Privacy Policy

Last updated: 5 April 2026

We collect only what we need to run the app. Your task data belongs to you. We don't sell it, we don't use it for advertising, and we don't train AI models on it. Your data is stored in Australia. You can export or delete it at any time.

1. Who We Are

The davis planner ("tdp", "we", "us") is a task management web application operated from Perth, Western Australia. Our website is thedavisplanner.com. For privacy questions, contact support@thedavisplanner.com.

2. What We Collect

DataWhyStored where
Email addressAccount login, password resets, email digestsSupabase (Sydney, AU)
PasswordAccount authenticationSupabase (bcrypt hashed, never stored in plaintext)
Task contentCore service — your lists, items, tags, dates, prioritiesSupabase (Sydney, AU)
IP addressSecurity audit logging (login/logout tracking)Supabase (Sydney, AU), retained 90 days
Payment infoSubscription billingStripe (US) — we never see or store card numbers
Calendar credentialsCalendar sync (only if you connect)Supabase (Sydney, AU), encrypted at rest

We do not collect: device identifiers, location data, browsing history, analytics/tracking cookies, or any data from other apps on your device.

3. How We Use Your Data

We do not use your data for advertising, profiling, marketing to third parties, or any purpose other than running the service.

4. Who We Share Data With

We share data only with the service providers needed to run tdp:

ProviderWhat they receiveLocationPurpose
SupabaseAll account + task dataSydney, AUDatabase hosting, authentication
StripeEmail, payment infoUSSubscription billing
AnthropicTask content (Pro plan, AI assistant only)USAI response generation
ResendEmail address, task summariesUSEmail digest delivery
Google/AppleTask dates/times (calendar sync only)USCalendar event creation

We do not sell, rent, or trade your personal data to anyone. We do not share data with advertisers or data brokers.

5. Cross-Border Data Transfers

Your primary data is stored in Sydney, Australia (Supabase, AU-hosted). Some data is processed by US-based service providers as described in Section 4. By using our service, you consent to the transfer of your data to these providers.

We have binding contractual arrangements with each overseas provider requiring them to handle your personal information in accordance with the Australian Privacy Principles (APPs) and applicable privacy laws:

If you are located in the EU/EEA, transfers are additionally conducted under Standard Contractual Clauses (SCCs) where applicable.

6. AI Chatbot & Your Data

The AI assistant (Pro plan, 150 messages/month) sends your task content to Anthropic's Claude API to generate responses. Important facts:

7. Data Retention

Data typeRetention period
Active account data (tasks, lists, settings)Kept while your account is active
Account after deletion requestSoft-deleted immediately, permanently purged within 30 days
Account after subscription cancellationData preserved indefinitely — you keep your data, features are downgraded to Free
IP addresses in audit logs90 days, then automatically purged
Stripe payment recordsManaged by Stripe per their retention policy
Email digest history30 days (deduplication records only, no email content stored)
User blocksKept while either user's account is active; deleted when either account is deleted
Content reports (abuse reports you file or that are filed against you)90 days for resolved reports; longer where retention is required by law or an ongoing investigation
Database backupsUp to 90 days (Supabase managed), then automatically deleted

Content reports & moderation

When you report objectionable content using the in-app report controls, we store the report (including the reported content, the reason, and any notes you provide) in our moderation queue. You can also block the reported user separately to stop seeing their content. A human moderator reviews reports and may remove content globally, suspend accounts, or dismiss the report. See our Terms of Service — Acceptable Use for the full policy.

8. Your Rights

Regardless of where you live, you can:

If you are in the EU/EEA, you also have the right to data portability, the right to object to processing, and the right to lodge a complaint with your local supervisory authority.

If you are in Australia, you may contact the Office of the Australian Information Commissioner (OAIC) if you believe your privacy has been breached.

To exercise any right, email support@thedavisplanner.com. We respond within 14 days.

9. Data Security

10. Data Breach Notification

If we discover a data breach that is likely to result in serious harm to you, we will:

11. Cookies & Tracking

We do not use cookies for tracking, analytics, or advertising. The only data stored in your browser is:

We do not use Google Analytics, Facebook Pixel, or any third-party tracking scripts.

12. Children

tdp is not directed at children under 16. We do not knowingly collect data from children. If you believe a child under 16 has created an account, contact us and we will delete it promptly.

13. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or in-app notification at least 14 days before taking effect. The "last updated" date at the top reflects the most recent revision.

14. Contact

For privacy questions, data access requests, or complaints:
support@thedavisplanner.com

Office of the Australian Information Commissioner (OAIC):
www.oaic.gov.au/privacy/privacy-complaints


the davis planner · Home · Terms of Service · Sign In