Privacy Policy

Effective Date: June 26, 2025
Last Updated: June 26, 2025

This Privacy Policy describes how d0ne collects, uses, and safeguards your information when you use our web and mobile services. Your privacy is important to us, and we’re committed to protecting your data and being transparent about how we handle it.

1. Information We Collect

When you use d0ne, we collect the following categories of data:

a. Account Information
When you sign up or log in via Google, we collect your email address and associated Google ID. This is used to identify your account and sync your Google Calendar.

b. Task & Scheduling Data
We store tasks you create, including their titles, descriptions, due dates, priorities, and any recurring task patterns you define. We also store your scheduling preferences such as working hours and allowed days.

c. Calendar Data
With your permission, we access your Google Calendar to retrieve your availability and create or update events on your behalf. This access is limited to the scope you authorize and can be revoked at any time.

d. AI Processing Context
We may transmit limited, anonymized task content to our AI partners (e.g., OpenAI or Cohere) for processing, such as enhancing task titles or suggesting optimal times.

e. Payment Information
If you upgrade to a paid plan, Stripe handles all payment processing. We do not store your full credit card number, but we store Stripe customer and subscription IDs to manage your billing status.

f. Device & Usage Data
We collect anonymized metadata such as device type, browser version, and error logs. This helps us improve performance and resolve bugs.

2. How We Use Your Data

We use your data for the following purposes:

• To provide core functionality: including task creation, scheduling, calendar sync, and reminders.

• To power AI features: such as emoji-tagged tasks and smart time suggestions.

• To improve the product: through usage analytics and performance monitoring.

• To provide customer support: including diagnosing issues or resolving account-related problems.

• To process billing: when you subscribe to a paid plan.

We do not use your data for advertising or sell it to third parties.

3. Data Sharing

We only share data when absolutely necessary, and always with trusted third parties:

• Google (Calendar API): to check availability and manage your events

• Stripe: to manage your subscription and payments

• OpenAI and Cohere: to provide AI-based features like scheduling and task enhancement

• Supabase: our secure backend provider for database, authentication, and edge function hosting

Each of these providers has its own security and privacy practices which comply with global standards like GDPR and CCPA.

4. Data Retention and Deletion

We retain your data as long as your account is active. If you choose to delete your account, all associated tasks, preferences, and tokens are permanently deleted from our database within 30 days. You can initiate this by contacting [email protected].

5. Security

We take data security seriously. Key measures include:

• Encrypted storage of refresh tokens and sensitive fields

• Row-Level Security (RLS) enforced per user in the database

• HTTPS across all services

• JWT authentication for all API requests

• Regular audits of access scopes and permissions

6. Your Rights

You have the right to:

• Access your data

• Correct inaccurate information

• Revoke access to Google Calendar at any time

• Delete your account and associated data

For any privacy-related requests, contact us at [email protected].

7. Children’s Privacy

d0ne is not intended for use by children under the age of 13. We do not knowingly collect personal information from anyone in this age group. If we become aware of such collection, we will delete the data immediately.

8. Changes to This Policy

We may occasionally update this Privacy Policy to reflect product or legal changes. When we do, we’ll notify you through the app or via email.

9. Google Workspace Data Usage

If you choose to connect your Google account, d0ne will access data from Google Workspace APIs—specifically Google Calendar—to deliver features like scheduling, availability detection, and event synchronization.

We handle this data in strict accordance with the Google API Services User Data Policy, including its Limited Use requirements and the AI/ML data handling restrictions. This means:

• We only access, use, store, or share Google user data to provide or improve user-facing features that are prominent in the user interface.

• We do not use any Google Workspace data (raw or derived) to develop, train, or fine-tune generalized AI or machine learning models.

• We do not allow any AI model used in d0ne to train on, memorize, or derive persistent knowledge from user data obtained through Google APIs.

• We do not transfer Workspace data to third parties except as required to deliver the requested features (e.g., event creation in Google Calendar).

• All access to Google APIs is contingent on user consent and may be revoked at any time in your Google account settings.

By using d0ne with Google integrations enabled, you acknowledge that your data will be used only for task scheduling and event syncing, never for AI training or data mining.