Privacy
This is a small, invite-only task app run by its admin for people they know. It exists to manage your tasks, not to collect data about you.
What is stored
- Your account: name, email, and a hashed password (the actual password is never stored and cannot be read by anyone).
- Your lists, tasks, notes, due dates, and completion history.
- Settings you choose to enter: Canvas address and token, AI provider, key and model, work window, standing commitments, calendar link, theme, and app name.
- Cached copies of Canvas assignment descriptions for your imported tasks, so time estimates can use them without refetching.
How it is used
- Only to provide the app's features to you. There are no ads, no analytics, no trackers, and nothing is ever sold or given to third parties.
- Your Canvas token is used only to fetch your own courses and assignments from your school's Canvas when you click fetch.
- When you use the planner or chat, your open tasks, due dates, assignment descriptions, and today's calendar events are sent to the AI provider configured for your account (OpenAI or Google Gemini) to generate the reply. Their terms apply to that processing.
- Your calendar link is fetched only to read your events: today's events for the planner, and upcoming events when you choose to import them as tasks.
Who can see what
- Your tasks and settings are private to your account. Other users cannot see them.
- If the admin shares an AI key with you, you can use it but never see it.
- The admin operates the server and could technically access the database; passwords stay hashed regardless.
Encryption
- Everything in transit is encrypted: all traffic between your browser and this app uses HTTPS (TLS), and so does every connection this app makes to Canvas, the AI providers, and Google Calendar.
- Stored credentials are encrypted at rest: your Canvas token and AI keys are kept in the database only in encrypted form.
- Your password is never stored in any form that can be read or decrypted: only a one-way bcrypt hash is kept.
- The database lives on an access-controlled server that only the admin can reach.
Cookies
One session cookie keeps you logged in. That is all.
Deletion
Ask the admin to delete your account and its data at any time.
Last updated: 14 Sep 2026. Questions: contact the site admin.