Privacy policy

Who is responsible

Sinergia Barcelona, which builds and runs tokidu. For any question about your data, write to [email protected].

What data we keep

• Your email address and, if you give it, your name.
• Your password, always encrypted: we never store it or see it in plain text.
• The projects, sprints, tasks, dependencies, links and notes you create in the app.
• The time you track or log, the hourly rates you set and what you mark as billed. For the latter we keep a copy (tasks, notes and hours) even if you delete the task, until you undo it or delete your account.
• Your time zone, your language and whether you've confirmed your email, to send you notifications at your time, in your language and only to you.
• Minimal technical data: the session cookie and your IP address, the latter only to limit abusive sign-in attempts.

The public demo at /demo creates no account and sends nothing to our servers: its data lives only in your browser.

What we use it for

Only to provide the service: keep your session, save your work, let you know when a task unlocks and, if you've turned it on, about what's due or won't make it in time, on your phone or by email, and manage your plan. We don't advertise, we don't build profiles and we don't sell data.

Payments

Paid plans are charged through Cifrago, Sinergia Barcelona's payment gateway. Your card details are handled by the gateway; tokidu never receives or stores them. We keep only what's needed to know which plan you have and to issue the invoices the law requires.

Who we share it with

Nobody, except the providers essential to run the service (hosting, database, email delivery and payment gateway), who process the data only on our behalf, and the authorities when a legal obligation requires it.

If you create a calendar link or a token for another app, whoever uses it can read what that link or that token shows. You can remove them whenever you want from your account.

For how long

As long as you have an account. If you delete it, we erase your data within 30 days at most, except billing records the law requires us to keep. The list of notifications we've sent you, which is only there so we don't repeat them, is deleted after 90 days.

Your rights

You can access your data, correct it, erase it, object to its processing, restrict it or request its portability by writing to [email protected]. You can also lodge a complaint with the Spanish Data Protection Agency if you believe we haven't handled your request.

Cookies

We only use the session cookie, needed to keep you signed in, a cookie with your chosen language, and the browser's local storage for preferences such as the theme or the palette. There are no third-party or tracking cookies.