nextthree-privacy

NextThree Privacy Policy

Last updated: October 15, 2026

NextThree (“NextThree,” “we,” “us”) is a local-first productivity app developed by FoxForge Studio. It helps you turn one task into three smaller actions, save your progress, return to unfinished work, optionally use Google Gemini to create or adjust steps, or use a simple on-device starter without AI.

The current release of NextThree is free to use.

This Privacy Policy explains what information NextThree processes, where it is stored, when information may be sent to third parties, and the choices available to you.


Summary


Information stored locally

1) Task draft

Text you enter on the Home screen may be stored locally as an unfinished draft.

This allows the draft to remain available if you leave the screen or return to the app later.

The draft is stored using Apple’s local application preferences.

Saving a draft locally does not itself send the text to Google Gemini.


2) Saved task sessions

When a plan is successfully created, or when you choose the on-device starter, NextThree stores the task session locally.

A saved session may contain information such as:

Saved sessions are stored in NextThree’s private local Application Support storage.


3) Progress history

NextThree stores progress locally so you can pause a task and return later.

Progress may include:

An action is considered completed only when you mark it completed.

Opening an action, starting a timer, or allowing a timer to expire does not automatically mark the action completed.


4) Local timer information

If you use an action timer, NextThree may store locally:

Timer information is stored as part of the local task session.


5) Local preferences

NextThree stores local preferences such as:

These settings are stored on your device.


6) Legacy compatibility information

Earlier NextThree builds used local access and trial-related fields.

The current release is free and does not use these legacy values to restrict access.

For compatibility with existing saved session files, legacy fields may remain in locally stored data from an earlier version.

These fields are not used by the current release to create a paywall or limit how many tasks you can create.


Free access

7) No active purchase or subscription system

The current NextThree release is free to use.

The current app does not create an active:

Previous local compatibility fields may remain in existing saved files, but they do not impose an app-level lifetime task limit.

AI-powered features still depend on network connectivity, Firebase/Google service availability, provider capacity, applicable provider quotas or limits, and other technical service conditions outside NextThree’s local access rules.


Google AI

8) Google AI is optional

You can use NextThree’s simple on-device starter without sending your task to Google Gemini.

Google AI is used only for features that request AI-generated or AI-revised steps.


9) Explicit AI permission

Before NextThree sends task information to Google Gemini, the app checks whether AI permission has been granted.

If permission has not been granted, NextThree presents a disclosure explaining that your task and relevant progress will be sent to Google’s Gemini service through Firebase AI Logic.

Displaying the disclosure does not itself send your task to Gemini.

An AI request proceeds only after you grant permission.

You can also enable or withdraw AI permission in Settings.


10) Withdrawing AI permission

You can withdraw AI permission in Settings.

Withdrawing permission:

If permission has been withdrawn, NextThree requires permission again before a future AI-generation request.


11) Initial AI plan generation

When you request AI-generated steps, NextThree may send Google Gemini information including:

For a new task, the progress lists normally begin empty.

The task text accepted by the current app is limited before submission.


12) Information returned by Gemini

Gemini may return:

NextThree validates AI responses before accepting them as a plan.

AI output may still be incorrect or unsuitable for your situation.

You decide whether to use, edit, skip, or complete a suggested action.


13) Clarification answers

Gemini may occasionally request one clarification before producing a plan.

If you choose to answer, the clarification you provide becomes part of the AI request context and is sent to Gemini when the request is submitted.

The current app limits clarification text before submission.


14) Requesting another three actions

After resolving the current set of actions, you may request another three.

NextThree may then send relevant task context to Gemini, including:

Completed, skipped, and unfinished actions are kept distinct.

The model is instructed not to treat skipped or unfinished actions as completed work.


15) Making an action smaller or changing its approach

You may ask NextThree to make a current action smaller or propose a different approach.

If AI permission is enabled, this creates a new Gemini request.

The request may contain:

The resulting revision is previewed before it replaces the saved action.

NextThree validates that unrelated actions remain unchanged.


16) Manual editing

You can manually edit eligible actions without sending that manual edit to Gemini merely because you edited it.

A manual edit may be stored locally as part of the task session.

Previous versions of an edited action may also remain in the local session history.


On-device starter

17) Local starter

NextThree provides a simple starter plan generated entirely on your device.

Using the local starter:


Firebase AI Logic and Google Gemini

18) Firebase AI Logic

NextThree uses Firebase AI Logic to access Google’s Gemini Developer API for optional AI features.

The current release uses a configured Gemini model to generate or revise task steps.

Firebase states that Firebase AI Logic itself does not store customer input and output sent to and received from the selected generative-AI provider.

The Gemini provider’s own data-use and retention rules still apply.

Google information:

https://firebase.google.com/support/privacy

https://ai.google.dev/gemini-api/docs/zdr

https://ai.google.dev/gemini-api/docs/logs-policy


19) Gemini data use and retention

Google’s handling of Gemini API requests can depend on the developer project’s service tier and configuration.

Google currently distinguishes between free and paid Gemini Developer API services.

Under Google’s current documentation:

NextThree does not itself use your task text to train a separate FoxForge Studio AI model.

FoxForge Studio cannot recall an individual AI request after it has already been transmitted to Google.

Google’s independent processing is governed by Google’s applicable terms, policies, and project configuration.


20) Information you should avoid sending

AI requests can contain the task text you write and relevant progress from that task.

Do not enter information that you do not want transmitted to the AI provider, such as:

AI suggestions can be inaccurate.


Firebase App Check

21) App integrity verification

NextThree uses Firebase App Check to help protect Firebase-connected AI requests from unauthorized clients.

Production builds use:

These services may process technical app/device attestation information needed to determine whether a request originates from an authentic app or supported device.

