Privacy policy

Data used

Account: identifier, email address, profile, language, preferences, permissions and subscription status. Collaboration: relationships, invitations, messages and content you choose to share. Support: requests and information you send us.

Depending on the features you use: projects, tasks, sprints, goals, documents, Memory content, Graph nodes and links, files and dashboard preferences.

Technical data: connection, device, version, notification and operational events needed for security and operation. App diagnostic sharing is optional, helps investigate errors and can be disabled. Logs are not intended to collect your document content, messages, passwords or keys.

Why data is processed

Providing the requested service covers the account, content, collaboration, synchronization and subscription. Our legitimate interests cover security, abuse prevention and incident resolution, with regard to your rights. Legal duties may require accounting retention or responding to legal requests. Consent applies to optional features that request it, including shared diagnostics and any marketing communications; you can withdraw it.

Sharing, coach and agents

Collaborators access spaces according to their granted roles and sharing. When you use the AI coach, it may receive your request and relevant accessible context to answer it. Do not enter data you do not want transmitted in that interaction.

A CLI/MCP connection lets your chosen external tool access authorized data and actions. That provider also applies its own terms and privacy policy. Revoke a connection in agent settings to stop its further access. A link to information alone does not grant permission to read it.

Service providers

We use Cloudflare for hosting and data services, Google Firebase for authentication and notifications, and OpenAI for the AI coach when used. RevenueCat verifies and manages subscription entitlements; Apple, Google or Stripe process purchases depending on the offered channel. We receive the necessary transaction and subscription details without storing your payment card details. Provider access is limited to the relevant services.

Some providers may process data outside the European Economic Area. Relevant transfers must be covered by applicable safeguards, including an adequacy decision or standard contractual clauses. Contact us for information about the providers and safeguards applicable to your use.

Retention and local copies

Working content is retained as needed to provide the service, subject to your requests and legal duties. Technical histories, diagnostics and backups have separate retention cycles. An erasure request must also account for others’ rights in shared content and data needed for security or accounting duties.

The app keeps a cache on your device to speed up display. Some mobile plans let you select spaces for offline use. A disconnected device cannot immediately receive access revocation or remote erasure. Protect your devices and exported files.

Your rights and choices

You can request access, correction, erasure, restriction and, where the conditions apply, portability or objection. You can withdraw consent without affecting processing carried out before withdrawal. Contact us with the product and account; proportionate identity verification may be needed. You can complain to the Belgian Data Protection Authority or the competent authority in your country.

These web pages

These legal pages do not set tracking cookies or include advertising tools. The hosting provider processes technical data needed to serve and protect the pages. The app and checkout use their own necessary session mechanisms. Material changes to this policy will be communicated through an appropriate channel.