Privacy Policy

The short version

• You can use Tunl Focus without an account. If you do, your tasks stay on your device only and are never sent to our servers.
• We collect your email (only if you sign in or sign up for updates), the text of your tasks, push tokens (if you enable push), Google Calendar events (only if you connect them), and crash reports from the Android and iPhone apps.
• We don't sell your data. Ever.
• We use Supabase for sign-in and our database, Firebase (Google) for push delivery and crash reports from the Android and iPhone apps, Vercel for hosting, PostHog (EU) for product analytics, Resend for the occasional account email and the updates you sign up for, and Cloudflare to serve the images and videos on the feature board.
• You can export, delete, or change your mind anytime.

Guest mode (no account)

If you use Tunl Focus without an account, your tasks are stored locally on your device only. They are not synced to any server and will be lost if you clear your browser data or uninstall the app. We do not collect or transmit your task content in guest mode. A subscription adds cloud backup and sync across your devices; an account on its own does not.

What we collect

When you visit the site or app

• Standard server logs: IP address, browser and user-agent string, and referring page
• These logs are retained for a limited time for security and abuse prevention and are not used to identify you personally

When you sign in

• Email address
• Display name (if you sign in with Google, or with Apple and choose to share your name)
• If you sign in with Apple and choose to hide your email, we receive a private relay address Apple creates for Tunl Focus instead of your real address

When you use the app while signed in

• The text of your tasks (titles, descriptions)
• Because your tasks and notes are free-form, their content is whatever you choose to type. Please avoid saving highly sensitive information you would not want stored, such as passwords or financial and health details.
• Task metadata: dates, times, projects, categories, snooze counts, completion timestamps
• Your preferences (theme, snooze defaults, timezone)
• Push notification tokens (if you enable push)

When you share a project

• You can invite someone to a project by their email address. We email the invitation to that address, and if it belongs to a Tunl Focus account the invitation also appears inside the app.
• The person you invite sees the project's name and your email address with the invitation.
• Once they accept, every member of the project can see its tasks, and editors can change them. Every member can also see the email address of everyone else on the project, including the owner.
• When someone on a shared project nudges you, the notification includes the task's name and their initials, delivered through Google Firebase Cloud Messaging (on an iPhone, Firebase hands it to Apple's push service to deliver).
• Your other projects and tasks stay private to you.

The feature board

If you vote on the feature board, we store your vote with your account so each account counts once. If you message us about a feature, your message and your account email reach us by email, the same way the contact form does. If you choose to be credited when a feature ships, the first name you enter is shown publicly next to that feature and in the change log. Images and videos on the board are served by Cloudflare, which sees each request the way any web host does.

When you subscribe

• Your subscription status, which plan you chose, its price and currency, and which app store processed the purchase
• We never receive or store your card details. On iPhone they are handled by Apple through the App Store, on Android by Google Play, and on the web by RevenueCat and its payment processor, Stripe.

When you sign up for updates

• Your email address, the date you signed up, and how you found us: the website that sent you and the campaign name in the link you followed, if there was one.
• We use your address only for a welcome email and the occasional update about Tunl Focus. We never share it.
• Every update has a one-click unsubscribe. Unsubscribing deletes your address.

When you connect Google Calendar

• Read access to your calendar events for the calendars you select, so we can turn them into tasks
• If you turn on two-way sync, we also ask for write access. We use it only to create and update events for your own tasks, in a dedicated Tunl Focus calendar. We do not modify or delete events on your other calendars.
• You can disconnect anytime in Settings, Google Calendar
• To keep your calendar connected without asking you to sign in to Google again, we store an encrypted Google access key on our servers. We use it only for the calendar features above, and we delete it when you disconnect that account or delete your Tunl account.

Cookies and local storage

• Essential only. We use cookies and local storage to keep you signed in, remember your preferences, and cache your tasks on your device for offline use.
• No advertising or cross-site tracking cookies. Our product analytics sets a first-party cookie on this domain to recognise your session. It is never used for advertising and never shared across other sites.

How we use it

• To run the app, sync your tasks across devices you sign in on, and show a shared project to the people you share it with
• To send push notifications (only when you enable them)
• To send essential account email, such as confirming your email address, resetting your password, and notices about material changes to this policy
• To improve the product through aggregate, anonymized usage signals
• We do not sell, rent, or share your data with advertisers

Legal basis (EEA / UK)

If you are in the European Economic Area or the United Kingdom, we rely on these lawful bases:

• Contract: to provide the app you signed up for, including storing and syncing your tasks.
• Consent: for push notifications and the Google Calendar connection. You opt in, and you can withdraw anytime.
• Legitimate interests: to keep the service secure, prevent abuse, and understand aggregate usage.
• Legal obligation: where we must retain certain records to comply with the law.

