Legal
Privacy policy.
Your household lives on your iPhone and in your iCloud — not in a Ron database. Here is exactly what leaves the device, and what does not.
Last updated August 27, 2026
This policy covers the Ron mobile application and this website, both published by KF Digital Studio LLC, an Indiana limited liability company.
The short version
We do not host a copy of your household. Names, chores, meals, calendars, conversations with Ron, and the rest of family life are stored on your device. When you share a household, that data syncs through your iCloud (CloudKit), on Apple’s terms. We cannot open it, sell it, or hand it to anyone.
Ron reasons using Apple’s on-device foundation models. Your family’s details are not uploaded to us or to an AI provider in order to answer a question.
Signing in, weather, maps, and an optional grocery catalog lookup do use the network. Those paths are listed below. None of them create a Ron profile of your family on our servers.
What Ron stores on your device
All of the following lives in Ron’s storage on your iPhone, under iOS’s app protections:
- Names or nicknames of household members, roles (for example parent or child), birthdays, and similar details you enter.
- Chores, tasks, assignments, and completion history.
- Schedule items, reminders, and recurring routines.
- Notes, preferences, grocery lists, wishlists, ideas, and Household Manual entries.
- Your conversations with Ron, so it can hold context and follow through on standing instructions.
- A Sign in with Apple user identifier (and, the first time Apple sends it, a given name) in this device’s Keychain. Ron uses that only to know you are signed in on this phone. We do not send it to a Ron account server — there isn’t one.
If your iPhone is backed up — to iCloud or to a computer — then Ron’s on-device data is included in that backup on whatever terms you have already set with Apple. That backup is yours and is governed by Apple’s privacy policy, not ours. We have no access to it.
Sign in with Apple
Ron requires Sign in with Apple to use the app. That is authentication on your device, processed by Apple. We do not exchange Apple’s authorization code for tokens on a server of ours, and we do not keep a Ron user directory.
iCloud and family sharing
When you create or join a household share, Ron uses CloudKit so members see the same meals, chores, events, and lists. That sync uses the iCloud accounts of the people in the share. KF Digital Studio LLC cannot read your CloudKit household.
Apple services the app calls
These go to Apple, not to us. Apple’s privacy policy covers them:
- WeatherKit — a location for home weather in the daily brief.
- MapKit and geocoding — coordinates and addresses for leave-by times and a home pin.
- App Store / StoreKit — purchase and subscription. We never see your card details.
If you subscribe to a public calendar feed (.ics), Ron fetches that URL. The calendar host sees the request; we do not receive the feed on our servers.
AI processing
Ron uses the Foundation Models framework built into iOS to understand what you ask and decide what to do. That model runs locally on your device.
We do not send your household content to OpenAI, Anthropic, Google, or any other model provider, and we do not send it to ourselves for inference. On-device reasoning still works without a signal. Features that need the network (weather, maps, iCloud sync, grocery lookup) will not.
Optional grocery lookup (Walmart)
In Settings you can turn on Shop grocery lists at Walmart. It is off unless you enable it. Checkout always finishes on Walmart; Ron does not place the order.
When the toggle is on and you shop a list, Ron sends search text (for example an ingredient name), catalog item IDs, and a store location (coordinates from your home pin, or a ZIP code) to a signing proxy we operate at retail.getron.app, which forwards those catalog requests to Walmart’s APIs. Names of people, meals, chores, and conversations are not included.
That proxy is not a household database. Our host may keep brief operational logs (such as IP address and the request URL) to run and secure the service. Walmart receives the catalog query under Walmart’s terms. We do not use this traffic to advertise, track you across apps, or build a profile.
What we receive
We do not receive your household from the app. Product analytics and crash counters in Ron stay on the device unless you export them or attach them to an email.
We do receive:
- If you email us. Support and privacy mail reaches our inbox and contains whatever you chose to put in it. We keep it only as long as needed to deal with your question.
- If you join the launch list on this website. We store the name and email address you typed, and whether you asked for a TestFlight invite, with Brevo, the service that will send those emails. We use them for the launch announcement and, if you opted in, a TestFlight invite — and nothing else. A bot-protection check (Cloudflare Turnstile) runs in your browser to keep junk off that list; it is not stored with the contact and is not sent to Brevo.
- App Store purchases and diagnostics, via Apple. Apple sells the app and processes any payment. If you have opted in to sharing analytics with developers in your iOS settings, Apple may make crash and usage reports available to us. Those come from Apple, are not collected by Ron, and do not contain your household content.
- Grocery catalog requests, only if you opt in — as described above.
What we do not do
- We do not sell your personal information. We do not use it for advertising.
- We do not serve advertising and use no ad identifiers.
- We do not track you across apps or websites.
- We do not train any model on your household data.
Children’s privacy and Kid Mode
Ron is designed for adults who manage a household. It is not directed to children as a general audience app, and it is not in Apple’s Kids Category.
Kid Mode is an optional simpler view that a parent or guardian can enable so a child can see their own day, chores, and similar sections. It is not parental control, Screen Time, or device supervision. It is off unless a parent turns it on. Leaving it uses a parent PIN (4–8 digits) stored in this device’s Keychain.
A child’s first name, birthday, and assignments stay on the device and, if you share a household, in that family’s iCloud — not in a Ron database. We do not ask children for contact details, we do not serve advertising to children, and we do not use children’s information for marketing or profiling.
A parent or guardian can review, correct or delete anything held about their child from within the app at any time, or remove all of it at once with Delete Account. Practical guidance is on the Kid Mode page.
Deleting your data
There is no Ron server account to close. Sign in with Apple is local. Use Settings → Account → Delete Account in the app to wipe Ron’s data on this device (and, when CloudKit sharing is available, your role in the family share). You can export a JSON snapshot first.
Deleting Ron from your iPhone also removes its local data. Existing iCloud or computer backups are managed in your Apple account. See deleting your data for the specifics, including canceling an App Store subscription separately.
For email you sent us, or the launch list, write to privacy@getron.app.
Your rights
Privacy laws including the GDPR, UK GDPR, and US state laws such as the CCPA/CPRA give you rights to access, correct, export and delete personal information a company holds about you, and to object to its processing.
For household data in the app, those rights are exercised on the device (and in your iCloud share): export and delete are in Settings. For email and the launch list, write to privacy@getron.app and we will respond within the period the applicable law requires.
Security
Household data is protected by your device passcode, Face ID or Touch ID, and iOS app storage. Sensitive Household Manual entries are encrypted on the device. The Kid Mode PIN is stored on the device. Keeping the phone locked and up to date is the most useful thing you can do.
We do not run a central database of families. To report a vulnerability in the app or this site, see the security policy.
This website
getron.app sets no advertising or analytics cookies and does not track you across sites. Your light or dark theme preference is kept in your browser’s local storage and never leaves your device. The only information you can give this site is a name and email address for the launch announcement, and that is used for the announcement and nothing else.
Changes
If we make material changes, we will update the date above. If the on-device commitment changed — if we started hosting a copy of your household — you would be told plainly and in advance rather than by a quiet edit to this page.
Contact
KF Digital Studio LLC, 5534 Saint Joe Rd, Fort Wayne, IN 46835-3328, United States