Privacy Policy

We collect the following types of information:

• Account information: name, email address, and password when you register.
• Profile data: optional profile photo and display name.
• Usage data: tasks, projects, time entries, comments, and activity logs you create within the Service.
• Technical data: IP address, browser type, device information, and cookies for authentication and analytics.

We use your information to:

• Provide, maintain, and improve the Service.
• Authenticate your identity and manage your account.
• Send transactional emails such as invitations, mentions, and verification codes.
• Respond to your support requests.
• Monitor usage to detect and prevent abuse or security incidents.
• Comply with legal obligations.

Your data is stored securely using Firebase (Google Cloud) infrastructure, which includes encryption at rest and in transit. We implement access controls and authentication checks at both the application and database level. While we take reasonable precautions, no system is completely secure.

We do not sell your personal data. We may share it with:

• Service providers: Firebase (database and authentication), email providers (for transactional emails). These providers process data on our behalf under data processing agreements.
• Workspace members: Your display name and profile photo are visible to members of workspaces and projects you belong to.
• Legal authorities: when required by law or to protect our rights.

We use cookies and similar technologies to maintain your session (authentication token), store preferences, and understand how the Service is used. You can control cookies through your browser settings, but disabling them may affect Service functionality.

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your account and associated data.
• Object to or restrict certain processing of your data.
• Export your data in a portable format.

To exercise these rights, contact us at [email protected].

We retain your data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where we are required to retain it for legal or compliance purposes.

The Service is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice in the Service. Your continued use after such notice constitutes acceptance of the updated policy.

For privacy-related questions or requests, contact us at [email protected].