Privacy Policy

In short

Ta-da collects as little data as possible. If you don't create an account, nothing you type ever leaves your device. If you do, we store your email address, your tasks, wins, thoughts and settings, so you can get them back if you lose your device.

Feedback submitted through the app is used only to improve the product. All feedback is sent with your app version and OS so we know how best to act on it. Your email address is attached only if you choose to include it.

That's it. We don't run analytics, we don't show ads, we don't use trackers, and we don't use, sell or share your information with anyone for marketing purposes.

The rest of this page is the full, precise version of that promise, as required by law and by the app stores.

Who is responsible for your data

Ta-da is made by Paul Boshoff, trading as One of Us, based in South Africa.

For any privacy questions, requests, or concerns, contact tada-help@one-of-us.dev.

One of Us is not currently a registered company. Paul Boshoff, as an individual, is the party responsible for your personal information under South Africa's Protection of Personal Information Act (POPIA) and any other privacy law that applies to you.

What information we collect

If you use the app without an account

Nothing. Your tasks, wins (completed tasks), thoughts, and app settings are stored only on your device. We never see them, and nothing is transmitted to us.

If you create an account

• Your email address, used to sign you in, to let you recover your account if you forget your password, and to send you security notifications, for example confirming a password change.
• Your in app data, meaning your tasks, wins, thoughts, and app settings, stored remotely so they can be restored if you lose or replace your device. This is the same data that lives on your device. An account simply keeps a remote copy of it.

If you use the in-app Feedback feature

• The message you write, and, only if you choose to include it, an email address for us to reply to. The email field is never pre-filled from your account, even if you're signed in, so a message you intend as anonymous stays that way unless you type your address in yourself.
• The version of the app you are using, and your device's platform and operating system version. The form shows you these openly, and they're included only so we can understand and reproduce the issues you report. We do not collect your device's make or model.

Your feedback, and your email address if you choose to include it, is never used, sold, or shared outside of One of Us.

We do not collect location data, contacts, photos, camera or microphone access, advertising identifiers, or any device data beyond what's described above.

Deleting your data

Deleting your account permanently removes your account and your remotely stored data. This action is permanent and cannot be undone.

You can do this in two ways:

• In the app, from Settings.
• By email, at tada-help@one-of-us.dev, from the address your account is registered under. We reply within 2 business days to confirm the request is yours, and once you have confirmed, your account is deleted within 7 days. Full instructions are on our account deletion page.

Local data on your device stays on your device until you uninstall the app, whether or not you have an account.

Feedback messages you've sent us remain in our mailbox as ordinary correspondence, the same as any email you'd send a person, until we delete them. If you would like a feedback message removed, contact us at tada-help@one-of-us.dev.

Your rights

Wherever you're located, you can contact us at tada-help@one-of-us.dev to:

• Ask what personal information we hold about you
• Ask us to correct inaccurate information
• Ask us to delete your information
• Object to how your information is processed
• Ask us to restrict how we use it

If you're in South Africa, you have these rights under POPIA, and you may lodge a complaint with the Information Regulator of South Africa if you believe we've mishandled your information.

If you're in the European Union or United Kingdom, you have equivalent rights under the GDPR and can lodge a complaint with your local data protection authority.

If you're in California, you have rights under the CCPA, including the right to know what personal information is collected and to request its deletion. As stated above, we do not sell personal information.

What we deliberately don't do

• No analytics or usage tracking
• No advertising, and no advertising SDKs
• No third-party trackers of any kind
• No selling, renting, or sharing your information for marketing purposes
• No profiling, scoring, or automated decisions made about you
• No behavioural or cross-app tracking
• No device identifiers, and no device fingerprinting
• No use of your information to train artificial intelligence or machine-learning models

Accounts exist for one reason only: so your data can be recovered if something happens to your device. Creating an account changes nothing else about the app. Every feature, every screen, every interaction is identical whether or not you have one.

