Privacy Policy

This Privacy Policy explains how DoneHero (“we”, “us”) collects, uses, and protects your information when you use our website and web application (the “Service”). We aim to collect only what we need to run DoneHero well, and we do not sell your personal data.

1. Information we collect

Account information

When you create an account, we collect your name, email address, and a securely hashed password. If you sign in with a third-party provider such as Google, we receive basic profile information from that provider.

Content you create

We store the goals, epics, tasks, habits, check-ins, rewards, and profile data you create so the Service can function and sync across your sessions.

Usage data

We collect privacy-friendly, aggregated usage analytics (such as page views and feature interactions) to understand how the Service is used and to improve it. This analytics data does not require cookies and is not used to track you across other websites.

2. How we use your information

• To provide, maintain, and improve the Service.
• To authenticate you and keep your account secure.
• To respond to your requests and provide support.
• To analyze usage in aggregate so we can make DoneHero better over time.
• To comply with legal obligations.

3. How we share information

We do not sell your personal data. We share information only with service providers who help us operate the Service (such as hosting and database providers), and only to the extent necessary to perform those services, or when required by law.

4. Data storage and security

Your data is stored in a secure cloud database. We use industry-standard measures, including encryption in transit and hashed passwords, to protect your information. No method of transmission or storage is completely secure, but we work to safeguard your data.

5. Your rights and choices

You can access and update most of your information directly within the app. To delete your account and associated data, email us at [email protected] from the address linked to your account. We will process verified deletion requests within a reasonable time. If you would like help exercising any other data rights available to you under applicable law, contact us using the details below.

6. Data retention

We retain your information for as long as your account is active or as needed to provide the Service. After a confirmed account deletion request, we delete or anonymize your personal data, except where we are required to retain it for legal purposes.

7. Children’s privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us personal data, please contact us so we can remove it.

8. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you.

9. Contact

Questions about your privacy? Reach us at [email protected].