Privacy policy

Account data: email address, password stored as an irreversible hash, optionally a Google sign-in identifier, and the account creation date.

Content you enter: the wording of your goals, target dates, rest and reflection preferences, generated plans, task completion status and any notes.

Payment data: subscription status and type, and an identifier at the payment provider. We do not store or have access to card numbers.

Technical data: what is necessary for operation and security, for example a hash of your IP address for abuse protection. We do not store IP addresses in readable form.

Performance of a contract (Art. 6(1)(b) GDPR): running your account, generating and storing plans, tracking progress, managing your subscription.

Legitimate interest (Art. 6(1)(f) GDPR): securing the service, protecting against abuse and fraud, resolving technical problems.

Consent (Art. 6(1)(a) GDPR): analytics and marketing cookies. They do not load without consent and you can withdraw it at any time.

Legal obligation (Art. 6(1)(c) GDPR): retention of accounting records.

Goals can be personal — financial, health-related, career-related. Please bear that in mind when deciding how much detail to write.

Goal content is encrypted at rest, access to it is restricted, and access to sensitive data is logged. We do not ask for special categories of data under Art. 9 GDPR (such as health data) and recommend you do not include them in your goals.

Anthropic, PBC — AI plan generation. We send the goal text, deadline and preferences; we do not send your email address or account identifier.

Stripe — processing web payments. Apple and Google — processing in-app payments.

Our hosting provider, where the application servers run.

We do not sell your data and do not share it for third-party marketing.

Account data and goal content: for as long as the account exists. After a subscription is cancelled we keep it for a further 90 days so you can resume without losing your data; after that it is irreversibly deleted.

If you delete your account yourself, we delete the data within 30 days, except records we must retain under accounting and tax law.

Demo goals entered without registration are kept for at most 30 days and are not linked to any account.

Technical records needed for security: at most 12 months.

You have the right of access to your data, and to rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interest.

Account deletion is available directly in settings and means actual deletion of the data, not merely deactivation of the account.

You can withdraw consent to analytics cookies at any time in cookie settings.

If you believe we process your data unlawfully, you may lodge a complaint with the Czech Office for Personal Data Protection (uoou.gov.cz) or the supervisory authority in your country.

Strictly necessary cookies handle sign-in and basic site function; without them the service would not work, and they do not require consent.

Analytics cookies help us understand how the site is used. They load only after you consent, never before. Accepting and refusing are both one click away.

For any question about data protection, contact [DOPLNIT: obchodní firma, IČO, sídlo, kontaktní e-mail].