Privacy Policy

Last updated: January 12, 2026

Foggy ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our task management application and related services (collectively, the "Service").

By using Foggy, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Information You Provide

• Account Information: When you create an account, we collect your email address, username, and password (stored securely using industry-standard hashing).
• Task Data: Tasks, projects, notes, and other content you create within the app.
• Profile Settings: Your preferences such as theme, timer settings, and default views.
• Payment Information: If you subscribe to Foggy+, payment processing is handled by Stripe. We do not store your full credit card number. We receive only the last 4 digits, card type, and billing address for receipt purposes.

Information Collected Automatically

• Device Information: Device type, operating system, and browser type.
• Usage Data: Features used, time spent in app, and interaction patterns (anonymized and aggregated).
• Log Data: IP address, access times, and pages viewed for security and troubleshooting purposes.

2. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Sync your data across devices
• Process payments and manage subscriptions
• Send important service updates and security alerts
• Respond to your support requests
• Analyze usage patterns to improve the app (using anonymized data)
• Prevent fraud and abuse

3. Data Storage and Security

Your data is stored securely using Supabase, a trusted database platform built on PostgreSQL. We implement industry-standard security measures including:

• Encryption in transit (TLS/SSL) and at rest
• Row-level security ensuring you can only access your own data
• Secure authentication with JWT tokens
• Regular security audits and updates

4. Third-Party Services

We use the following third-party services that may collect information:

• Supabase: Database and authentication (Privacy Policy)
• Stripe: Payment processing (Privacy Policy)

We do not sell your personal information to third parties.

5. Data Retention

We retain your data for as long as your account is active. If you delete your account:

• Your personal data will be deleted within 30 days
• Anonymized analytics data may be retained
• We may retain certain information as required by law

6. Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Export: Download your task data in a portable format
• Opt-out: Unsubscribe from marketing emails

To exercise these rights, contact us at legal@foggytask.com.

7. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising your privacy rights

8. European Privacy Rights (GDPR)

If you are in the European Economic Area, you have rights under GDPR including:

• Right to access, rectify, or erase your data
• Right to restrict or object to processing
• Right to data portability
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

Our legal basis for processing is typically your consent or the necessity to perform our contract with you.

9. Children's Privacy

Foggy is not intended for users under 16 years of age. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us at legal@foggytask.com.

10. Cookies

We use essential cookies for:

• Authentication and session management
• Security (CSRF protection)
• Remembering your preferences

We do not use third-party advertising or tracking cookies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting the new policy on this page
• Updating the "Last updated" date
• Sending an email notification for material changes

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Email: legal@foggytask.com
Website: https://foggytask.com