Privacy

The short version

• Your tasks, focus sessions, done list, chain and settings are stored in your own browser.
• They leave your browser only if you choose to: by signing in to an account, or by sending an export to Google.
• There is no advertising and no analytics or tracking on this site.

What is stored in your browser

Everything you enter (tasks and their steps and notes, focus sessions, the done list, your chain, and your look, sound and timer settings) is kept in your browser's local storage on this device. The site also keeps a copy of its own pages on the device so it works offline. None of this is sent to us.

You can save a backup file, or delete everything, under Account → Your data. Clearing this site's data in your browser removes it too.

If you create an account

Accounts are optional. If you sign in (with email and password, with Google, or as a guest), your data is also stored in Google Firebase so it can sync between your devices. Firebase then holds:

• your sign-in details: your email address if you gave one (your password is stored by Firebase in hashed form and is never visible to us), or your Google account's name and email if you signed in with Google;
• the same data listed above: tasks, sessions, done list, chain and settings;
• what you enter on the Budget page: each expense with its category, your budgets, and the bills you set to repeat.

Each account can read and write only its own data. You can delete your account, and everything stored in it, at any time on the Account page.

If you use Send to Google

Send to Google creates a Google Sheet or a Google Doc in your own Google Drive, containing the data you ticked in the export dialog. When you use it:

• you sign in in Google's own window, and are asked for one permission: to create files, and to open the files this site created. The site cannot see, change or delete any other file in your Drive;
• the file is built in your browser and sent directly to Google. It does not pass through any server of ours;
• the access Google gives is used for that one export and is not stored. We keep no copy of the file and cannot open it;
• the file belongs to you. Delete it in Google Drive whenever you like, and remove the site's access at any time in your Google Account under Security → Third-party access.

Grovyn's use of information received from Google APIs adheres to theGoogle API Services User Data Policy, including the Limited Use requirements.

Health data in the Android app

The Health page of the Android app can read sleep, steps, exercise, resting heart rate, calories burned and distance from Health Connect, and only the kinds you allow. It reads daily totals to show them next to your focus time. It never writes to Health Connect.

• the numbers stay on your phone. They are not sent to us, not copied to your account, and not part of backups;
• they are not used for ads and are not shared with anyone;
• you can take the permission back at any time in Health Connect, under App permissions. Deleting all data in the app also clears the last numbers it read.

What you type in on the Budget page, wellbeing spend included, is kept in your browser or on your phone, and in your account if you are signed in.

Other services the site talks to

• GitHub Pages hosts the site. Like any web host, GitHub receives your IP address when your browser loads the pages.
• YouTube, only if you choose a YouTube link as background sound. The player is loaded from YouTube's privacy-enhanced address (youtube-nocookie.com), and YouTube then receives the usual information a video player does.
• Google, only if you sign in to an account or use Send to Google, as described above.

What we don't do

We don't sell or share your data, show ads, or use it for anything other than showing it back to you.

Questions

Write to babazadezohr@gmail.com.