Thydo privacy policy

1. Information we handle

• Account and sign-in information. When you sign in with Google, Thydo receives your provider account identifier, email address, name and profile picture when supplied. On supported Apple devices, Sign in with Apple provides an Apple account identifier, email address (which may be a private relay address) and a name when supplied. Thydo creates its own account identifier and stores account creation information. We verify sign-in tokens; we do not receive your Google or Apple password.
• Tasks, projects and preferences. This includes the text you enter, project names, ordering and assignments, completion status and timestamps, elapsed task time, alert preferences, and your productive/procrastination classifications for apps, websites or individual videos. Your time zone is used to display daily activity correctly.
• Paired computer and application activity. A connected desktop companion reports its device identifier and name, connection/last-seen information, the foreground app's name and identifier, and activity start/end times. Supported companions can upload app icons. Computer-use reporting records periods with mouse or keyboard activity and idle periods; it does not send the keys you type, mouse coordinates or the contents of your documents.
• Browser activity. Where supported and enabled, the companion or browser extension reads the focused tab's full URL and title, browser identity and window-focus/private-window state. The companion sends website activity to your paired Thydo account. URLs and titles can reveal searches, document names, video titles or other personal information that a website puts there. Thydo does not read page bodies, form entries, passwords, cookies or your browser-history database for this feature. When supported private-window detection identifies a private window, a private-window marker is used instead of its URL and title. Detection depends on the browser integration and its permissions.
• Phone settings and permissions. The phone app displays your synced tasks and computer activity; it does not collect a history of other apps used on your phone. Android's optional charger-launch feature checks charging/boot state locally and may use notification, foreground-service, battery-exemption and display-over-other-app permissions to reopen Thydo. These permissions are not used to read other apps' screens. Alert audio plays locally; Thydo does not record microphone audio or camera images.
• Website, testing requests and support. If you request early access, we store your email address, requested platform, request time, IP address and approximate country inferred from that IP address. If you contact us, we process the message and information you choose to include. Connections to the website and service also expose technical information such as IP addresses, requested URLs, browser/user-agent information, timestamps, errors and response status to the servers and infrastructure handling the request. Rate limiting uses IP addresses to reduce abuse.

The extension's specific permissions and local browser bridge are described in the browser extension privacy policy.

2. Why we use this information

We use this information to authenticate you, keep your tasks and settings in sync, connect your computer, associate computer activity with tasks, calculate timers and productivity summaries, and provide the alerts you enable. We also use technical information to operate and troubleshoot the service, prevent abuse, handle support and privacy requests, and arrange access to app testing when requested.

Thydo does not sell your personal information or use your tasks or activity to target advertising. The current app does not include advertising SDKs or third-party usage-analytics trackers. The authentication, hosting and content-delivery services described below still process information needed to provide their services.

3. Providers, recipients and sharing

• Thydo's operator and hosting infrastructure. Your account data, tasks and reported activity are processed on app.thydo.com, operated by Matej Rifelj using Hetzner hosting infrastructure. Matej Rifelj also takes a database dump once per day and stores these backups on operator-managed local servers for 14 days. These dumps can contain your account, tasks and recorded activity. The operator and infrastructure providers can process data as needed to run, maintain and secure the service. Access to a shared reviewer demo account is different from a personal account: reviewers using those shared credentials can see and change that demo account's sample data.
• Sign-in providers. Google and, when used, Apple process authentication requests and disclose the account information described above to Thydo. Their own privacy policies apply to their services. We do not send your task list or desktop activity to these providers as part of the sign-in flow.
• Testing-request country lookup. When you request mobile early access, we send your public IP address to IPWhois over HTTPS to estimate your country. We store the country name and country code with your request when the lookup succeeds. Your email address is not included in this lookup. IP-based location is approximate and may reflect a VPN or network provider.
• Resources loaded by the app. The web interface currently loads fonts from Google Fonts and the SortableJS script from jsDelivr. Profile images may load from the sign-in provider. These providers receive ordinary request information such as your IP address, browser information and information sent by the browser's referrer rules. Thydo does not intentionally include your task text or recorded activity in these resource requests.
• App distribution and device services. Google Play, Apple and your device's operating system handle downloads, updates, permissions and their own platform diagnostics under their own policies. This is separate from Thydo's server-side account and activity records.
• Support and legal requests. Messages sent to our contact email are processed through the email infrastructure delivering that correspondence. Information may also be disclosed when required by applicable law or a valid legal request, or when necessary to investigate abuse and protect the service.

