Your data and privacy

This page is a plain-language summary. The binding document is the Privacy Policy.

What follows your account

What you create is kept in local storage on this device first, so the app works offline and opens instantly. When you are signed in, a copy is also kept with your account, so the same things are on your laptop and your phone: your board (layout, pins and sizes), tasks, notes, brain dump, countdowns, Waiting on…, Routine, Dopamine Menu, mood and energy check-ins, habits and focus history.

If you change something on two devices at once, each item keeps its latest change — a note edited on the phone doesn't erase a different note written on the laptop.

What stays on this device only

• Clipboard history — it is what this device copied, sometimes a password.
• Notes kept in an Obsidian vault — they are files on your computer.
• Task attachments — the files themselves go into your browser's IndexedDB; only their names travel with the task.
• A running focus timer — the countdown belongs to the screen in front of you.

Clearing your browser data ("Clear cookies and site data" for this site) removes the copy on this device. What follows your account comes back the next time you sign in; to remove that too, delete the account (below).

What is on our servers

Your account (email, name, nickname, avatar), and — only if you use them — your connected services and internal messages.

• IMAP passwords are stored encrypted (AES-256-GCM) on the server and never in your browser. The server is where the connection to your mail provider is made.
• Google gives us a token, never your password, and it can be revoked from your Google account at any moment.
• Feedback you send, with the technical context attached (which widget, which page, browser, screen size).

What goes to an AI

Only the text needed for the action you asked for, and only when you ask. Press chunk-it and the task's title goes to Anthropic; nothing else does.

For the assistant, the tools run on your device against your own data — the server that talks to the model sees the conversation, never your tasks, calendar or mail.

Nothing you send is used to train anyone's model under our API terms.

Analytics

Privacy-friendly, cookieless usage analytics. No advertising trackers, no third-party ad pixels, and nothing sold — not to anyone, not ever.

Deleting everything

Profile → Danger zone → Delete account permanently removes your profile, your server-side content, your connected services, your messages and your avatar, and deletes your login. There is no recovery afterwards, by design.

To also clear what is on this device, clear the site's data in your browser afterwards.

Disconnecting one service

You do not have to delete the account to withdraw one connection:

• Google — from the Calendar widget, or from myaccount.google.com → Security → Your connections to third-party apps.
• A mailbox — Disconnect in the Email widget's account settings removes the stored credentials.
• An Obsidian vault — Disconnect in Quick Notes. Your files stay untouched on your disk.