Privacy Policy

Last updated: 2026-07

What we collect

Account info (email / nickname), subscription and to-do data, optional payment-method management metadata (such as type, name, or last four digits), and platform credentials such as webhook secrets or API tokens. The service must not receive full card numbers, CVVs, or payment passwords, and it does not charge you.

How credentials are protected

Sensitive upstream authentication for HTTP Pull is stored with AES-256-GCM and decrypted only for its server-side request; read APIs do not return that plaintext. Webhook URLs and tokens are shown in Connections so you can configure senders, and must also be treated as credentials and rotated after exposure.

How data is used

Only to provide subscription reminders and to-do aggregation (generating reminders, pulling / receiving platform events). We do not sell your data or use it for advertising.

Retention and deletion

You can export a subscription backup and delete business records where the product provides deletion controls. Account or other data-deletion requests can be submitted by email and remain subject to necessary security, backup, audit, and legal retention periods.

Third parties

If you sign in with your Tutu account (tutuid), that flow follows its privacy policy; data exchanged with connected third-party platforms follows their policies.

Contact us

For privacy questions, contact us through the support email.