Your data, and what we actually do with it.

The short version

We collect the email address you sign up with and the things you put into the app: tasks, habits, projects, goals, rewards and the points you earn. We use them to run Actto for you and for nothing else. We do not sell your data, we do not share it for advertising, and we do not train any AI model on it. Deleting your account deletes it.

Who we are

Actto is operated by Andrii Pyrozhok, at 21 Silverado Range Bay SW, Calgary, Alberta T2X 0C2, Canada. That is who decides what happens to the data described here, and who is responsible for it.

For anything about your data, email support@actto.app. A real person reads it.

What we collect

Account details: your email address, and an authentication record so you can sign in. We never see your password. If you sign in with a provider, we receive only your email address and a user identifier.

Content you create: tasks, habits, projects, goals, areas, rewards and their prices, the energy and duration you tag things with, completion history and points earned. This is the app, so it is most of what we hold.

Technical data: our hosting provider records standard server logs, including IP address and browser type, for security and to keep the service running. If the app crashes, we receive a crash report containing your user identifier and the technical details of the error. Query strings are stripped from those reports before they are sent.

An email address you leave in the footer, if you leave one. That is a list of its own and it is not an account: we hold the address, the date, and nothing else. Every email we send to it carries a one-click unsubscribe link, and you can email us to be taken off instead.

How you found us: if you arrive from a link or a campaign, we record where from, once, on your account. It is the referring site or campaign name, never the full address of the page you came from, and it is written the first time only so a later visit cannot overwrite it.

Which limits you meet in the app: three counters, recording that a Free limit was reached, that you opened the plan screen, and that you started a checkout. We store which feature it was and nothing you typed. It tells us which parts of Actto people actually run into, so we fix the right ones.

What we do not collect

• No advertising or tracking cookies. See the cookies page.
• No location tracking, no device fingerprinting, no cross-site tracking.
• Inside the Actto app: no session recording, and no analytics that follows you to other websites. We never watch what you type or replay your screen. The marketing site is different, and the section below says how.
• No data brokers, and no purchased or enriched profiles about you.
• No health data. Actto is a productivity app and does not ask for, store or infer anything medical.

Why we are allowed to hold it

For the content you create and your account details, we need them to provide the service you signed up for. A task app cannot work if it is not allowed to store your tasks.

For server logs and crash reports, we rely on our legitimate interest in keeping the service secure and working. We keep only what is useful.

If we ever send you a marketing email, it is because you agreed to it, and every one has a one-click unsubscribe.

Who processes it for us

We use a small number of providers, and each one is contractually limited to processing your data on our instructions.

Payments work differently, and the next section says how.

• Supabase: database, authentication and storage. This is where your account and your content live.
• Vercel: hosting for the website and the app.
• Anthropic: the two AI features, and only when you use them. The planner sends the tasks it is choosing between: their names, the energy and duration you tagged them with, the points they are worth, and any due date or start time you gave them. The brain-dump tidy sends the text of the captures you asked it to tidy. Anthropic does not use API data to train its models, and we do not either.
• Resend: email delivery. Account emails such as sign-in links, anything you send us through the contact form or the in-app support form, and a notification to us when someone leaves an address in the footer. It receives your address and the message you wrote, and nothing from your task list.
• Sentry: crash reporting, when enabled. It receives your user identifier and technical error details, not your task content.
• Google, Microsoft and Meta: analytics and ad measurement on the marketing website only, and only if you allow cookies. They receive how you used the site, not anything from your account or your task list.

Paying for Plus

If you buy a paid plan, the payment is handled by Paddle, who sell Actto to you as the merchant of record. You give your payment details to Paddle, not to us, and they hold them under their own privacy policy. They also handle the sales tax or VAT for where you are.

We never see your card details. What comes back to us is an identifier for you as a customer, an identifier for what you bought, whether it is active, and when the period you have paid for ends. That is what tells the app to turn Plus on, and it is all we store about a payment.

If you never buy anything, none of this happens and Paddle receives nothing about you.

Analytics on this website

This section is about actto.app, the website you are reading. It is not about the app, which is covered above and has none of this.

If you press Allow on the cookie banner, we use Google Analytics to see which pages get read and where people leave, and Microsoft Clarity to see where people click and scroll and to record how pages get used. If we are running ads, a Meta pixel is there too, so we can tell whether an ad brought somebody who stayed. All of them set cookies on your device, all of them are run by companies outside our own infrastructure, and none of them loads at all unless you agree.

Clarity records page sessions. Every form on this site is masked, so a recording shows that somebody typed and never what they typed. We have turned off Google's advertising and cross-site profiling features, and the Meta pixel is not given your email address or anything else that identifies you, so this is used to improve the site and to tell whether our ads work, and we do not sell or share any of it.

Our visitor counter is separate and needs no consent. It is Vercel Web Analytics, run by the company that hosts this site: it stores nothing on your device, cannot follow you to another website, and the counts it keeps are not tied to you, your account or your IP address. It is the only one of the three that counts everybody, because it does not have to ask.

The AI features, specifically

There are two, the planner and the brain-dump tidy. Both are optional, and together they are the only part of Actto that sends anything you wrote to a third party. If you never use them, nothing you type leaves our own infrastructure.

The planner sends the tasks it is choosing between: their names, the energy and duration you tagged them with, the points they are worth, and any due date or start time. It also sends the energy and the hours you said you have. The tidy sends the text of the captures you asked it to clean up, and nothing else.

We never send your email address or anything that identifies you. The plan, or the tidied list, comes straight back to you, and nothing about either exchange is used to train a model.

How long we keep it

Your content stays until you delete it, or until you delete your account. Nothing expires and nothing is quietly cleared out. That is a product decision as much as a privacy one.

Deleting your account schedules the deletion of everything associated with it. Until that runs you can cancel it, and after it runs the data is gone from our systems. Server logs and crash reports age out on their providers' own retention schedules.

Your rights

You can ask for a copy of your data, ask us to correct it, ask us to delete it, or object to how we use it. If you delete your account from inside the app, the deletion starts straight away and we do not ask you why.

For anything else, email support@actto.app and we will answer within 30 days. If you are in the UK or the EU and you are not satisfied with our answer, you have the right to complain to your local data protection authority.

Children

Actto is not intended for children under 16, and we do not knowingly collect their data. If you believe a child has an account, email us and we will remove it.

Changes to this policy

If we change something substantial, we will update the date at the top. We will not quietly broaden what we do with your data.