Your data and privacy

This page is a plain-language summary. The binding document is the Privacy Policy.

What stays in your browser

Most of what you create lives in local storage on this device and never reaches us: your widget layout, pins and sizes, tasks, notes, brain dump, habits, routines, countdowns, clipboard history, mood check-ins and focus history.

Two practical consequences:

• It is not automatically on your other devices. The same account on a laptop and a phone can hold different tasks. Cloud sync is a separate feature, not something happening silently in the background.
• Clearing your browser data clears it. "Clear cookies and site data" for this site removes what is stored locally. It is a real delete button, just one that lives in your browser rather than in the app.

Task attachments are the exception among local data: the files themselves go into your browser's IndexedDB, not local storage, because local storage has a ~5 MB limit shared by everything.

What is on our servers

Your account (email, name, nickname, avatar), and — only if you use them — your connected services and internal messages.

• IMAP passwords are stored encrypted (AES-256-GCM) on the server and never in your browser. The server is where the connection to your mail provider is made.
• Google gives us a token, never your password, and it can be revoked from your Google account at any moment.
• Feedback you send, with the technical context attached (which widget, which page, browser, screen size).

What goes to an AI

Only the text needed for the action you asked for, and only when you ask. Press chunk-it and the task's title goes to Anthropic; nothing else does.

For the assistant, the tools run on your device against your own data — the server that talks to the model sees the conversation, never your tasks, calendar or mail.

Nothing you send is used to train anyone's model under our API terms.

Analytics

Privacy-friendly, cookieless usage analytics. No advertising trackers, no third-party ad pixels, and nothing sold — not to anyone, not ever.

Deleting everything

Profile → Danger zone → Delete account permanently removes your profile, your server-side content, your connected services, your messages and your avatar, and deletes your login. There is no recovery afterwards, by design.

To also clear what is on this device, clear the site's data in your browser afterwards.

Disconnecting one service

You do not have to delete the account to withdraw one connection:

• Google — from the Calendar widget, or from myaccount.google.com → Security → Your connections to third-party apps.
• A mailbox — Disconnect in the Email widget's account settings removes the stored credentials.
• An Obsidian vault — Disconnect in Quick Notes. Your files stay untouched on your disk.