← Back

Privacy Policy

Last updated: 23 February 2026

1. Data Controller

The person or entity who deploys and operates this setCompleted instance is the data controller. Supabase acts as a data processor on behalf of the operator.

2. Data We Collect

When you use this service, we store:

  • Account data: Email address (for authentication), display name
  • Task data: Projects, folders, tasks, sections, due dates, descriptions, custom fields, and related content you enter
  • Backups (optional): If you enable cloud backups, a copy of your data is stored in Supabase Storage

3. Where Data Is Stored

Data is stored in Supabase (database and object storage) in the EU, specifically in the eu-central-1 region (Frankfurt). Your data remains within the European Union.

4. Who Can Access Your Data

Important:

The operator of this service has full technical access to the database and can view all stored data. Data is not encrypted in a way that prevents the operator from reading it. Row Level Security (RLS) protects users from each other, but not from the project owner.

We do not sell your data. We do not share it with third parties for marketing. Supabase processes data on our behalf under their Data Processing Agreement.

5. Data Retention and Deletion

Your data is retained until you delete it or your account. You can export, delete all data, or delete your account from Settings. Account deletion is irreversible.

6. Your Rights (GDPR)

If you are in the EU/EEA, you have the right to access, rectification, erasure, and data portability. To exercise these rights, contact the operator.

7. Contact

For privacy-related requests, contact the data controller at the email or contact method provided on this site.