If you configure a desktop companion to use a different server, its reports go to that server instead; that server operator's privacy practices apply. Your operating system or providers may process information in countries other than your own. Contact us for information about the providers handling your account.

4. Local storage and security

Thydo uses session cookies and short-lived sign-in flow cookies for authentication, not advertising. Standard account tokens expire after 30 days; reviewer demo sessions expire after 24 hours. Browser/WebView storage keeps preferences such as the theme and new-task placement. Desktop companions keep their connection token, server setting, icon cache and pending activity/presence state locally. The extension stores its enable/pause preference and its native bridge can keep the most recent tab observation in the computer's user profile. Desktop diagnostic logs may contain connection and activity information. Android and iOS keep relevant app/session preferences using their platform storage; operating-system backups may include app data according to your device's backup settings.

The hosted service uses HTTPS for connections. Account data is associated with your authenticated account, and desktop pairing tokens are checked by the server, which stores token hashes. Development or self-hosted configurations may differ from the hosted service. No network or storage system can guarantee absolute security.

5. How long data is kept

There is no automatic age-based expiry for Thydo account records, tasks, projects, recorded activity, device records, classifications or early-access requests in the current service. They remain stored until removed through available app controls or handled through a deletion request. Token expiry or logging out does not delete account data. Expired desktop-pairing requests are periodically removed.

Deleting a task removes that task record, but recorded computer activity can remain in your account's history without its task association. Deleting a project removes the project assignment while retaining its tasks and time history. Removing a paired device does not erase earlier activity.

A database backup is taken once per day, stored on the operator's local servers and retained for 14 days. These backup copies are managed separately from the live database. Once data is removed from the live database, an older dump may still contain it until that dump reaches the end of its 14-day retention period. A live deletion does not instantly change existing backup files.

Operational logs are managed separately from the account database. Web access logs on the application host are configured for daily rotation with 14 archived logs. Other application, infrastructure and local device logs are managed separately and are not covered by a single published retention period. Deleting an item does not guarantee immediate removal from these records. Contact us about the retention and deletion of your particular data, including any retained copies.

6. Access, correction and account deletion

To request access to, correction of, or deletion of your Thydo account and associated data, email matej@rifelj.com from the address associated with your account. For deletion, use the subject Thydo account deletion and say whether you want the whole account deleted or only particular data. You can make this request without reinstalling or signing in to the app.

You can also delete your account directly in Thydo → Settings → Delete account. After confirmation, this removes your account, tasks, projects, computer activity, settings, connected devices and testing requests associated with your account email. Apple sign-in access is revoked for Apple accounts; older Apple sessions may need to sign in again first. Logging in afterwards creates a new account. Server logs and separately retained backups are not immediately rewritten and follow their retention schedule described above.

For requests sent by email, we may ask you to verify account ownership before disclosing or deleting information. Do not send your Google or Apple password. Ask us to confirm the scope and handling of your request, including activity history, test-access requests, logs and any separately retained copies.

Depending on the law that applies to you, you may have additional rights concerning your personal information, including the right to object to or restrict particular processing or to complain to a data-protection authority. Contact us to exercise your rights.

7. Your controls

You can edit or remove tasks, change projects and classifications, and change alert settings in Thydo. To stop future computer reporting, use the desktop companion's reporting controls or quit it. Pausing a task's timer does not necessarily stop the companion's separate computer-use history. The browser extension lets you disable website tracking. You can also revoke relevant operating-system/browser permissions or uninstall the companion or extension. Logging out or uninstalling alone does not remove information already saved to the server.

Some information can be sensitive even when it is only a task title, an app name or a URL. Consider what you enter and which computer/browser activity you choose to report.

8. Changes and contact

We will update this page when the practices it describes change and update the date above. Material changes to data handling will be disclosed where required.