← back to the davis planner

Privacy Policy

Last updated: 5 April 2026

We collect only what we need to run the app. Your task data belongs to you. We don't sell it, we don't use it for advertising, and we don't train AI models on it. Your data is stored in Australia. You can export or delete it at any time.

1. Who We Are

The davis planner ("tdp", "we", "us") is a task management web application operated from Perth, Western Australia. Our website is thedavisplanner.com. For privacy questions, contact support@thedavisplanner.com.

2. What We Collect

DataWhyStored where
Email addressAccount login, password resets, email digestsSupabase (Sydney, AU)
PasswordAccount authenticationSupabase (bcrypt hashed, never stored in plaintext)
Task contentCore service — your lists, items, tags, dates, prioritiesSupabase (Sydney, AU)
IP addressSecurity audit logging (login/logout tracking)Supabase (Sydney, AU), retained 90 days
Payment infoSubscription billingStripe (US) — we never see or store card numbers
Calendar credentialsCalendar sync (only if you connect)Supabase (Sydney, AU), encrypted at rest

We do not collect: device identifiers, location data, browsing history, analytics/tracking cookies, or any data from other apps on your device.

3. How We Use Your Data

We do not use your data for advertising, profiling, marketing to third parties, or any purpose other than running the service.

4. Who We Share Data With

We share data only with the service providers needed to run tdp:

ProviderWhat they receiveLocationPurpose
SupabaseAll account + task dataSydney, AUDatabase hosting, authentication
StripeEmail, payment infoUSSubscription billing
AnthropicTask content (Pro plan, AI chatbot only)USAI response generation
ResendEmail address, task summariesUSEmail digest delivery
Google/AppleTask dates/times (calendar sync only)USCalendar event creation

We do not sell, rent, or trade your personal data to anyone. We do not share data with advertisers or data brokers.

5. Cross-Border Data Transfers

Your primary data is stored in Sydney, Australia (Supabase). Some data is processed by US-based companies (Stripe, Anthropic, Resend) as described above. These providers maintain security standards and contractual obligations consistent with applicable privacy laws. If you are located in the EU/EEA, transfers are conducted under Standard Contractual Clauses (SCCs) where applicable.

6. AI Chatbot & Your Data

The AI chatbot (Pro plan, 150 messages/month) sends your task content to Anthropic's Claude API to generate responses. Important facts:

7. Data Retention

Data typeRetention period
Active account data (tasks, lists, settings)Kept while your account is active
Account after deletion requestSoft-deleted immediately, permanently purged within 30 days
Account after subscription cancellationData preserved indefinitely — you keep your data, features are downgraded to Free
IP addresses in audit logs90 days, then automatically purged
Stripe payment recordsManaged by Stripe per their retention policy
Email digest history30 days (deduplication records only, no email content stored)
Database backupsUp to 90 days (Supabase managed), then automatically deleted

8. Your Rights

Regardless of where you live, you can:

If you are in the EU/EEA, you also have the right to data portability, the right to object to processing, and the right to lodge a complaint with your local supervisory authority.

If you are in Australia, you may contact the Office of the Australian Information Commissioner (OAIC) if you believe your privacy has been breached.

To exercise any right, email support@thedavisplanner.com. We respond within 14 days.

9. Data Security

10. Data Breach Notification

If we discover a data breach that is likely to result in serious harm to you, we will:

11. Cookies & Tracking

We do not use cookies for tracking, analytics, or advertising. The only data stored in your browser is:

We do not use Google Analytics, Facebook Pixel, or any third-party tracking scripts.

12. Children

tdp is not directed at children under 16. We do not knowingly collect data from children. If you believe a child under 16 has created an account, contact us and we will delete it promptly.

13. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or in-app notification at least 14 days before taking effect. The "last updated" date at the top reflects the most recent revision.

14. Contact

For privacy questions, data access requests, or complaints:
support@thedavisplanner.com

Office of the Australian Information Commissioner (OAIC):
www.oaic.gov.au/privacy/privacy-complaints


the davis planner · Home · Terms of Service · Sign In