Privacy Policy

Jinnoro is a task manager for the web, the Mac and the iPhone. This policy explains what information the apps handle, where it is kept, and what happens when you choose to sign in with Google. In short: your tasks stay on your device, and if you sign in they are also kept in your own Google Drive. We do not run a database of user data, and we do not sell or share it.

Information the app handles

• Your tasks and organisation: projects, sections, tasks, subtasks, labels, due dates, priorities and descriptions that you type into the app.
• Your Google account details (only if you sign in): your name, email address and profile picture, used to show who is signed in.
• Usage data: which pages are opened, what kind of device and browser is used, your approximate location (country or city, worked out from your IP address), and a random visitor ID. Before you sign in this is anonymous. After you sign in with Google it is linked to your Google name and email address, so we can see who is using the app and help you if you contact us. It never includes your tasks. We also keep session recordings of how the app is used, in which all text is hidden (see “Cookies and tracking”).
• Settings: small preferences such as sidebar width, stored in your browser.

Where your data is stored

• In your browser. Your tasks are saved in your browser’s own storage (IndexedDB and local storage) on your device. Clearing your site data removes this copy.
• On your iPhone. In the iPhone app your tasks are saved in the app’s private storage on the device. Deleting the app removes them, unless you signed in and they are also in your Google Drive.
• In your Google Drive, only if you sign in. The app saves one file in a hidden app-data folder of your Drive that only this app can read, and a “Jinnoro” folder in My Drive containing a readable copy (Jinnoro.md and jinnoro-backup.json). This data goes directly between your browser and Google. It does not pass through, and is not stored on, any server we operate.
• Hosting. The website is delivered by Vercel. Like any web host, it may keep standard technical logs (such as IP address and requests) for security and reliability. Your task data is not part of these logs.

Google sign-in and the permissions we ask for

Signing in is optional. If you do, the app asks Google for these permissions:

• Profile and email (openid, email, profile): to show your name, email and picture.
• Google Drive app data (drive.appdata): to read and write the hidden file that keeps your tasks in sync between your devices.
• Google Drive files created by this app (drive.file): to create and update the “Jinnoro” folder with readable copies. This permission only lets the app see files it created itself, never your other Drive files.

Jinnoro’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide the features described above. We do not transfer it to others, use it for advertising, or allow humans to read it.

Sharing

We do not sell your data and do not share it with third parties. The only parties involved are Google (when you sign in), Vercel (the web host), PostHog (usage data and session recordings) and Tawk.to (the chat on the home page), as described in this policy. PostHog and Tawk.to act as service providers that process data for us and may not use it for their own purposes.

Cookies and tracking

The app does not use advertising trackers. It uses your browser’s storage to save your tasks and preferences, and, while you are signed in, your browser keeps a short-lived Google access token (valid for about an hour) in its storage. Google’s own sign-in pages may set cookies when you sign in.

Usage analytics and session recordings. To understand how Jinnoro is used and to fix problems, we use PostHog. It records page views and a few counted events (such as that a task was created, never what it says), and session recordings that replay where people click and scroll. Inside the app, every word on screen and everything typed is replaced by asterisks before it leaves your browser, so task names, descriptions, project and label names, search text and your email are never recorded. The home page, this policy and the terms are shown as they are. Visitors are anonymous until they sign in. When you sign in with Google, we give PostHog your Google name and email address and link your usage to them, to understand how the app is used, to contact you about the app or your account, and to give you support. We do not use them for advertising, and we do not give your tasks to PostHog. To have your PostHog profile deleted, contact us (see below); logging out also makes this browser anonymous again. PostHog keeps a random ID in your browser’s storage and a cookie to recognise a returning browser. We honour your browser’s Do Not Track setting, and you can switch this off at any time in Settings → Privacy (or by blocking PostHog in your browser). The Mac app works the same way.

The iPhone app. The iPhone app has no analytics, no session recordings and no advertising or tracking of any kind. When you sign in with Google it uses the system’s secure sign-in sheet and keeps Google’s sign-in permission in the iPhone’s Keychain. Your tasks go directly between the app and your Google Drive. Settings → Remove account deletes the synced file and the Jinnoro folder from your Drive and withdraws the permission.

Staying signed in. When you sign in, Jinnoro’s small server receives Google’s sign-in permission for the app (a refresh token) and keeps it in an encrypted cookie that only this site can read, for up to 180 days. It uses the permission to get new short-lived Google access tokens for your browser, so you do not have to sign in again every hour. Your tasks are never sent to this server: they go directly between your browser and Google Drive. Logging out deletes the cookie on this browser. Remove account also withdraws Jinnoro’s permission at Google, which signs you out on every device. The Mac app works the same way: it shows this website in its own window, signs in through your normal browser, and keeps the same encrypted cookie.

Live chat. The home page (not the app itself) includes a chat widget from Tawk.to. If you open the chat, Tawk.to receives what you type and the details you give, along with technical information such as your IP address and browser, and it may set cookies to keep the conversation going. It is never given your tasks or Google data, and the widget is not loaded inside the app.

Your choices and control

• Export: Settings → Export backup downloads all your data.
• Log out: stops syncing and keeps the data on this device.
• Remove account: Settings → Remove account deletes the synced file and the Jinnoro folder from your Google Drive and signs you out.
• Delete everything: Settings → Delete all data removes your data from this browser.
• Revoke access: you can remove the app’s access at any time in your Google Account permissions.

Children

The app is not directed to children under 13 and we do not knowingly collect their information.

Changes to this policy

If we change this policy, we will update the date at the top of this page. Significant changes to how Google data is used will be described here before they take effect.

Contact

Questions about this policy? Send a message from the support page. What you write there (your email, optional name and message) is sent to us by email, used only to answer you, and kept in our mailbox for as long as it takes to help.