OnCue — Privacy Policy

Last updated: 9 August 2026

OnCue is a reminder app for Android. Contact: support.oncue@gmail.com

This policy explains exactly what happens to your information. It is written to be read, not to be waved at a compliance form.

The short version

If you never sign in, OnCue collects nothing. Every reminder, category and completion stays in a database on your own phone. There is no analytics, no advertising identifier, no crash reporting and no tracking.
Signing in is optional and exists only for Sync Across Devices. If you never turn it on, nothing ever leaves your phone.
If you do turn on sync, your reminders are sent to OnCue's own server so your other devices can see them. The text of a reminder is encrypted before it reaches the database.
Nothing is sold, shared or handed to advertisers.

What OnCue stores on your device

Reminders (title, description, notes, dates, times, repeat rules), categories, your history of what fired and what you did about it, and your settings. This lives in a private database inside the app's own storage. Uninstalling the app deletes it. No other app on your phone can read it.

Backups you export are yours. Export writes a backup.json file through Android's own file picker, to wherever you choose — your device, or a cloud drive if that is where you point it. That file never passes through OnCue's server and the developer cannot read it.

What is sent to the server — only with Sync Across Devices on

Sync is off until you turn it on and sign in. When it is on:

What	Why
Your email address	To identify your account across devices
Your reminders and categories	So your other devices can show them
Your completion history	So a dose ticked off on your phone is not still ringing on your tablet
A device identifier generated by the app	So two of your own devices can be told apart

The device identifier is generated by OnCue on first run. It is not derived from any hardware identifier or advertising id, and reinstalling generates a new one.

Signing in with Google

OnCue requests three permissions and no others: openid to sign you in, email for your account name, and profile for the name and picture shown on the Profile screen.

OnCue does not request access to your Google Calendar, your Google Drive, your contacts or your files. Earlier versions offered calendar and Drive integration; both were removed before release, and the permissions that went with them were removed too.

How your reminders are protected on the server

Reminder text is often medical, so this is stated precisely.

The text of your reminders is encrypted at rest. Title, description, notes and the title recorded against each completion are encrypted with AES-256-GCM before they are written to the database, and decrypted only to answer your own account's requests. Anyone reading the database directly — a stolen backup, a leaked connection string, the hosting provider's own access — sees ciphertext.
Scheduling data is not encrypted. Dates, times, repeat rules and statuses are stored in the clear, because the server has to compare and order on them to work out what changed since your last sync. Someone with database access could see that you have a reminder at 8 AM daily, without seeing what it says.
Everything is encrypted in transit, over HTTPS.

This is not end-to-end encryption, and OnCue will not pretend otherwise. The server holds the key, because it has to decrypt your reminders to send them to your other devices — so the operator could technically read reminder text. What the encryption removes is the database itself as a point of exposure. If you need protection against the operator, do not turn on sync. The app is fully functional without it.

What OnCue does not do

No advertising networks, and no advertising identifier is read
No analytics, telemetry or usage tracking of any kind
No third-party crash reporting
No profiling and no automated decision-making
Nothing is sold, rented or shared with anyone

The free tier shows a small in-app banner promoting OnCue Premium. It is served by OnCue itself, contains no third-party code, and reads nothing about you.

Notifications and alarms

OnCue asks permission to post notifications, schedule exact alarms and be excluded from battery optimisation. These exist so a reminder rings at the time you set it, and are not used to collect anything.

Children

OnCue is not directed at children under 13 and does not knowingly collect information from them.

Your control over your data

See it — everything is visible in the app, and Export produces a complete, readable backup.json.
Stop sync — sign out. Your reminders stay on your phone and nothing further is sent.
Delete it — uninstalling removes everything local. To delete your account and everything held on the server, email support.oncue@gmail.com from the address you signed up with.

Payments

Premium is sold through Google Play. OnCue never sees your card details, billing address or any payment information — that is entirely between you and Google. The app receives only a token confirming a purchase happened, which its server checks with Google to confirm the subscription is real and current.

Changes to this policy

If this policy changes in a way that affects what is collected or how it is handled, the date at the top will change. Material changes will not be applied retroactively to data already collected under a previous version.

Contact

support.oncue@gmail.com — questions, deletion requests and complaints all go to the same address, and it is read.