Last updated 10 October 2026
- We store your account, your tasks and reminders, and a record of when you use the app.
- The words in your tasks are encrypted before they are saved.
- We do not sell your data, show ads, or load trackers.
- You can delete any item yourself, and ask us to delete your whole account.
What we collect
Your account
Your email address, your first name, and a one-way hash of your password. We cannot read your password. If you fill them in, your role, company and phone number, which are shown only on your own profile.
Your items
The tasks and reminders you add: their text, dates, status, priority, steps, and the names of people in them. The text is encrypted in the app before it reaches us.
Sign-in and usage records
Each day you open the app we record that you did, how many times, the kind of device, whether the app is installed on your home screen, your time zone, and your IP address, from which we work out your country.
Your settings
Which reminders and summaries you have switched on, and the time zone they should follow.
Notification addresses
If you allow notifications, your browser gives us an address for sending them to that device.
Voice
If you use the microphone or the live assistant, your speech is processed to do what you asked. We keep a daily count of how much each account uses, to prevent abuse and control cost. We do not keep recordings or transcripts.
How we use it
- To show you your list on every device you sign in on.
- To send the reminders, daily briefs and weekly summary you have switched on.
- To send account emails: confirming your address and resetting your password.
- To keep the service secure, including spotting sign-ins that look wrong.
- To understand how much the service is used, in counts, never by reading tasks.
What we do not do
- We do not sell or rent your data.
- We do not show ads, and we load no advertising or analytics trackers.
- We do not read your tasks to profile you.
- We do not use your tasks to train AI models.
Who else handles it
We use a small number of providers to run the service. Each receives only what it needs.
| Provider | Purpose | What it receives |
|---|---|---|
| Supabase | Database and sign-in | Your account, settings, usage records, and your items with their text encrypted |
| Hostinger | Serving the website and app files | Ordinary web requests, including your IP address |
| Resend | Sending email | Your email address and the content of each email |
| Groq | Turning dictated speech into text | The audio of each dictation, for that request |
| Aivah.ai | The live voice assistant, and the voice model it runs on | Your speech and the tasks needed to answer, for that conversation |
| Apple, Google, Mozilla | Delivering notifications | The reminder’s title and time, encrypted for your device |
We may also disclose information if the law requires it, and would tell you unless we are forbidden to.
Where it is kept
Your account and items are stored in a data centre in Mumbai, India. The other providers above may process data in other countries, including the United States, when you use the feature they provide.
How long we keep it
- Your account and items: until you delete them or ask us to delete your account.
- IP addresses: 30 days. The country worked out from them is kept with your usage record.
- Records of reminders already sent: 14 days.
- Voice recordings: not kept.
How it is protected
The text of your items is encrypted before it is saved, the database answers only the account that owns the data, and you can add two-step sign-in and Face ID. The security page describes this in detail, including its limits.
Your choices and rights
- See and correct: your profile and every item are visible and editable in the app.
- Delete: delete any item in the app. To delete your whole account and everything in it, ask us and we will remove it.
- A copy: ask us for a copy of your data and we will provide it.
- Switch things off: reminders, daily briefs and the weekly email each have a switch in your profile. Notifications can also be turned off in your device’s settings.
- Object or complain: you may ask us to stop a particular use of your data, and you may complain to the data protection authority where you live.
Children
The service is made for working adults and is not directed at anyone under 16. We do not knowingly collect data from children.
Changes
If this policy changes in a way that matters, the date at the top changes with it, and we will tell you in the app or by email before the change takes effect.
Contact
Ask the person who gave you access to the app, or the administrator of your workspace. They can reach us directly, and requests about your data are answered within 30 days.