Legal
Privacy Policy
Last updated: August 8, 2026
Short version: the hosted Service stores the minimum it needs to work, runs no analytics or trackers, and never sells data. Here is the long version.
What is stored
- Account: your email address, display name, and a salted password hash (via Better Auth). Session cookies keep you signed in.
- Your content: the tasks, habits, goals, projects, notes, agenda items and settings you create, stored in a MongoDB database scoped to your account, and encrypted, as described below.
- Billing: your subscription status and identifiers from Gumroad. Card details never touch our servers. Gumroad (merchant of record) processes all payments under its own privacy policy.
- AI usage counters: daily request counts and token totals, used for fair-use limits.
How your content is protected
The text you write (task titles and descriptions, notes, habit, project and goal names, tag names, agenda entries, life-calendar notes ) is encrypted (AES-256-GCM) with a key that belongs to your account alone, before it reaches the database. The master key that unlocks those account keys is not stored in the database or its backups, so a copy of the database on its own is gibberish: nobody who obtains one, including by asking the database host, can read what you wrote. Reading your content requires the running server and its separately-held key, which turns “someone peeked at the data” from a casual possibility into a deliberate act.
Being precise about the limits: structural data stays readable so the app can work (when items were created or completed, their status, priority and due dates, and how things link together. So the honest claim is “your content can’t be casually read”, not “nothing about your usage is knowable”. Demo accounts are the one exception: they hold fictional sample data and are not encrypted. And you don’t have to take any of this on faith, since the application’s source is public, so you can read exactly what happens to your data, or self-host it and keep everything on your own machine.
AI features
When you use the Plan or Ask features, your request and a snapshot of your own data (titles, statuses, dates, whatever the assistant needs to answer) are sent to Anthropic’s Claude API for processing. On the hosted Service, AI features run on your own Anthropic API key, so usage is billed to your Anthropic account, not ours, and Plan/Ask simply won’t run until you add one. Your key is stored encrypted (AES-256-GCM) and used only for your own requests. AI features are optional, and nothing is sent anywhere unless you invoke them.
What is not collected
No analytics, no advertising trackers, no third-party scripts on the app or this site, no behavioral profiling, no selling or sharing of data. Server logs (IPs, timestamps) exist only for security and debugging and rotate out.
Demo accounts
Demo accounts are anonymous, pre-filled with fictional sample data, and deleted automatically, including everything created in them, after roughly 12 hours.
Deletion & export
You can request full deletion of your account and data at any time, and it will be honored within 30 days. Self-hosting the source yourself means your data never leaves your own infrastructure at all.
Where data lives
The database is hosted on MongoDB Atlas; the application runs on the developer’s infrastructure. Backups exist for disaster recovery and follow the same deletion requests.
Contact
Privacy questions or account/data deletion requests: sosa.panzardi@gmail.com. You can also open an issue on the GitHub repository.