The short version
- Your tasks live in a database I own. Not the AI vendor's, not anyone else's.
- Your dumps are sent to an AI to extract tasks, and then discarded.
- Nothing you type is used to train any AI model. My vendor agreements say so. So do mine.
- I don't sell your data. There's no ad tech here. There's one person, a Vercel bill, and a Supabase tab.
What I collect
- Account info: your email and a hashed password (or your Google sign-in).
- Tasks + lists you create: stored so you can see them when you come back.
- Brain Dump content: the text or transcribed voice note you submit. Sent to an AI provider to extract tasks, then not retained.
- Basic usage logs: timestamps and error traces, so when the app breaks I can fix it.
What I don't collect
- Analytics that follow you around the internet.
- Third-party ad cookies.
- Your contacts, calendars, or location.
- Anything you haven't typed into Doot on purpose.
Who touches your data
- Supabase — hosts the database.
- An AI provider — processes Brain Dumps so tasks can be extracted.
- Vercel — hosts the web app itself.
- That's it.
Your rights
- Export your tasks any time (Settings → Export).
- Delete your account any time (Settings → Delete). Everything goes, immediately.
- Ask me anything about your data at privacy@dootit.com.
Changes
If I change this page, I'll email active users. I won't sneak anything in.