Privacy

Plain language, no surprises.

Effective date: 18 September 2026.

Just One Done ("the app") is run by Professional Crastination Co. ("we," "us"). This policy explains what we collect, why, and what you can do about it. We've tried to keep it short and readable.

The short version: We collect what we need to run the app. We don't sell your data. We don't use your tasks to train AI models. AI features are optional, and you choose which kind of AI sees your tasks, if any.

1. What we collect

Account info. Your email address, name (if you give one), and login details. If you sign in with a third-party account such as Google, we receive basic profile info from them (usually your name and email). We never see your password for that account. If you create a password with us, we store it in hashed form only.

Your tasks and content. The tasks, projects, notes, and settings you create. This is stored on our servers so the app works across your devices.

Usage and device info. How you use the app (features used, pages visited, errors), plus basic technical details like browser type, device type, operating system, and IP address.

Payment info. If you buy a paid plan, our payment processor (Stripe) handles your card details. We never see or store your full card number. We receive limited info such as your plan, payment status, and the last four digits of your card.

2. A note on sensitive information

Just One Done is built for people with ADHD, but we don't ask whether you have a diagnosis and we don't collect health records. Your tasks may still contain personal or sensitive details because you wrote them. We treat all task content as private, and we don't read it except when needed to fix a problem you've reported, to keep the service secure, or when the law requires it.

3. How we use your information

  • To run the app and sync your tasks
  • To manage your account and process payments
  • To provide AI features, if you turn them on
  • To fix bugs, prevent abuse, and improve the app
  • To send you service messages (receipts, security notices, major changes)
  • To send product updates, if you opt in. You can unsubscribe at any time.

We do not sell your personal information. We do not share it for advertising. We do not use your task content to train AI models.

4. AI features: your choice

AI features are optional. You pick one of three modes in settings, and you can change it at any time:

AI off. Your task content is never sent to any AI model.

Private AI. Your task content is processed by an open-weight model running on servers we control. It is not sent to an outside AI company.

Commercial AI. The task content needed for the feature you're using is sent to a third-party AI provider (currently Anthropic and/or OpenAI) through their API. These providers process it to generate a response. Under their API terms, they do not use this data to train their models by default, though they may keep it for a limited time for safety and abuse monitoring. Their own privacy policies apply to that processing.

We only send what the feature needs. We don't send your payment details or login credentials to any AI provider.

5. Who we share data with

We share data only with service providers that help us run the app:

  • Stripe for payments
  • Anthropic and OpenAI for AI features, only if you choose Commercial AI
  • An analytics provider for usage analytics
  • Hostinger for servers and infrastructure, with Cloudflare in front of them for network security
  • An email provider for sending account and service emails

We don't send your task content to our analytics provider.

We may also disclose information if the law requires it, or to protect the rights and safety of our users or ourselves. If the business is sold or merged, your information may transfer to the new owner, and we'll tell you before that happens.

6. Cookies and similar technologies

We use cookies and local storage to keep you signed in and remember your settings. We also use them for analytics. We don't use advertising cookies. You can block cookies in your browser, but the app may not work properly without the essential ones.

7. How long we keep your data

We keep your data for as long as your account is active. If you delete your account, we delete your account info and task content within 30 days, apart from backups (which clear within 90 days) and records we're legally required to keep, such as payment records.

8. Your rights

Wherever you live, you can:

  • See and export your data
  • Correct your account info
  • Delete your account and data
  • Turn AI features off or switch AI modes
  • Opt out of marketing emails

Depending on where you live, you may have extra legal rights:

EU, UK, and similar regions (GDPR). You have the right to access, correct, delete, restrict, or object to our processing of your data, and the right to data portability. Our legal bases for processing are: performing our contract with you (running the app), your consent (AI features, marketing emails, non-essential analytics), and our legitimate interests (security and improving the app). You can withdraw consent at any time, and you can complain to your local data protection authority.

California and other US states. You have the right to know what we collect, to delete it, to correct it, and to not be discriminated against for using these rights. We don't sell or share personal information as those terms are defined under California law.

To use any of these rights, email us at [email protected]. We'll respond within 30 days.

9. Security

We use encryption in transit (HTTPS), hashed passwords, access controls, and regular backups. No system is perfectly secure. If a breach affects your data, we'll notify you as the law requires.

10. International users

Our servers are located in the United States. If you use the app from another country, your data will be transferred to and processed there. Where required, we use legally recognized safeguards for these transfers.

11. Children

Just One Done is not intended for children under 13 (or under 16 in the EU and UK). We don't knowingly collect data from them. If you believe a child has given us personal information, contact us and we'll delete it.

12. Changes to this policy

If we make significant changes, we'll notify you by email or in the app before they take effect. The effective date at the top shows when the policy was last updated.

13. Contact

Professional Crastination Co.
Address available on request
[email protected]