This privacy policy describes how TickOff ("we", "us") handles your information.

1. Information we collect

Account info: email address, display name, and (if you sign in with Google) the public profile name and avatar URL Google provides.
Content: the to-do lists, group names, invite codes, notes, and metadata you create in TickOff.
Licences: what's on your Licences list, added by you or by someone you share it with: the name of each licence, ticket or certificate, the date it runs out, when to remind you, any notes (such as a card number) and photos of the card. We also keep who you've shared your list with, and who has asked to see it. Photos of your cards are kept in a private store: they can only be opened by you and the people you share your list with, through links that stop working after an hour.
Warranties: what's on your Warranties list, added by you or by someone you share it with: the name of each thing, where and when you bought it, the date its warranty ends, when to remind you, any notes (such as a model or serial number) and photos or PDFs of the receipt. We also keep who you've shared your list with, and who has asked to see it. Receipts are kept in their own private store, apart from licence photos: they can only be opened by you and the people you share your Warranties list with, through links that stop working after an hour. A machine's warranty in Equipment (when it ends, and at how many hours or kilometres) is part of that machine's record, which the group can see.
Push subscriptions: the encrypted push endpoint your browser provides so we can deliver notifications.
Calendar tokens: we generate a secret token for each person's calendar link in each group (the iCal feed). Anyone with the link can read that group's tasks. It stops working if you leave the group, and you can reset it in the app.
Subscription / billing data: if you upgrade to TickOff Pro, we store a customer ID issued by Stripe (our payment processor), your subscription status, plan (monthly or yearly), and the date your current billing period ends. We do not store your card number, CVV, or expiry — those go directly to Stripe.
Free-trial record: if you start the free Pro trial, we record your user ID, your email address and when the trial started and ends. This record is kept even if you later delete your account, and is used only to prevent repeat free trials.
Diagnostic data: if a feature fails, we may log the error (and a sanitised request payload) to fix it. If the app itself hits an error, an error report goes to Sentry (see below): what went wrong and where in the app, your browser and device type, the app's last steps before the error (such as the pages opened, the kinds of buttons tapped, and requests that failed), and your user ID. For some visits Sentry also gets how long pages took to load. Reports don't include your email address or a recording of your screen, and sign-in links and invite codes are taken out of web addresses before they're sent.
Usage statistics: we use Vercel Web Analytics to count page views and see which pages, devices and countries visitors come from. Vercel says it counts visitors with a short-lived anonymous hash (discarded after 24 hours) rather than third-party cookies, and collects nothing that tracks you across other websites.

2. How we use it

We use your information solely to operate TickOff: showing you your lists, syncing them between devices and group members, sending you push notifications you've opted in to, processing payments for paid subscriptions, and improving the service. We do not sell your data and we do not run advertising.

3. Third parties

Supabase hosts the database, authentication, and edge functions.
Google provides sign-in (if you choose) and the Gemini API used to parse natural-language tasks. Text you submit to the AI quick-add feature is sent to Google's API; we don't retain it beyond the parsed result.
Vercel hosts the application.
Sentry receives the error reports described above, so we can find and fix problems. See Sentry's privacy policy.
Stripe processes all subscription payments. When you upgrade to Pro, your card details are entered on a Stripe-hosted page (not on TickOff). Stripe stores your payment method and processes recurring charges. See Stripe's privacy policy.
Apple / Google / Mozilla deliver push notifications to your device.

4. Data sharing within a group

To-dos, your display name, and your completion activity are visible to all members of any group you join. Other group members cannot see your subscription status, billing details, or payment information. Don't put anything in a group you wouldn't share with that group's members.

Your Licences list is not shared with your groups. Nobody can see it unless you share it with them yourself, or say yes when they ask, and you can only share it with someone in one of your groups. The people you share it with can see it and its photos, add to it and change it, and get its reminders. You can stop sharing at any time, and sharing stops by itself when you're no longer in a group together.

Your Warranties list works the same way, and is shared on its own: someone who can see your licences can't see your warranties, and someone who can see your warranties can't see your licences, unless you share both with them.

5. Your rights

You can:

Edit your display name in the app
Leave any group at any time
Cancel your paid subscription from the "Manage Pro subscription" link in the profile menu
Delete your account with the "Delete my account" button in your profile. This removes your profile, group memberships and push subscriptions (the free-trial record above is the one exception), and cancels any paid subscription straight away, without a refund for the rest of the period. Groups where you're the only member are deleted, with their to-dos. To-dos and equipment records you added to groups you share with others stay there for them, without your name on them, and you're taken off any to-dos you were assigned. Your Licences and Warranties lists and their photos are deleted, and so is any sharing of them. A group you own passes to whoever has been in it longest.
Request a copy of your data by emailing hello@tickoff.app

6. Children

TickOff is not directed to children under 13. We do not knowingly collect their data.

7. Changes

We may update this policy. Material changes will be posted here with a new "Last updated" date.

8. Contact

TickOff is operated by Bonita van der Westhuizen (sole trader), Brisbane, Australia.

For privacy questions, data requests, or account deletion assistance, email hello@tickoff.app. We aim to respond within 5 business days.

Privacy Policy