Privacy Policy

What we collect

Account information (email, and a hashed password if you don't use Google sign-in); the tasks, notes, categories, and calendar data you enter or connect; energy check-ins; and, if you enable push notifications, a browser push subscription. If you connect a read-only calendar feed (Google/Outlook/Apple), we read it to help schedule around your existing commitments -- we don't write to it.

How we use it

To run the app -- store and surface your tasks, schedule them, send the notifications you've asked for, and (for Family & Teammates accounts) show shared calendar and assigned tasks to the people you've chosen to share them with. We don't sell your data, and nothing inside your account is used for advertising: the analytics and advertising tools described below run only on our public marketing pages, before you sign in, and never on the pages where your tasks and notes appear.

AI processing

Task breakdown, brain dump splitting, and task chat send the relevant text to Anthropic's Claude API to generate a response. Only the content that feature actually needs is sent (e.g. task chat only sees that one task's own details/history) -- not your full task list.

If you record or upload a voice memo for a brain dump, the audio is sent to Groq's Whisper API to be transcribed, because Claude can't accept audio. We keep only the resulting text -- the recording itself is never stored on our servers.

Payment information

Billing is handled entirely by Stripe. We don't store your card number -- Stripe does, under its own security and privacy practices, and shares with us only what we need to manage your subscription (plan status, renewal dates).

Analytics and advertising

On our public marketing pages -- the homepage you see before signing in, and the sign-up, log-in and legal pages -- we run three things: Vercel Analytics, which counts page views and referrers without cookies; the Meta (Facebook) Pixel, which lets us measure and target advertising; and Contentsquare (formerly Hotjar), which records anonymised sessions and builds heatmaps so we can see where people get stuck on the page.

None of these run inside the app. Once you sign in they are not loaded at all, so they never see your tasks, notes, brain dumps or categories. The one exception is the confirmation page shown immediately after you sign up, where the Meta Pixel records that a sign-up happened. That page shows no content you have entered.

Meta and Contentsquare are third parties with their own privacy policies, and the Meta Pixel in particular sets cookies used for advertising. If you would rather not be measured this way, a browser-level tracker blocker or Do Not Track setting will stop them, and the app itself works exactly the same either way.

Files you upload

Images, video and file attachments added to notes are stored with Vercel Blob, our hosting provider's file storage. Every file is stored privately and every download re-checks that you're allowed to see the note it belongs to. Deleting an attachment really deletes the underlying file. The app itself is hosted on Vercel, which processes requests on our behalf.

Family & Teammates sharing

If you join a Family & Teammates group, your shared calendar and any task you're assigned or assign becomes visible to other members of that group. This is a deliberate feature, not incidental sharing -- only join a group with people you actually trust with that visibility.

Local storage and offline capture

The app stores a small offline queue in your browser's local storage so capture still works without a signal, and syncs it once you're back online. This data stays on your device until it syncs.

Data retention and deletion

Your data is kept as long as your account is active. You can delete your account at any time from Settings, which removes your account and associated data from our database.

Children's privacy

On Deck isn't directed at children under 16 and we don't knowingly collect their data.

Changes to this policy

This policy may be updated as the product changes. Material changes will be reflected here with an updated date.

Contact

Questions about this policy, or to request your data be deleted: austinpulczinski@gmail.com