This may include:

Firebase states that App Check itself does not retain attestation material.

Attestation material sent to Apple is subject to Apple’s applicable terms and policies.

App Check tokens are handled according to Firebase’s applicable security and retention practices.

NextThree does not use these integrity signals to build a profile of the content of your tasks.


Information NextThree does not request during normal use

22) Protected device data

The current release does not request normal app access to:

NextThree does not require a NextThree user profile or account.


Advertising, tracking, analytics, and cloud sync

23) No advertising or advertising tracking

NextThree does not display third-party advertising.

The current privacy manifest declares tracking as disabled.

NextThree does not use your task history for cross-app or cross-website advertising tracking.


24) No third-party analytics or crash SDK

The current release does not include Firebase Analytics or Firebase Crashlytics in the app target.

The current release does not include another third-party analytics or crash-reporting SDK.

NextThree does not send raw task text to a FoxForge Studio analytics database.

Firebase and Google may independently process technical service information required to operate Firebase AI Logic and App Check.


25) No NextThree account or cloud task database

NextThree does not require a developer-hosted account.

The current release does not use CloudKit to synchronize your task sessions.

The current release does not use Firebase Storage, Firestore, or another developer-operated cloud database to store your saved NextThree task history.

Your durable session history is stored locally by NextThree.


Local retention and deletion

26) Saved sessions

Saved task sessions remain locally on your device until:


27) Deleting an individual session

You can open Recent and delete a saved task session.

Deleting the session removes NextThree’s active locally saved copy of that task and its saved progress.

Deleting a local session does not:


28) Drafts and preferences

The task draft, appearance preference, haptic preference, and AI-permission choice are stored locally using application preferences.

The current release does not provide one separate button that deletes every local preference at once.

These local values can be changed through normal app behavior where controls are available and are removed with the app subject to normal iOS backup and restore behavior.


29) Legacy compatibility and historical ledger fields

Older access-related or historical ledger fields may remain in local app data for backward compatibility.

The current release does not use those fields to impose an app-level lifetime task limit.

Deleting an individual saved session removes that session’s task content and saved progress from NextThree’s active session history.

However, historical compatibility or ledger fields that are stored separately from that individual session may remain locally after the session is deleted.

Those remaining historical fields do not contain the deleted session’s active task content and are not used to restrict current access.

Deleting the NextThree app removes these remaining active local compatibility and ledger fields from the app container, subject to normal iOS backup and restore behavior.


30) Deleting the app

Deleting NextThree removes information stored in the app’s active local container from the device, subject to normal iOS backup and restore behavior.

Deleting the app does not:


Local security

31) Session storage

NextThree stores its durable session document in the app’s private Application Support directory.

The app writes the session document atomically to reduce the risk of incomplete writes.

On iOS, NextThree applies Apple’s file-protection mechanism to the saved session file after it is written.

The current implementation uses file protection that keeps the file protected until the device has been unlocked after startup.


32) AI request security

Firebase App Check is used to help verify Firebase-connected AI requests from authentic copies of NextThree.

Network communication with Firebase and Google is handled through the Firebase SDK and the security mechanisms provided by those services.

No storage or transmission system can be guaranteed to be completely secure.


Support communications

Support communications are optional and separate from normal NextThree use.

NextThree does not automatically attach your locally saved task sessions or task history to a support email.

If you contact us at simon.yam22@gmail.com, FoxForge Studio receives the information you voluntarily provide.

This may include:

We use voluntary support communications to:

The simon.yam22@gmail.com mailbox is provided through Gmail, operated by Google LLC.

Google therefore processes information necessary to route, deliver, store, secure, and filter those messages according to Google’s applicable policies.

Google Privacy Policy:

https://policies.google.com/privacy


33) Support-message retention

Support emails may be retained while a support request is open and for a reasonable period afterward when needed for:

FoxForge Studio does not currently promise one fixed automatic deletion period for support messages.

Support messages may remain in Gmail according to Google’s applicable retention, backup, security, and service practices.


34) Support-message deletion requests

You may request deletion of a support conversation that you previously sent to FoxForge Studio by emailing:

simon.yam22@gmail.com

Please provide enough information to identify the applicable conversation.

Where reasonably possible, we will delete the identified communication from active support records, subject to information that must be retained for legal, security, fraud-prevention, backup, or provider-related reasons.

Deleting a support email does not affect your locally stored NextThree task data.


Privacy-policy hosting

35) GitHub Pages

This Privacy Policy is hosted using GitHub Pages, operated by GitHub, Inc.

Visiting this privacy-policy webpage is separate from using the NextThree app.

GitHub states that GitHub Pages logs visitors’ IP addresses for security purposes.

NextThree does not send your locally saved task sessions, drafts, progress, or preferences to GitHub Pages.

GitHub Privacy Statement:

https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement


Third-party protection

Google/Firebase process information for the optional AI and app-integrity functionality described above.

Apple may process app/device attestation information through App Attest or DeviceCheck.

Gmail processes information that you voluntarily send in support communications.

Any third party with whom NextThree shares user data will provide the same or equal protection of user data as stated in this Privacy Policy and as required by Apple’s App Review Guidelines.


Your choices

You can:

Withdrawing AI permission stops future NextThree AI requests until permission is granted again.

It does not recall information already sent to Google.

Deleting a local session removes NextThree’s local active copy but does not retract earlier Gemini requests.


Children’s privacy

NextThree is not directed to children under 13.

NextThree does not operate a FoxForge Studio user-account system through which children provide profile information.


Changes to this policy

We may update this Privacy Policy if NextThree’s features, providers, or data practices change.

The Last updated date above reflects the latest version.


Contact

For questions or privacy requests regarding NextThree, contact:

FoxForge Studio

Email: simon.yam22@gmail.com