Privacy Policy

Privacy Policy

Last updated: 13 June 2026 Controller: Chapple Property Services Ltd Applies to: What's On (iPhone & Mac)

01 Who we are

What's On is a privacy-first email-triage app for iPhone and Mac, provided by Chapple Property Services Ltd (“we”, “us”, “What's On”), a company registered in England & Wales, operated by Oliver Chapple. Registered office: 7-8 Crescent Stables, 139 Upper Richmond Road, London, SW15 2TN.

For any privacy question or to exercise your rights, contact us at ollierc@gmail.com. We are the data controller for the personal data described below, except where stated otherwise (see §4 — for the Private plan you act as controller of your own Anthropic API usage).

02 How the two plans differ — and why it matters for your privacy

What's On reads your mail and maintains a prioritised task board. The AI never runs on our servers. It runs in one of two places depending on your plan, and this changes who can see your email content:

Plain-English summaryOn Connected, your email is read inside your Claude account (Anthropic processes it). On Private, your email is read on your device with your own API key. In both cases we do not sell your data and show no ads.

03 What we collect & store

On your device

Your mailbox connections and, on the Private plan, your Anthropic API key are held on your device. We do not receive them.

On our relay server (keyed to your dashboard restore code)

To sync your board across devices and run the Connected routine, we store the following email-derived personal data:

What we do not store

Collected by Apple, not us

Purchases and subscriptions are processed by Apple via the App Store; we receive confirmation of your subscription status but not your payment details. While the app is in TestFlight, Apple also collects standard crash and beta-usage data. We use no third-party analytics, advertising or tracking SDKs of any kind. Our relay keeps ordinary server logs (e.g. IP address, timestamps) for security and reliability.

04 How your email is processed by Anthropic — and the setting you should check

Because the AI runs in your own Anthropic environment, Anthropic's data policies apply to the processing of your email content, and they differ by plan:

 Connected (your Claude Pro/Max)Private (your API key)
Governed byAnthropic Consumer TermsAnthropic Commercial / API Terms
Used to train models?Only if you leave training on — see belowNo — API data is not used for training
Typical retention at AnthropicUp to 5 years if training on; ~30 days if opted outShort abuse-monitoring window only (days)
Action for Connected usersTo stop your email-derived content being used to improve Anthropic's models, sign in to Claude and set Settings → Privacy → “Improve Claude for everyone” (Help improve Claude) to OFF. What's On will guide you through this during setup. Note that, per Anthropic's terms, content their systems flag for safety review may still be reviewed regardless of this setting — so we cannot promise your data is never seen. These settings are controlled by Anthropic and may change; check Anthropic's current data-usage policy.

We are not affiliated with or endorsed by Anthropic. Your use of Claude or the Anthropic API is also governed by Anthropic's own terms and privacy policy.

05 Legal bases for processing (UK/EU GDPR)

06 Where your data is stored & how we protect it

Your board, memory and routine data are stored on our relay server hosted in Germany (EU) by Hetzner Online GmbH. We protect it with access controls and encryption in transit (TLS).

Honest statement on encryptionYour stored data is currently held in our database as access-controlled records, encrypted in transit but not end-to-end encrypted. This means that we, as the service operator, are technically able to access the board, memory, mailbox addresses and routine token associated with your account. We do not do so except as needed to operate, support, secure or debug the service, or where legally required. We do not claim to be “zero-knowledge”. Your dashboard restore code acts as an access credential — keep it private.

We never sell your personal data and we serve no advertising.

07 How long we keep your data

If your subscription lapses, we keep your data bucket for up to 6 months from your last activity so that resubscribing resumes your board instantly with no re-onboarding. After that it is automatically deleted. You can ask us to delete your data immediately at any time (see §10).

Account and transaction records may be kept longer where we are legally required to retain them.

08 Third parties we share data with (subprocessors)

We share the minimum necessary with the following, each under their own terms:

ProviderPurposeData involved
AppleApp distribution, in-app purchases, TestFlight, push (if enabled)Subscription status, crash/beta data
AnthropicThe AI triage (your Claude plan or your API key)Email content processed in your own Anthropic environment
Google / MicrosoftGmail and Microsoft 365 mailbox access you authoriseMailbox access via OAuth (held on device / in connectors)
Hetzner Online GmbHRelay & database hosting (Germany, EU)Your stored board, memory, routine data
Resend, Inc. (United States)Sending setup & restore emailsYour email address, setup links

We do not sell data or share it with advertisers or data brokers.

Google API Services — Limited UseWhat's On's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

09 International transfers

Your relay data is stored in the EU (Germany). Some subprocessors (e.g. Apple, Anthropic) may process data outside the UK/EU. Where they do, transfers are protected by appropriate safeguards such as the UK International Data Transfer Agreement, the EU Standard Contractual Clauses, or an adequacy decision.

10 Your rights

Subject to applicable law, you have the right to access, correct, delete, restrict, object to, or port your personal data, and to withdraw consent. To exercise any of these — including immediate deletion of your stored bucket — email ollierc@gmail.com. We will respond within the timeframes required by law (generally one month).

UK/EU residents: you may complain to a supervisory authority — in the UK, the Information Commissioner's Office (ICO), ico.org.uk.

California residents (CCPA/CPRA): you have the right to know, delete, correct, and opt out of “sale” or “sharing” of personal information. We do not sell or share your personal information as those terms are defined, and we do not discriminate against you for exercising your rights.

11 Children

What's On is not intended for, and may not be used by, anyone under 16. We do not knowingly collect data from children under 16. If you believe a child has provided us data, contact us and we will delete it.

12 Changes to this policy

We may update this policy as the app evolves (for example, when we add end-to-end encryption or change subprocessors). We will post the new version here with an updated date and, for material changes, notify you in-app.

13 Contact & complaints

Questions, requests or complaints: Chapple Property Services Ltd, ollierc@gmail.com. We aim to resolve concerns directly; you also have the right to complain to your data protection authority (see §10).

Read our Terms & Conditions →

© 2026 Chapple Property Services Ltd. What's On is not affiliated with or endorsed by Anthropic, Apple, Google or Microsoft. Claude is a trademark of Anthropic.

What's On · Privacy Policy · v1.0 · 13 June 2026