Payments

Ta-da is a one-off purchase. When you buy it, the payment is handled entirely by the Apple App Store or Google Play, depending on where you downloaded the app. We never see, receive, or store your card details or billing information. Refunds and billing questions are handled by Apple or Google under their own terms, not by us.

Where your data lives

Your account and in app data are stored with Supabase, our database provider, on servers located in Ireland (EU West). Supabase acts as our data processor and stores exactly the data described above, nothing more.

If you're signed out, your data lives only in your device's local storage. It is never transmitted anywhere unless and until you create an account or sign in, at which point it is sent to our servers to be backed up.

Feedback messages are sent by email and received in our mailbox. They are not stored in the app's own database. In transit they pass through Resend, in the United States, which holds a copy for 30 days.

Who else sees your information

We use a small number of service providers to run the app. None of them are permitted to use your data for their own purposes.

We do not use any advertising, analytics, or marketing platforms.

How we protect your data

We take reasonable measures to keep your information safe:

• Data sent between your device and our servers is encrypted in transit.
• Your account password is managed and stored only in hashed form by our authentication provider, Supabase. We never see it or store it ourselves.
• Access to stored data is limited to what is needed to run and support the app.
• Each account can only reach its own data. This is enforced at the database level, so one person's information is never accessible from another person's account.

No method of transmitting or storing information is ever completely secure, so while we work hard to protect yours, we can't promise absolute security. If we ever become aware of a breach affecting your information, we'll act to address it and will notify you and the relevant authority where the law requires it.

How long we keep your data

If you have an account, we keep your email address and your in app data for as long as your account exists. When you delete your account, that data is removed from our database. We keep no separate backup copies, so once it's deleted, it's gone entirely.

If you never create an account, we keep nothing, because nothing ever reaches us.

Feedback messages you send stay in our mailbox as ordinary correspondence until we delete them.

Emails we send you, including recovery codes, password change notices, and the feedback you submit, pass through Resend, our email provider. Resend keeps a copy of the message content and delivery logs for 30 days, after which they are deleted automatically.

When we may disclose your information

We don't sell or share your information. In rare cases we may disclose it if we are legally required to, for example in response to a valid court order, subpoena, or other lawful request from a public authority, or where we reasonably need to in order to protect our legal rights or the safety of others. Given how little we hold, any such disclosure would amount to your email address and your in app data, and nothing more.

If the app changes hands

If Ta-da is ever sold, transferred, or merged into another business, your information may transfer as part of that change. If that happens, we'll ensure the new owner is bound to protect your information under terms at least as protective as this policy, and we'll update this page and note the change before any new terms take effect.

Our legal basis for using your data

If you're in the European Union or United Kingdom, data protection law asks us to name a lawful basis for each way we use your information. Here it stays simple:

• We use your email address and in app data to provide the app and the recovery feature you asked for. The basis is performance of our agreement with you.
• We use your feedback, and any reply address you choose to give, to answer you. The basis is your consent, given when you choose to send it.
• We keep our systems secure and guard against misuse. The basis is our legitimate interest in running the app safely.
• Where the law requires us to disclose or retain something, the basis is compliance with a legal obligation.

Under POPIA, the equivalent grounds are that our processing is necessary to provide the service you've asked for, to comply with the law, and to pursue our legitimate interests, always limited to the minimal data described in this policy.

International data transfers

Ta-da is operated from South Africa. Your account and in app data are hosted in Ireland, and email passing through our email provider is processed and stored in the United States. If you're located somewhere else, your information will be transferred across borders as a normal part of how the app works. We only work with service providers who are contractually and technically committed to protecting your data, wherever it's processed.

Children

Ta-da is not directed at children under the age of 13, and we do not knowingly collect personal information from anyone under that age. If you believe a child has created an account, contact us at tada-help@one-of-us.dev and we will delete it.

Changes to this policy

If we make a material change to how we handle your data, we'll update this page and change the effective date at the top. Continuing to use the app after a change means you accept the updated policy.

Contact us

tada-help@one-of-us.dev

This is the fastest way to reach us for anything on this page, including data requests, deletion requests, or general questions.