Privacy Policy
This policy explains what data the Cue mobile app handles, and how. The short version: Cue is local-first — your tasks live on your device, not on our servers.
Last updated June 26, 2026 · Applies to the Cue Android app published by Novagrid Labs.
In short
- Your reminders and settings are stored only on your device.
- We don’t have accounts, ads, analytics, or tracking — and we don’t sell data.
- The only data that leaves your phone is the command text you send to an AI provider so it can understand what you asked.
- Any API key you add is stored encrypted on-device and sent only to the provider you choose.
01Who we are
Cue is an Android app developed by Novagrid Labs (“we”, “us”). This policy explains what data the Cue app handles, and how. It applies to the Cue app only.
02Data stored on your device
Cue stores the following locally on your phone only. It is never uploaded to a Cue server, because Cue has no user-data server:
- Your tasks & milestones — titles, notes, due times, priorities and completion state, kept in the app’s local storage.
- Your settings — chosen AI provider, sort preferences, and per-priority alarm sounds.
- Any API key you add — held in the Android Keystore-backed encrypted store (flutter_secure_storage), not in plain text.
- A random install identifier — an anonymous value generated on first launch, used only to fairly rate-limit the free AI option. It contains no personal information and is not linked to your identity.
03Microphone & voice input
Voice capture is optional. When you tap the mic, Cue uses your device’s built-in speech recognition to turn speech into text. The audio is processed by your Android system speech service; on many devices that service is provided by Google and may process audio on Google’s servers under Google’s privacy policy. Cue itself does not record, store, or upload audio — it only receives the transcribed text. If you never grant the microphone permission, you can use Cue entirely by typing.
04AI processing (the only data that leaves your phone)
To understand a command like “remind me to call the dentist tomorrow at 10, high priority”, Cue sends the text of your command (and relevant task context needed to answer a question) to a large language model. How that happens depends on your provider setting:
Default: Cue’s free AI
New installs work out of the box. Your command text is relayed through a lightweight Cue proxy (a Cloudflare Worker we operate) to Groq, which runs the model. The proxy does not store the content of your requests — it only keeps an anonymous, aggregate count of daily requests to enforce a fair-use limit, and passes the request to Groq for processing. Traffic transits Cloudflare as our hosting provider.
Bring your own key
If you add your own API key in Settings → Advanced, your phone talks to that provider directly — the request does not pass through Cue’s proxy. Your key is sent only to that provider. Supported providers include Claude (Anthropic), Groq, Google Gemini, xAI, OpenRouter, or a local model you run yourself.
In every case, the AI provider processes your command text under its own privacy policy. We don’t control and aren’t responsible for how third-party providers handle data; please review the policy of whichever provider you use.
05What we don’t collect
Cue has no backend account system. We do not:
- require you to sign up or log in,
- include analytics, advertising, or third-party tracking SDKs,
- collect your contacts, location, photos, or device identifiers for advertising,
- sell or share your personal data with data brokers.
06Permissions we request, and why
- Microphone — only when you use voice input; never recorded by Cue.
- Notifications — to show your reminders.
- Exact alarms — so priority-based reminders fire at the precise time you set.
- Run at boot — to restore your scheduled reminders after the phone restarts.
- Ignore battery optimisation (optional) — to help reminders fire reliably in deep sleep; you can decline it.
- Internet — to reach the AI provider that interprets your commands.
07Third-party services
Depending on your settings, your command text may be processed by one or more of the following. Each has its own privacy policy:
- Groq — runs the model behind Cue’s free AI, and is also available as a bring-your-own-key option.
- Cloudflare — hosts the proxy that relays free-AI requests.
- Anthropic, Google Gemini, xAI, or OpenRouter — only if you choose them as your provider.
- Google — if your device’s speech-to-text is provided by Google.
08Data retention & deletion
Because your data lives on your device, you’re in control. To delete everything Cue holds, clear the app’s storage or uninstall the app — that removes all tasks, settings, and any stored API key. There is no Cue account to delete, and we hold no copy of your tasks to remove on your behalf.
09Security
API keys are stored using Android’s Keystore-backed encrypted storage. Network requests to AI providers use HTTPS. No method of storage or transmission is perfectly secure, but Cue is designed to keep your data on your device and to minimise what is sent off it.
10Children’s privacy
Cue is a general-productivity app and is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children.
11Changes to this policy
We may update this policy as the app evolves. Material changes will be reflected here with a new “last updated” date. Because the app is open source, the history of this page is also visible in our public repository.
12Contact
Questions about privacy or this policy? Email us and we’ll get back to you: