Privacy statement

What data

• Your account: name, email address, password (stored only in hashed form, in our own sign-in system), language, time zone and settings; optionally a profile photo and two-step verification.
• What you put in DoeToch: tasks, projects, sections, labels, filters, comments, reminders, attachments and the history of completed tasks.
• Technical data: active sessions (device name, type, IP address and browser or app version) so you can see and sign them out, push tokens of your devices, and anonymous error reports and visitor statistics (see below).
• If you connect an AI assistant: which assistants are connected, what they may do and when they were last used, and a log of the requests they made, without the content of your tasks (see “AI assistants”).

What for

Only to make DoeToch work and improve it: storing your tasks and syncing them between your devices, sending reminders, account emails (confirmation, password reset, notifications you turn on yourself), making backups, fixing errors, and seeing from anonymous visitor statistics which pages and steps work well. There are no ads, no tracking cookies, and data is never sold or used for anything else.

The legal basis is the agreement with you: without this data DoeToch cannot do its job. For the anonymous statistics and error reports it is our legitimate interest in making DoeToch work and improving it; no personal data is stored for them.

Where and with whom

• The data is stored on our own server in the Netherlands. An encrypted copy of the backups is stored at Hetzner in Germany; Hetzner cannot read it.
• Cloudflare provides the secure connection to that server and sees your IP address and the traffic.
• Push notifications go through Apple (iPhone, iPad, Safari), Google (Android, Chrome) or Mozilla (Firefox). A notification contains the task name and the time.
• DoeToch emails are sent through the mail service Resend.
• Apart from the people you share a project with yourself (see “Shared projects”) and the AI assistants you connect yourself (see “AI assistants”), DoeToch shares no data, unless the law requires it.

Shared projects

• If you share a project, or join someone else’s, the people in that project see your name, email address and profile photo, and what you add to that project: tasks, comments, attachments, completed tasks and their history. Your email address is only shown to people who share a project with you.
• Your labels, filters, focus list and personal projects stay private, also on tasks in a shared project. A reminder is only seen by the person who set it and the person it is for.
• When you invite someone by email, we send them an invitation with your name and the name of the project.
• When you leave a project, or are removed from it, it disappears from your devices the next time they sync. A device that stays offline keeps its copy until then; that is a limit of apps that work offline.
• When you delete your account, you choose for each shared project you own whether it goes to someone in it or is deleted for everyone. If you don’t choose, it goes to the member who joined it first (or, without members, the first viewer). The others get a notification. What you added to projects that live on stays there, marked “Former member” instead of your name.

AI assistants

• You can connect an AI assistant, such as Claude or ChatGPT, to DoeToch yourself, in Settings › Integrations › AI assistants or from the assistant. This is optional; without a connection no assistant gets anything from DoeToch.
• When you connect one, you choose whether it can only read or also make changes, and whether it sees all projects or only the ones you pick.
• When you ask a connected assistant about your tasks, it requests the data it needs on your behalf, such as tasks, projects, labels, comments and history, and in shared projects also what others added. That data goes to the assistant’s provider (for example Anthropic for Claude or OpenAI for ChatGPT) and is handled under that provider’s terms and privacy policy, not this statement. DoeToch itself never sends data to an AI provider.
• For each connection we store the app’s name, the access and projects you chose, when you connected it, when it was last used and how many changes it made today (for the daily limit of 1,000 changes). For every request an assistant makes we keep a log line: which function it used (for example “add_tasks”), through which connection, when, and whether it worked. It contains nothing of the content of your tasks and nothing of what you asked the assistant; your conversations with the assistant never reach DoeToch. We keep these log lines for 30 days.
• What an assistant changes or comments shows in the activity with “via” and the app’s name, for example “Sam via Claude”. In a shared project the other members see that too. If someone else in a shared project connects an assistant, that assistant can read the project, including what you added to it.
• To disconnect, go to Settings › Integrations › AI assistants on app.doetoch.com. The assistant loses access right away; what it already changed stays. What the provider has already received is managed with that provider. A connection you signed in for (as with Claude and ChatGPT) ends by itself when it has not been used for 90 days, and when you reset your password. When you delete your account, all connections are removed.

Statistics and error reports

• On the website doetoch.com and in the web app we count visits with Umami, on our own server in the Netherlands. This is anonymous: no cookies, no personal data, and it cannot be linked to your account. We see which pages are viewed (without ids, search terms or other content), which website visitors come from, country, browser and type of device, and a few steps such as “account created” or “first task added”. Your IP address is only used for a moment for this and is not stored.
• If your browser sends “Do Not Track” or “Global Privacy Control”, we measure nothing.
• The apps for iPhone, iPad and Android contain no statistics.
• Error reports from the web app and the server go to our own GlitchTip, on the same server: the error and the place in the code, without the content of your tasks, not linked to your account and without an IP address. The apps send their error reports, just as anonymously, to our own API.

How long

• As long as your account exists. When you delete your account (in the settings or the app), it is removed with all its data after a 7-day grace period, including backups and attachments. Shared projects you own go to someone in them or are deleted, as you choose (see “Shared projects”).
• Deleted attachments are wiped from storage after a day. Anonymous error reports are deleted after 30 days (from the apps) or 90 days (from the web app and the server, in GlitchTip). The anonymous visitor statistics contain no personal data and are kept without an end date.
• Backups of your account: 30 daily and 12 monthly. Recovery copies of the whole database are kept for 7 days; an encrypted copy of those is stored at Hetzner (Germany), where it is locked against deletion for 30 days.

Your rights

You can always view and change your data in DoeToch, export everything (Settings › Backups) and delete your account. An export contains your own projects, shared ones included, plus a read-only copy of projects others share with you; backups contain only what is yours. For other requests, such as a copy or restriction of processing, or questions: email [email protected]. If you are not happy with how your data is handled, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Security

Connections are encrypted (HTTPS), passwords are never stored readably, two-step verification is available, and only the administrator has access to the server.

Changes

If this statement changes in a way that matters to you, you will see it under “What’s new” in DoeToch.