Privacy Policy

Information you provide

• Account data: Name, email address, and password when you create an account.
• Profile data: Avatar image, display name, and job role as set by you.
• Board and task content: Boards, tasks, subtasks, comments, files, links, calendar events, RSVP responses, and other content you create within the Service.
• Payment data: When you subscribe through PayPal or the Apple App Store, payment is processed by the respective platform. We do not store credit card numbers or bank details.
• Communications: Emails and messages you send to us for support.

Information collected automatically

• Usage data: Pages visited, features used, board and task activity for analytics and service improvement.
• Device data: Device type, operating system, browser type, and screen resolution.
• Push notification tokens: If you enable push notifications, we store a device token to send alerts.

We use the information we collect to:

• Provide, operate, and maintain the Service.
• Process subscriptions and manage your account.
• Send notifications about task updates, mentions, and board activity.
• Generate analytics and reports within your boards.
• Improve and personalize the Service.
• Respond to your support requests.
• Comply with legal obligations.

Your data is stored in a Supabase-hosted PostgreSQL database with Row Level Security (RLS) policies that ensure users can only access data they are authorized to see. Uploaded files are stored in Supabase Storage with access control policies.

We use industry-standard encryption (TLS/SSL) for data in transit and encryption at rest for stored data. While we take reasonable measures to protect your information, no method of electronic storage is 100% secure.

We use the following third-party services that may process your data:

• Supabase: Database hosting, authentication, and file storage.
• PayPal: Payment processing for web subscriptions.
• Apple App Store: Payment processing for iOS in-app subscriptions.
• Expo / React Native: Mobile app framework and push notification delivery.

Each third-party service operates under its own privacy policy. We encourage you to review their policies.

We do not sell your personal information. We may share your data only in these circumstances:

• With board members: Content you add to a shared board is visible to other members of that board, based on their role and permissions.
• Service providers: Third-party providers listed above who process data on our behalf.
• Legal requirements: When required by law, subpoena, or government request.
• Business transfers: In connection with a merger, acquisition, or sale of assets.

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes. Board content shared with other members may remain accessible to those members after your account is deleted.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Export your data in a portable format.
• Withdraw consent for data processing.
• Object to processing of your data.

To exercise these rights, contact us at [email protected].

You can delete your account at any time from Settings in the app. Account deletion will remove your profile, personal data, and boards you own. This action is irreversible.

The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child, contact us so we can delete it.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new "Last updated" date. Continued use of the Service after changes constitutes acceptance.

If you have questions about this Privacy Policy, contact us at [email protected].