Privacy Policy

What we store

• Your email address, used to identify your account and to sign in.
• A password hash (argon2id) — we never store your password in plain text.
• A hash of your MCP token, if you've generated one — the token itself is shown to you once and not stored in reversible form.
• The tasks, projects, comments, and activity history you (or an agent acting on your behalf) create.
• Session cookies used to keep you signed in.

What we don't do

• The Done apps — iOS, Android, and the signed-in web app — run no third-party analytics or advertising trackers at all. This marketing site does; see Analytics on this website below.
• We don't sell your data, or use your task content to train models.
• We don't share your data with other Done accounts — each account's tasks are isolated at the database layer.

Where it's stored

Your account data — tasks, projects, comments, activity — lives in a single Cloudflare D1 (SQLite) database, accessed only by Done's own Worker. There is no second copy of it in an analytics store or a third-party database.

Analytics on this website

These marketing pages (trydone.app and its blog, docs, and pricing pages) load Google Tag Manager and Google Analytics so we can see which pages people visit. That measures anonymous site traffic only. It is not loaded in the iOS or Android apps, and it is not loaded behind the login — so it never sees a task, a project, a comment, or anything else in your account.

AI agents and MCP

Done contains no AI assistant of its own, and Done never sends your data to any AI provider. The AI in Done is an agent you already use — Claude, ChatGPT, Cursor, or another MCP client — which you connect to your own account.

If you generate an MCP token and connect an agent, that agent can read and write your account's tasks, projects, comments, and tags using the same API the web app uses — nothing more. It cannot reach another account's data, and it never receives your password or your email password.

Because that agent runs on its provider's infrastructure, whatever it reads from your account is disclosed to that provider under your agreement with them, not ours. That connection only exists after you deliberately create a token and configure the agent with it, and it ends the moment you revoke the token. We don't log the content of your conversations with your own agent tooling; we only see the task data it creates or edits through the API, same as anything you type yourself.

Your controls

• Revoke your MCP token at any time from the Account panel; agents using the old token immediately lose access.
• Delete individual tasks, projects, or your entire account on request.
• Contact us to request an export or deletion of your data.

Changes

Done is in early access and this policy may change as the product does. We'll update the date at the top of this page when it does.