chore(ios): privacy policy page and App Store screenshots

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01SW5iVXkZ2JBHgyweMCRymY

app/eas.json

@@ -20,7 +20,10 @@
   },
   "submit": {
     "production": {
-      "ios": {}
+      "ios": {
+        "ascAppId": "6809718684",
+        "appleTeamId": "HZ6XCKM95R"
+      }
     }
   }
 }

app/public/privacy.html

@@ -0,0 +1,42 @@
+<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>GTD: Next Up — Privacy Policy</title>
+<style>
+  body { font: 17px/1.55 -apple-system, system-ui, sans-serif; color: #16161A; background: #F7F7F9; margin: 0; padding: 40px 20px; }
+  main { max-width: 640px; margin: 0 auto; background: #fff; border: 1px solid #E6E6EB; border-radius: 16px; padding: 32px; }
+  h1 { font-size: 28px; letter-spacing: -0.5px; margin: 0 0 4px; }
+  .meta { color: #6E6E76; margin-bottom: 24px; }
+  h2 { font-size: 18px; margin: 28px 0 8px; }
+  a { color: #2F6FED; }
+</style>
+</head>
+<body>
+<main>
+  <h1>Privacy Policy</h1>
+  <p class="meta">GTD: Next Up · Effective 8 September 2026</p>
+
+  <p>GTD: Next Up is a self-hosted to-do app. The developer does not run a service for you and does not collect, store, sell or share any of your data.</p>
+
+  <h2>What the app stores</h2>
+  <p>Your tasks, projects and settings are stored on your device. If you enter a server URL and API token in Settings, the app syncs those tasks and projects with that server. That server is chosen and operated by you, not by the developer.</p>
+
+  <h2>What the developer receives</h2>
+  <p>Nothing. The app contains no analytics, no advertising, no crash reporting and no third-party SDKs that phone home. The developer has no way to see your tasks or your server.</p>
+
+  <h2>Network access</h2>
+  <p>The app only connects to the server address you enter. It makes no other network requests.</p>
+
+  <h2>Your rights</h2>
+  <p>Because your data lives on your device and your own server, deleting it is entirely in your hands: delete the app, or remove the rows from your server.</p>
+
+  <h2>Changes</h2>
+  <p>If this policy changes, the new version will be published at this address with a new effective date.</p>
+
+  <h2>Contact</h2>
+  <p>Questions: open an issue at <a href="https://git.rehbock.xyz/marcus/gtd">git.rehbock.xyz/marcus/gtd</a>.</p>
+</main>
+</body>
+</html>