ToADHD← Back to home

Legal

Privacy Policy

Last updated: 30 May 2026

1. Who we are

ToADHD is a productivity tool built to help people with ADHD (and anyone who struggles to start or finish tasks) get things done one step at a time. We are operated as an independent project. If you have any questions about this policy, email us at hello@toadhd.me.

2. What data we collect

Account data

When you sign up, we store your email address via Supabase Auth. If you use Google Sign-In, we receive your email and display name from Google. We never see your Google password.

Task data

The task descriptions you type are stored in our database so we can show you your history and continue sessions. They are also sent to the Google Gemini API to generate step breakdowns — see §4.

Usage data

We record which steps you complete and when, how many sessions you run per week, and your subscription plan. This drives features like streaks and the free-tier limit. We do not track your mouse, record your screen, or monitor anything outside the ToADHD tab.

Payment data

Payments are processed by Lemon Squeezy, who acts as the Merchant of Record. We never see or store your card number. We receive a customer ID and subscription status from Lemon Squeezy via webhook.

3. How we use your data

  • To run the app and show you your tasks and history.
  • To enforce the free-tier session limit and unlock Pro features.
  • To send you transactional emails (e.g. email confirmation). We do not send marketing email unless you opt in.
  • To debug errors and improve the product. We may look at anonymised usage patterns — never your specific task text.

4. Third-party services

Database & authentication
Email, tasks, step history, profile
AI task breakdown
Task text you submit
Payments & subscriptions
Email, payment info (handled by LS)
Hosting & CDN
IP address, request logs (standard server logs)

We do not use any advertising networks, analytics SDKs (e.g. Google Analytics, Mixpanel), or social tracking pixels.

5. We do not sell your data

We do not sell, rent, or trade your personal data to any third party. Full stop.

6. Data retention

Your data is kept for as long as your account is active. If you delete your account, we delete your profile, tasks, and steps within 30 days. Supabase Auth records are removed immediately. Lemon Squeezy retains billing records as required by law.

7. Your rights & how to delete your account

You can request access to, correction of, or deletion of your data at any time. To delete your account:

  1. Email us at hello@toadhd.me with the subject "Delete my account".
  2. We will confirm deletion within 7 days.

If you are in the EU or UK, you also have the right to lodge a complaint with your local data protection authority.

8. Cookies

We use a single session cookie set by Supabase Auth to keep you logged in. We do not use advertising or tracking cookies.

9. Children

ToADHD is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it promptly.

10. Changes to this policy

We may update this policy as the product evolves. We will notify you by email for any material changes. The "Last updated" date at the top always reflects the current version.