Privacy Policy

1. Information we collect

• Google OAuth profile data: your name, email address, profile image, and Google user identifier when you sign in.
• User-created content: schedules, tasks, activities, categories, subtasks, and reminders that you save in the service.
• Technical and analytics data: device and browser information, IP address, pages viewed, and performance or diagnostic events collected when you use the service.
• Subscription data: subscription status, transaction identifiers, amount, and currency received from Paddle. We do not receive or store your complete payment card details.

2. How and why we use information

We use personal data to create and authenticate accounts, store and synchronize your content, provide customer support, administer subscriptions, secure and improve the service, understand aggregate usage, prevent fraud, and meet legal and accounting obligations.

Under GDPR and similar laws, our legal bases are performance of our contract with you, our legitimate interests in operating and securing the service, your consent where required, and compliance with law.

3. Service providers and sharing

We share data only as needed with providers that support the service:

• Google Firebase for authentication, database, and storage services.
• Vercel for hosting and website analytics.
• Paddle for payments, subscriptions, taxes, refunds, and fraud prevention.

Paddle acts as our Merchant of Record and processes payment data under its own privacy policy. We may also disclose data when required by law, to protect legal rights or safety, or as part of a lawful business transfer. We do not sell personal data.

4. International transfers

We and our providers may process data outside your country. Where required, transfers are protected through recognized safeguards such as adequacy decisions or standard contractual clauses.

5. Retention and security

We retain account data while your account is active and as reasonably needed for the purposes above. After account closure, we delete or anonymize data within a reasonable period unless retention is required for legal, accounting, fraud-prevention, or dispute-resolution needs. We use reasonable technical and organizational safeguards, but no online system can be guaranteed completely secure.

6. Your privacy rights

Depending on your location, you may request access, correction, deletion, restriction, or portability of your personal data. You may also object to certain processing or withdraw consent prospectively. You may lodge a complaint with your local data protection authority. We may need to verify your identity before completing a request.

7. Cookies and analytics

We use cookies and local storage needed for authentication, security, preferences, and core functionality. Vercel Analytics helps us understand website usage and performance. Paddle and other providers may use similar technologies under their own privacy policies. Where required, non-essential technologies are used only with consent.

8. Children

The service is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided data, please contact us so we can delete it.

9. Changes and contact

We may update this policy and will publish the revised date above. For privacy questions or requests, email aviyot@gmail.com.