokens. For each agent you connect we store a hashed token, its name, and which project it belongs to. If you connect through another app's sign-in flow, we also record which app that was.
• Your subscription. Apple tells us whether you have an active subscription, and its renewal or expiry. Apple handles the payment; we never see your card.
• Minimal technical data. Ordinary server logs needed to run and secure the service. We do not use advertising or tracking SDKs.

What we do not do

We do not sell your data. We do not share your projects, tickets or comments with anyone except the agents you choose to connect, and each of those sees only the one project you connected it to. We do not use your data to train AI models. We show no ads.

Where your data lives

Your projects, tickets, comments and account are stored in a PostgreSQL database hosted by Fly.io in Amsterdam, in the European Union. Traffic is encrypted in transit (HTTPS), and the database's storage is encrypted at rest by the host. Project tokens and sign-in session tokens are stored only as hashes, so a database copy alone does not reveal them.

Connecting an agent

When you connect an AI agent (such as Agent Heim), you create a token for one project. That token lets the agent read the project's tickets, file new ones, comment, change status, star and labels. It cannot delete anything, and it cannot reach your other projects. You can see and revoke every token in the project's settings under Connect. Revoking it cuts off that agent immediately; what it already wrote stays in the thread, signed with its name.

Your rights

Under the GDPR you can access, correct, export, or delete your data. You can edit or delete any ticket, comment or project in the app at any time, and delete your account and everything in it in the app under Account, Danger zone. To export everything, or for any other request, email verysimple@portfoliobox.net and we will action it. See our GDPR page for detail.

Retention

We keep your projects, tickets and comments for as long as your account exists. Delete a ticket and it and its comments are removed; delete a project and its tickets, labels and tokens go with it; delete your account and we remove everything: projects, tickets, comments, tokens, and the account itself.

Children

The app is rated 4+ but is intended for general audiences. It is not directed at children, and we do not knowingly collect data from children under the age of digital consent without a parent's involvement.

Changes

If this policy changes we will update this page and its date. Continued use after a change means you accept the updated policy.