Third-party processors

• Supabase: authentication and our database. It stores your account, tasks, preferences, push tokens, shared project memberships, and Google Calendar connection state. See Supabase Privacy.
• Firebase / Google Cloud: push delivery (Firebase Cloud Messaging, which passes notifications for iPhones to Apple's push service), storage for our daily database backups, and crash diagnostics in the Android and iPhone apps (Firebase Crashlytics, which records crash reports with your account id so we can fix faults, never your task content). See Firebase Privacy.
• Vercel: hosting, edge delivery, and cookieless privacy-friendly analytics (no cookies, no cross-site tracking). See Vercel Privacy.
• Resend: We use Resend to send account email, the updates you sign up for, and, when you share a project, an invitation to the address you enter. An invitation's address is kept for up to 30 days, or until it is accepted or withdrawn. See Resend Privacy.
• PostHog (EU region): product analytics. We send usage events (which screens you view and which features you use) and subscription events (when a trial starts, converts, renews, or ends, with the plan, its price and currency, and which store processed it), associated with your account id only. We never send your email address, your name, or your task content to PostHog. See PostHog Privacy.
• RevenueCat: subscription management and purchase validation, used only if you subscribe. It receives your account id and the details of your purchase from the store that processed it. It never receives your task content. Card details are handled by Apple's App Store on iPhone, by Google Play on Android, and on the web by RevenueCat's payment processor, Stripe. They never reach us. See RevenueCat Privacy.
• Google Calendar API: only if you opt in to the integration.
• Cloudflare: serves the images and videos on the feature board. It sees each request (your IP address and browser details) the way any web host does. See Cloudflare Privacy.

International data transfers

Our processors (Supabase, Google, Vercel, Resend, RevenueCat, and Cloudflare) may store and process data in the United States and other countries. When we transfer data from the EEA or UK, we rely on Standard Contractual Clauses or an equivalent safeguard so your data keeps a comparable level of protection.

Retention

• Completed and dropped tasks auto-delete 365 days after they're closed. Tasks you delete are removed for good 30 days later.
• Active tasks stay until you delete them, or until the account goes dormant (below)
• You can permanently delete your account anytime from Settings, Data, Permanently delete account. This wipes your tasks, preferences, Google Calendar connection, and push tokens from our servers and clears the app on your device. You can also email us to request deletion. See how to delete your account.
• When you delete your account, your own tasks and projects are deleted. Projects and categories you share with others pass to another member, together with the tasks inside them, so their work is not lost. A member with Pro comes first; otherwise it is the member who has been in them longest. Tasks you added to projects or categories other people share with you stay with those projects and categories. Feedback you sent while signed in keeps its text but loses your account and email address.
• Backups: we take a daily backup of our database. Daily copies delete themselves 35 days after they are written, and we also keep one copy from each month, which deletes itself 400 days after it is written. So data you deleted can survive in a backup for up to 400 days before it ages out.
• Payment records: if you ever subscribed, we keep the minimum transaction records that tax and accounting law require, even after your account is gone. Those records are about payments, never about what you wrote in your tasks.

Dormant accounts

We don't keep your data forever just because you stopped using Tunl Focus. If nobody signs in to your account on any device for 24 consecutive months, we treat it as dormant, and we delete the account along with the copy of your data on our servers.

• We warn you first, twice. We email the address on the account 30 days before and again 7 days before. Signing in on any device cancels the deletion and starts the 24 months over.
• You can take everything with you. Export is free and complete on every tier, including the free one, and the warning emails link straight to it.
• An active subscription is never dormant. While a subscription is running we keep your account no matter how long it has been since you last signed in.
• Only the server copy goes. Whatever is stored locally on your own device stays there. We can't reach it, and we don't delete it.

We do this because data-protection law asks us not to keep personal data for longer than the purpose we collected it for actually needs (in the EEA and UK, that is the GDPR's storage-limitation principle), and an account nobody has opened in two years no longer has one.

Your rights

• Access: see what we have on you
• Delete: wipe your account yourself from Settings, Data, or ask us to do it (see how to delete your account)
• Export: download your tasks as a JSON or CSV file from Settings, Data. Export is free on every tier.
• If you're in the EU, UK, or California, you have additional rights under GDPR and CCPA, including data portability and the right to object to or restrict processing. EEA and UK users may also lodge a complaint with their local data protection authority. We don't sell your data, and you can exercise any of these rights by emailing us.

Children

Tunl Focus is not directed at children, and we don't knowingly collect their data. You must be at least 13 to use Tunl Focus, and at least 16 if you're in the European Economic Area, or the minimum age of digital consent in your country. If you're under that age, please don't sign up. If you believe a child has signed up, contact us and we'll remove the account.

Security

• Your data is encrypted in transit (HTTPS) and at rest by our infrastructure providers
• Row-level security in our database limits each user's data to their own account and to the projects they have been invited to and accepted
• No system is perfectly secure. If a breach ever affects your data, we'll notify you and the relevant authorities as required by law.

Changes

We'll update this policy as Tunl Focus evolves. The “last updated” date at the top reflects the most recent change. Material changes will be announced by email and in the app.

Contact

Questions about privacy, or want to exercise a right above? Email info@guillotine-life.com.