max / goingson
1 file changed,
+40 insertions,
-17 deletions
| @@ -1,48 +1,71 @@ | |||
| 1 | 1 | # GoingsOn — Privacy Policy | |
| 2 | 2 | ||
| 3 | - | *Last updated: June 11, 2026* | |
| 3 | + | *Last updated: June 14, 2026* | |
| 4 | 4 | ||
| 5 | - | GoingsOn is published by Make Creative, LLC. This policy explains what data the app handles. | |
| 5 | + | GoingsOn is published by Make Creative, LLC. This policy explains what data the app handles, where it goes, and what it does not do. | |
| 6 | 6 | ||
| 7 | 7 | ## Summary | |
| 8 | 8 | ||
| 9 | - | - GoingsOn is a local-first app. Your tasks, emails, calendar events, and contacts live in a SQLite database on your own device. | |
| 10 | - | - We don't run a server for GoingsOn. We don't see your data. | |
| 11 | - | - If you opt in to cloud sync via SyncKit, your encrypted data is replicated to a server you choose; in that case the operator's privacy policy applies. | |
| 9 | + | - GoingsOn is a local-first app. Your tasks, projects, notes, calendar events, contacts, and email all live in a database on your own device. | |
| 10 | + | - We do not run a server that receives your content. We do not see your data. | |
| 11 | + | - Email message contents never leave your device except to talk directly to your own mail provider. They are not included in cloud sync. | |
| 12 | + | - Cloud sync is optional and off by default. When enabled, your data is end-to-end encrypted before it leaves the device, so the sync server cannot read it. | |
| 12 | 13 | - No telemetry, analytics, ads, or tracking. | |
| 13 | 14 | ||
| 14 | 15 | ## What GoingsOn Stores on Your Device | |
| 15 | 16 | ||
| 16 | - | - Tasks, projects, notes, calendar events, contacts | |
| 17 | - | - Email account credentials — IMAP/SMTP app passwords — stored in the OS keychain, never written to plain disk | |
| 18 | - | - Cached email message bodies and metadata for accounts you've added | |
| 17 | + | Everything below is kept in app storage on your device (on Apple platforms, the app's container): | |
| 18 | + | ||
| 19 | + | - Tasks, projects, subtasks, milestones, annotations, and notes | |
| 20 | + | - Calendar events and time-tracking sessions | |
| 21 | + | - Contacts and their details (emails, phone numbers, social handles) | |
| 22 | + | - Cached email message bodies and metadata for accounts you add | |
| 23 | + | - File attachments | |
| 24 | + | - Local backups the app takes automatically | |
| 19 | 25 | - Plugin scripts you install | |
| 20 | 26 | ||
| 27 | + | Email account credentials — IMAP/SMTP app passwords and any OAuth tokens — are stored in the operating system's secure keychain (Apple Keychain, Windows Credential Manager, or the Linux Secret Service), never in the app database or in plain files. | |
| 28 | + | ||
| 21 | 29 | This data stays on your device unless you choose to sync it. | |
| 22 | 30 | ||
| 23 | 31 | ## What GoingsOn Sends Off Your Device | |
| 24 | 32 | ||
| 25 | - | GoingsOn connects directly to services *you* configure: | |
| 33 | + | GoingsOn connects only to services that you configure: | |
| 34 | + | ||
| 35 | + | - **Your email servers (IMAP/SMTP/JMAP).** When you add an account — Google, Microsoft, Fastmail, or any other host — the app connects straight to that provider to send and receive your mail. We do not proxy or relay these connections. | |
| 36 | + | - **OAuth providers.** When third-party OAuth sign-in is offered in a future update, authenticating an email account will exchange tokens directly with that provider under its own privacy policy. At launch, email accounts connect via IMAP/SMTP app passwords only. | |
| 37 | + | - **Update server.** The app checks for new versions. The check sends only your current app version, platform, and CPU architecture — no personal data. | |
| 38 | + | - **Cloud sync (optional, off by default).** If you turn it on, the app syncs to a sync server using end-to-end encrypted payloads. By default this is Make Creative's server at makenot.work. | |
| 39 | + | ||
| 40 | + | ## Cloud Sync Details | |
| 26 | 41 | ||
| 27 | - | - **Email servers** (IMAP/SMTP/JMAP) you add — Google, Microsoft, Fastmail, or any other host. We don't proxy these connections; they go straight from your device. | |
| 28 | - | - **OAuth providers** — when third-party OAuth sign-in is offered in a future update, authenticating an email account will exchange tokens with that provider under its own privacy policy. At launch, email accounts connect via IMAP/SMTP app passwords only. | |
| 29 | - | - **Update server** — the app periodically checks for new versions. The check transmits your current app version and platform; no personal data. | |
| 30 | - | - **SyncKit sync** (optional, off by default) — if you enable it, the app talks to a SyncKit-compatible server using end-to-end encrypted payloads. | |
| 42 | + | If you enable sync: | |
| 43 | + | ||
| 44 | + | - **What syncs:** tasks, projects, events, contacts, attachments, and related app data, as end-to-end encrypted change records and encrypted file blobs. | |
| 45 | + | - **What does not sync:** your email message contents, and your email or sync credentials. These stay on your device. | |
| 46 | + | - **Encryption:** data is encrypted on your device with a key stored in your OS keychain. That key is never sent to the server, so the server operator cannot read your synced data. | |
| 47 | + | - **Payments:** sync is a paid subscription. Payment is processed by Stripe through makenot.work; GoingsOn only checks whether your subscription is active. We never see or store your card details. | |
| 31 | 48 | ||
| 32 | 49 | ## What GoingsOn Does Not Do | |
| 33 | 50 | ||
| 34 | - | - No analytics SDK, no crash reporter beacons, no usage tracking | |
| 51 | + | - No analytics SDK, no crash-reporter beacons, no usage tracking | |
| 35 | 52 | - No advertising, no third-party trackers | |
| 36 | 53 | - No location collection | |
| 37 | - | - No data sold or shared with third parties | |
| 54 | + | - No selling or sharing of your data with third parties | |
| 55 | + | ||
| 56 | + | ## Your Data and Your Control | |
| 57 | + | ||
| 58 | + | - Your data is yours and lives on your device. You can export it at any time. | |
| 59 | + | - Deleting the app removes its local database and stored content from that device. | |
| 60 | + | - To stop syncing, turn sync off in Settings. To remove synced data from the server, contact us at info@makenot.work. | |
| 38 | 61 | ||
| 39 | 62 | ## Children | |
| 40 | 63 | ||
| 41 | - | GoingsOn is not directed at children under 13. | |
| 64 | + | GoingsOn is not directed at children under 13, and we do not knowingly collect data from them. | |
| 42 | 65 | ||
| 43 | 66 | ## Changes | |
| 44 | 67 | ||
| 45 | - | Material changes to this policy will be noted in the app's release notes. | |
| 68 | + | Material changes to this policy will be noted in the app's release notes and reflected in the date above. | |
| 46 | 69 | ||
| 47 | 70 | ## Contact | |
| 48 | 71 |