Privacy

The principle

What you write stays on our server. It is neither sold nor used for advertising. The morning email necessarily passes the titles due that day to our email delivery provider.

Data controller

Thomas Lefort, Entrepreneur individuel (EI), 474 chemin du Marand, 69380 Civrieux-d’Azergues, France. Contact: [email protected].

What we collect and why

Your email address identifies the account and receives sign-in links and reminders. Tasks, notes, settings and task history provide the service. Subscription status and dates are stored, but card details never reach our server.

Product feedback is stored with the relevant page, account language and app version solely so we can reply. Anonymous usage measurement runs only after consent and never includes what you write. Short-lived, irreversible fingerprints protect endpoints from abuse.

Retention

Account content is retained while the account exists. Security rate-limit records are short-lived. Legal accounting and transaction records are retained for the periods required by French law. Deleting the account immediately removes the account content covered by that action.

Processors and transfers

Our disclosed processors provide email delivery, payments, connection routing, consented product measurement and iOS app distribution. They may only process data for those services. Apple receives no task content: the app displays the site and sends it nothing. Transfers outside the European Union rely on the European Commission’s standard contractual clauses; PostHog measurement uses its European infrastructure.

The calendar feed

This setting is off by default. Turning it on publishes an address your calendar reads to show your dated reminders and habits. Your task titles then reach whoever publishes that calendar — Google, Apple, Microsoft or another. They are not our processor: the calendar is your own tool and their policy applies there. We send them nothing; their servers come and read.

The address carries a secret and asks for no password: whoever holds it can read your titles. Generating a new one from settings stops the old address immediately, and turning the feed off does the same. The address is never included in your data export, so a file you keep does not become a permanent reading key.

Location and your rights

The application database is hosted on our own server in France. You may access, correct, erase, restrict, object to and export your data. Settings provide immediate export and account deletion; for other requests email [email protected]. You may also complain to the French CNIL.

Cookies

A session cookie is necessary to keep you signed in. No advertising cookie is used. Optional usage measurement waits for a clear yes; refusing has no effect on the service. Public-page counters are aggregated without an identifier or per-visit record.