OneTwo KanbanThis is a courtesy translation. The German version at onetwokanbanPrivacy.html is legally binding.
This privacy policy applies to the app OneTwo Kanban (shown as “12 Kanban” on the Home Screen) on iPhone, iPad and Mac. It supplements the general privacy policy of this website, which covers visiting the website itself.
1. Controller
Christian Drapatz
Kämpenstraße 42
45147 Essen
Germany
Email: support@onetwoapps.com
2. Principle: your data stays with you
OneTwo Kanban needs no account and no sign-in. The developer runs no server of its own to which the app sends data. The app contains no ads, no tracking, no analytics or advertising SDKs and no AI services. No usage profiles are created. The developer receives neither your projects and issues nor any information about how you use the app.
3. What data the app processes
The app stores what you enter yourself: projects, folders, boards with columns and rules, releases and sprints, and issues with title, description, comments, subtasks, acceptance criteria, links, relations, due date, reminder, tags, color tags, bug analysis (for example steps to reproduce, versions, environment), estimates, time tracking and attachments (files, photos, scans, sketches). In addition, the history of changes and your settings. This data is kept in the protected storage of your device. On iPhone and iPad it is additionally protected by the operating system's data encryption as long as the device has not been unlocked after a restart.
For the fields “Assignee”, “Reporter” and for time tracking you can create people. The app stores the name you give and, if you wish, a contact address. If you enter other people there, you are processing their data; please only add what you need for your work. The app does not pass this information on.
4. iCloud sync (optional)
On first launch the app asks whether you want to use iCloud. Only if you agree is your data synced between your Apple devices via your own private iCloud database. The transfer runs exclusively through Apple's iCloud. The developer has no access to this data.
The app stores the contents of your projects and issues in iCloud in encrypted fields whose keys Apple provides only to your devices. Attachments are stored as files in iCloud. They are end-to-end encrypted only if you have turned on “Advanced Data Protection for iCloud” in your Apple Account; otherwise they are protected by Apple's standard encryption. Apple processes technical details such as modification times to operate the sync.
If two devices change the same issue differently, the app keeps both versions until you decide in the conflict center which one applies. You can disconnect from iCloud at any time in the app's settings. You manage or delete data already stored in iCloud through the app (see section 14) or in your device's system settings under your name › iCloud. Apple's privacy policy also applies: apple.com/legal/privacy.
5. Reminders and notifications
The app schedules reminders exclusively on your device using the operating system's notification feature. There is no push server of the developer. The app asks for notification permission only when you set your first reminder.
By default a notification shows the title of the issue. Depending on your system settings it may also appear on the Lock Screen. In the app's settings you can turn off “Titles in Notifications”. The notification then shows only a neutral hint. You also decide in the system settings under “Notifications” when previews are visible on the Lock Screen.
6. Widgets
For widgets, the app places a small file with the displayed issues in a protected area on your device that only the app and its widgets can read. This file never leaves the device. Titles in widgets are marked as sensitive so the system can hide them while the device is locked. With the “Titles in Widgets” switch in the settings you can turn off titles in widgets entirely.
7. Siri and Shortcuts
With Siri and the Shortcuts app you can create, open and complete issues, add them to “My Day” or show the issues of a project. The app provides only the data needed for the respective command. Apple processes voice input; Apple's privacy terms for Siri apply.
8. Camera, photos and text recognition
On iPhone and iPad the app asks for camera access only when you want to take a photo, scan a document or recognize text. Text recognition runs entirely on your device. Images and recognized text are not sent to any server. You choose photos from your library using the system photo picker. The app receives only the images you select and does not read your library.
Only if you turn it on in the app's settings does the app additionally save the original of your camera and scanner captures to your photo library. For this it asks for permission to add photos. This does not include read access to the library. The Mac app does not use a camera.
9. App lock
The app can be locked with Face ID, Touch ID or the device passcode or Mac login password. The operating system performs the check; the app receives no biometric data. An optional master password is not stored in plain text, only as a derived verification value.
10. Export, printing and backup
When you export data as JSON, Markdown, text or PDF, print, or create a backup, these files are created only at your request. You decide where they go, for example to the Files app or a printer. Exported files are not encrypted; store them accordingly. When reading in a file, the app checks it on your device before taking over any data.
11. Local file on the Mac
On the Mac you can use an encrypted file in a place of your choice instead of iCloud. The file is protected with a password only you know. Without this password it cannot be opened; the developer cannot recover it.
12. Feedback by email
“Send feedback” in the settings opens your email app with a prepared message to support@onetwoapps.com. The app sends nothing itself. You see and send the message in your email app.
Only if you turn on “Include diagnostic data” (off by default) does the app add technical details: app version and build, operating system version, device class (for example iPhone or Mac), app and system language, sync state, notification status, whether reminders are on, the number of folders, projects, issues, attachments and pending changes, and the latest technical error codes. Titles, descriptions, comments, names, attachments and file names are never included. You see the exact text in the app before sending.
I use your email and its content only to answer your request. I delete it once it is settled and no legal retention obligations apply.
13. Crash reports via Apple
The app contains no crash reporting tool of its own. If you have agreed in the system settings to share analytics with app developers, Apple provides the developer with anonymized crash reports and usage statistics. These contain no content of your projects. You can withdraw this consent at any time in the system settings under “Privacy & Security” › “Analytics & Improvements”.
14. Retention and deletion
Your data is stored until you delete it. Deleted issues, projects and folders first go to the app's trash, where you can restore or permanently delete them. The full history of an issue is available for 30 days; after that, only the latest state per field remains.
In the settings under “Data”, “Delete Everything” permanently removes all projects, folders and issues including attachments on all devices using your iCloud account, after a confirmation. So that deletions reach other devices, small technical deletion markers without content remain in iCloud. Backups and exports you stored outside the app are not affected. If you uninstall the app, its data is removed from that device. Your data in iCloud remains until you delete it through the app or your device's iCloud settings.
15. Permissions at a glance
OneTwo Kanban requests permissions only for features you actually use: notifications for reminders, camera for photos, scans and text recognition (iPhone and iPad), adding to the photo library if you turn on saving captures, and Face ID for unlocking. iCloud sync requires an internet connection. You can change all permissions at any time in the system settings; the app offers a direct link under “Permissions” in its settings.
16. Legal bases
Processing your data in the app serves to provide the features you use (Art. 6(1)(b) GDPR). The app uses iCloud sync, reminders, the camera, saving to the photo library and attaching diagnostics only with your consent (Art. 6(1)(a) GDPR). You can withdraw consent at any time with effect for the future by turning off the respective feature in the app or in the system settings. Answering requests by email is based on Art. 6(1)(b) or (f) GDPR (legitimate interest in answering your request).
17. Sharing with third parties
The developer does not pass data to third parties and does not sell data. Apple processes data only to the extent technically necessary when you use iCloud, Siri, notifications or the system's analytics.
18. Your rights
Your data is stored only on your devices and, if you wish, in your own iCloud or your own file. You can view, change, export and delete it in the app at any time. In addition, subject to the legal requirements, you have the right of access, rectification, erasure, restriction of processing, data portability and objection. You may also lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.
19. Changes
If the app changes in a way that affects how data is processed, I will update this privacy policy. The version published here applies.
20. Last updated
October 2026