Privacy Policy

Effective Date: November 15, 2025

Purrductivity ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our productivity dashboard application.

1. Information We Collect

1.1 Information from Google

When you sign in with Google, we collect:

• Google Account Information: Your email address, name, profile picture, and Google user ID
• Google Calendar Data (Optional): If you grant permission, we access your calendar events to display them in the Calendar widget

1.2 User-Created Content

We store content you create within the application, including:

• Dashboard layouts and configurations
• Widget placements, sizes, and custom titles
• Sticky notes content and colors
• To-do lists and task data
• Habit tracker check-ins and streaks
• Weather location preferences
• Clock timezone and format settings
• Theme preferences and zoom levels

1.3 Automatically Collected Information

• Usage Data: Anonymous analytics data about how you interact with our application (via Vercel Analytics)
• Device Information: Browser type, timezone, and device characteristics for proper functionality

2. How We Use Your Information

We use the collected information to:

• Provide, maintain, and improve our services
• Authenticate your account and maintain your session
• Store and sync your dashboard across devices
• Display your Google Calendar events (if granted permission)
• Personalize your experience with custom themes, layouts, and preferences
• Analyze usage patterns to improve our application (anonymous data only)
• Communicate important service updates or changes

3. How We Store Your Data

3.1 Local Storage

We use your browser's localStorage to cache dashboard data for instant loading and offline functionality. This data remains on your device and includes:

• Google OAuth access tokens (encrypted by your browser)
• Dashboard layout and widget content (cached copy)
• User preferences and settings

3.2 Server Storage

We use Supabase (a secure, encrypted database service) to store your data persistently. Auto-save functionality syncs your changes to our servers with a 2-second debounce to minimize server requests.

3.3 Data Security

• All data transmitted between your browser and our servers is encrypted using HTTPS/TLS
• Database access is restricted to authenticated users only
• We implement industry-standard security practices to protect your information
• Google OAuth tokens are stored securely and never shared with third parties

4. Third-Party Services

We integrate with the following third-party services:

4.1 Google OAuth & APIs

• Purpose: Authentication and calendar integration
• Data Shared: Authentication tokens (never your password)
• Privacy Policy: Google Privacy Policy

4.2 Vercel Analytics

• Purpose: Anonymous usage analytics and performance monitoring
• Data Collected: Page views, performance metrics (no personal data)
• Privacy Policy: Vercel Privacy Policy

4.3 Supabase

• Purpose: Database hosting and data storage
• Data Stored: User profiles, dashboard data, widget content
• Privacy Policy: Supabase Privacy Policy

4.4 Weather & News APIs

• Purpose: Display weather forecasts and news articles
• Data Shared: Your location (only if you grant permission for weather widget)

5. Your Rights and Choices

5.1 Access Your Data

You can access all your data by logging into your dashboard. All content you've created is visible and editable through the application interface.

5.2 Delete Your Account

You have the right to delete your account and all associated data at any time:

• Click on your profile picture in the dashboard
• Select "Delete account" from the dropdown menu
• Confirm deletion in the dialog
• Note: This action is permanent and cannot be undone. All your data will be immediately removed from our servers.

5.3 Export Your Data

You can export all your data at any time:

• Click on your profile picture in the dashboard
• Select "Export my data" from the dropdown menu
• A JSON file containing all your data will be downloaded to your device
• The export includes: user profile, dashboard layout, widgets, content, and all preferences
• This data is portable and can be used for backup or migration purposes

5.4 Revoke Permissions

• Google Calendar: Revoke access through your Google Account Permissions
• Location: Manage through your browser settings or widget settings

5.5 Clear Local Data

You can clear cached data from your browser's localStorage at any time through your browser settings. Note that this will log you out and may require re-syncing data from the server.

6. GDPR Compliance (EU Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

6.1 Legal Basis for Processing

• Consent: By signing in with Google, you consent to our collection and use of your data
• Legitimate Interest: We process data to provide and improve our services
• Contract Performance: Processing necessary to provide the service you requested

6.2 Your GDPR Rights

• Right to Access: View all your data through the dashboard
• Right to Rectification: Edit and update your data at any time
• Right to Erasure: Delete your account permanently
• Right to Data Portability: Export your data in JSON format
• Right to Object: Object to data processing by deleting your account
• Right to Restriction: Request limitations on how we process your data
• Right to Withdraw Consent: Log out and delete your account at any time

6.3 Data Retention

We retain your data for as long as your account is active. Upon account deletion, all data is immediately and permanently removed from our systems.

6.4 Data Transfers

Your data may be transferred to and processed in countries outside the EEA. We ensure appropriate safeguards are in place through our third-party providers' GDPR compliance.

7. CCPA Compliance (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

7.1 Your CCPA Rights

• Right to Know: You can access what personal information we collect, use, disclose, and sell
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: We do not sell your personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

7.2 Categories of Information Collected

• Identifiers: Email, name, Google user ID
• Commercial Information: Dashboard usage preferences
• Internet Activity: Anonymous analytics data
• Geolocation: Timezone, weather location (if granted)

7.3 Sale of Personal Information

We do not sell your personal information. We do not share your personal information with third parties for monetary or other valuable consideration.

8. Cookies and Local Storage

8.1 What We Use

We use localStorage (browser storage) instead of traditional cookies for most functionality. localStorage allows us to:

• Keep you logged in across sessions
• Cache your dashboard for instant loading
• Store user preferences (theme, zoom, widget settings)
• Enable offline functionality

8.2 Third-Party Cookies

• Vercel Analytics: Anonymous analytics cookies for performance monitoring
• Google OAuth: Session cookies required for authentication

8.3 Managing Cookies and Storage

You can clear all localStorage and cookies through your browser settings. Note that this will log you out and reset your preferences.

9. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us to have it removed.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top. You are advised to review this Privacy Policy periodically for any changes.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

• Via the Contact Page: Contact Form
• For GDPR/CCPA Requests: Use the contact form and specify your request type