Privacy Policy

What we collect

Your account: your name, your email address, your language and your time zone. If you sign up with a password we store a hashed version of it, never the password itself. If you sign in with Google we store your Google account id and your profile picture, and the tokens Google gives us to keep you signed in.

What you write: the groups you create or join, their names and members, the invite links you send, and the jobs themselves — their title, note, steps, deadline and status.

What happens to a job: an entry each time one is created, poked, bumped, reminded by Peck, added to a calendar, ticked off, finished or given up on. This history is what the app shows the two of you, and it is why nobody can quietly rewrite what happened.

Your devices: a push token for each phone you sign in on, its platform and app version, so notifications can reach you.

Your settings per group: whether Peck may send you push notifications, whether the app may offer calendar entries, and the quiet hours you set.

Technical records: the IP address and browser or app your session was opened from. We use these to keep accounts secure and to stop abuse.

What we deliberately do not collect

There is no analytics, no advertising and no tracking of any kind. We do not know which screens you look at or how long you stay.

There are no read receipts. The app used to show a "seen" status and we removed it: the people you share jobs with learn when you finish something or say you couldn't, and nothing else.

We never sell your data, and we do not share it for anyone else's marketing.

Who can see what

Members of a group see the jobs in that group: what was written, which steps are ticked, and the history of that job. Nobody outside the group sees any of it.

Your email address is visible to you. Other members see your name.

We can technically access the database because we operate it, and we do so only to keep the service running or when the law requires it.

Who else is involved

Push notifications travel through Expo's push service and from there through Apple or Google to your phone. The notification text — usually a name and a job title — passes through them.

Google receives a sign-in request only if you choose to sign in with Google.

The servers and the database run on DigitalOcean.

That is the whole list. There is no one else.

How long we keep it

We keep what you write for as long as your account exists. Sessions expire on their own.

Deleting your account deletes it: your profile, your devices, your settings, and every job you created or that was put on you. Groups where you were alone go too. If you are in a shared group, the group itself stays with the other members and passes to the person who has been in it longest, so that their own jobs do not disappear along with yours.

You can delete your account yourself, from your profile menu, on the web or in the app. There is no waiting period and we do not keep a copy.

Your rights

You can ask what we hold about you, correct it, or have it deleted. The delete button does all of this at once; for anything else, write to us.

If you are in the European Union or Türkiye, the GDPR and KVKK rights apply to you, and you may complain to your data protection authority.

Write to eyupyigitdilber@gmail.com and a person will answer.

Children

Force Todo is not meant for children under 13, and we do not knowingly keep data from them. If a child's account has been created, write to us and we will remove it.

Changes

If this policy changes in a way that matters, the date at the top changes and we say so in the app. Continuing to use Force Todo after that means the new version applies.