All Done? — Privacy Policy

Who we are and how to contact us

All Done? is a task management app for teams, available on the web and as native apps for iPhone, iPad and Android (all use the same account and the same data): workspaces, boards, groups, and tasks. This page explains what information we collect, how we use it, and the choices you have. For any privacy question or request, use the App Support form.

Information we collect

Account information: your name, email address, a securely hashed password if you sign up with one (we never store your password in plain text), your time zone preference (if you set one), and the time of your most recent sign-in.
Sign in with Google or Apple: if you choose to sign in with Google or Apple, the provider tells us your name (if you share it), your email address, whether that email is verified, and a unique identifier for your account with that provider. We use these only to find or create your All Done? account and to keep you signed in. We never receive your Google or Apple password, and we do not access your Google contacts, calendar, files, or any other data from either provider. If you choose Apple's "Hide My Email", we only know the private relay address Apple gives us.
Organization information: your organization's name and its member list.
Content you create: workspace, board, and group names and colors; tasks, including their names, descriptions, status, priority, type, owner, due date, and any nested subtasks; the status, priority, and type labels you set up on each board; the boards and workspaces you mark as favorites; and any board templates you save.
Feedback: if you submit feedback or an idea from the sidebar or the About page, we store the message text along with your name, email, and organization.
Where you use it from: which platform you signed up from (the website, the iPhone or iPad app, or the Android app), how you signed up (email, Google, Apple, or added by an admin), the platforms you have used since, a general description of the browser or app (for example “Chrome on macOS” or “Android app”), and when you were last active. This helps us understand which platforms people use and keep the service working on them.
Server logs: our hosting and our website provider record each request to the service (the time, the network address it came from, the browser or app name, the page or call requested, and the result). We use these logs for security, troubleshooting and abuse prevention, and they are kept for about 30 days.

If you only visit our public website without signing in, see Visitors to our public website for what is collected.

How we use it

To provide the service — storing and syncing your organization's workspaces, boards, and tasks.
To authenticate you and keep your session secure, and to let the All Done? team see when an organization was last active.
To let you save board templates and duplicate boards within your organization.
To review feedback and ideas you choose to submit.
To respond to support requests.
To keep the service secure and fast, and to detect and block abuse.
To understand how our public website is used (visits, where visitors come from, which pages they read), as described below.

We do not run advertising or analytics SDKs in the iPhone, iPad and Android apps or in the signed-in web app, we do not track you across other companies' apps or websites, and we do not use your data for advertising. The only analytics we use is on our public website pages, described below.

Who can see your data

Data is scoped to your organization. Anyone who is a member of your organization can see and edit the workspaces, boards, and tasks they have access to — admins can grant a member access to every workspace or restrict them to specific ones. Feedback and ideas you submit are visible only to the All Done? team, not to other members of your organization.

Who we share data with

We use a small number of service providers to run All Done?, each only for the purpose described:

Google Cloud hosts the service (Firestore for data storage, Cloud Run for hosting, Cloud Logging for server logs), in the United States.
Cloudflare delivers the website and API (content delivery, DDoS protection and security filtering). Requests to alldone.work, including the signed-in web app and the apps' connection to the service, pass through Cloudflare, which processes the request data described above (network address, browser or app name, page requested) on our behalf. Cloudflare does not use it for advertising. See Cloudflare's privacy policy.
Google Analytics measures visits to our public website pages only, as described below.
Google and Apple, if you use Sign in with Google or Apple: your sign-in request is handled by them under their own privacy policies, and we check the sign-in token they send us against their public keys.

We don't share your data with any other third party, and we don't sell it.

Visitors to our public website (analytics and cookies)

The public pages of alldone.work (the home page and the FAQ) use Google Analytics 4 to count visits. It is not used on the sign-in and sign-up pages, inside the signed-in web app, or in the iPhone, iPad and Android apps.

What it records: the pages viewed, scrolling, clicks on sign-up, log-in and app-store links, the page that sent the visitor, language, device and browser type, and an approximate location (country or region) worked out from the network address. Google Analytics 4 does not log or store individual network addresses.
Cookies: Google Analytics sets cookies named _ga and _ga_* to recognize a returning browser. Visitors in the European Economic Area, the United Kingdom and Switzerland get no analytics cookies; for them Google receives only cookieless measurement signals.
What we turned off: Google signals, ad personalization and all advertising features, and we have not enabled the optional data-sharing settings with Google. We do not use this data for advertising and we do not link it to your account.
Retention: analytics data is kept for 14 months, then deleted automatically.
Your choices: if your browser sends Do Not Track or Global Privacy Control, we do not load Google Analytics at all. You can also block it in your browser or with an extension, or use Google's opt-out add-on. See how Google uses data from sites that use its services.

Data retention

Server logs are kept for about 30 days and website analytics for 14 months, as described above. We keep your account data until you delete it. Workspaces, boards, groups, and tasks can each be deleted individually inside the app. When you delete one, we keep a copy in Recently deleted (in Profile & settings) for 30 days so you can restore it if you change your mind, and then remove it permanently. Boards you archive are kept, and hidden from your sidebar, until you unarchive or delete them. Deleting your account or organization removes everything immediately, including anything in Recently deleted. See Delete Your Account for how account and organization deletion work.

Your choices and rights

Correction: everything you've entered is editable in the app.
Deletion: delete individual items yourself at any time (you can restore them from Recently deleted for 30 days, or delete them forever from there), or see our Delete Your Account page for account and organization deletion.
Other requests: contact App Support for anything else, including a copy of your data.

The iPhone, iPad and Android apps

The native apps connect to the same service as the website. They keep a sign-in session on your device so you stay signed in, and they do not collect your location, contacts, photos, advertising identifier, or any device analytics. Signing out, or deleting your account, ends the session. Because every app uses the same account, you can delete your account from inside any of them: open Settings and choose Delete my account in the Danger zone.

Due-date reminders: if you turn them on, the app asks for permission to show notifications. Reminders are scheduled on your device from your own tasks that have a due date; they do not send any additional information to us or to anyone else.
Permissions on Android: the Android app asks for internet access (to reach the service), permission to show notifications (for reminders), and permission to run at startup (only so that reminders you turned on keep working after the phone restarts). To offer "Continue with Google", the Android app uses Google's sign-in component on the device (Google Play services); it is used only for that button and the app has no advertising or analytics SDKs.

Security

Passwords are hashed with bcrypt and never stored in plain text. Sessions are authenticated with a signed session cookie that scripts cannot read, and traffic is encrypted in transit over HTTPS, including between Cloudflare and our servers. That said, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Children

All Done? is not directed at children under 13, and we do not knowingly collect information from them.

Changes to this policy

We may update this policy from time to time. We'll post the updated version on this page with a new "Last updated" date.