Privacy Policy

• Account data. The email address you sign up with, your sign-in method, and the authentication records that go with them. Authentication is operated for us by Supabase. We never see your password.
• Product content. The things you create in Tewdoo: tasks and their details, projects, plans and schedule blocks, focus sessions, preferences (time zone, working hours, quiet hours, assistant persona), the entries you save to your Memory Vault, and your conversations with the assistant. This content is stored persistently and stays until you delete it or your account.
• Voice. When you speak to the assistant, your recording is sent to our speech provider to be turned into text and is then dropped. Tewdoo does not retain your recordings. The resulting text is treated like any other message you send.
• Calendar data. If you connect a calendar: the OAuth tokens Google issues for that account, and the calendar entries we read so we can plan around them. Events are written back only to the calendars you explicitly enabled.
• Messaging identities. If you link Telegram or WhatsApp: the chat identifier for that conversation, an optional label for it, and the content of the messages you send through it, which we process in order to run the hub.
• Billing data. If you subscribe: a Stripe customer and subscription reference and the state of your subscription (tier, period, status). Payment is handled by Stripe — we never receive or store your card number.
• Technical data. IP address, timestamps and basic request metadata, processed for security, abuse prevention and diagnosing faults.
• Communications. If you write to us, your message and the address it came from.

Cookies. Tewdoo sets only what it needs to work: your session and authentication cookies, and a cookie remembering the language you chose. There are no analytics cookies, no advertising cookies and no cross-site tracking on Tewdoo.

• To provide the Service — store your content, build and rebuild plans, run timers, answer you through the assistant, and sync with the services you connected.
• To keep the Service secure — detect and prevent abuse, fraud and unauthorised access, and investigate incidents.
• To handle billing — create and manage subscriptions through Stripe.
• To support you — answer your messages and fix what is broken.
• To meet legal obligations, and to establish, exercise or defend legal claims.
• To send service messages — changes to these documents, security notices, billing notices. We do not send marketing email unless you ask us to.

We do not profile you for advertising, and we do not use your content to decide anything about you beyond running the product you asked for.

The assistant works by sending the relevant part of your content — your message, the conversation so far, and the tasks, plan or preferences needed to answer it — to our AI provider, Anthropic, which returns the response. Voice is sent to ElevenLabs to be transcribed, and text is sent there to be spoken aloud.

AI output can be wrong — see section 2 of our Terms of Service. Anything that touches another service is put to you for approval first. We do not use the assistant to make automated decisions producing legal or similarly significant effects about you.

Where the GDPR or its UK and Swiss equivalents apply, we rely on the following legal bases:

• Performance of a contract (Art. 6(1)(b) GDPR) — providing the Service you asked for: your account, your content, planning, the assistant, the connected services you enabled, and billing.
• Legitimate interests (Art. 6(1)(f)) — security, abuse prevention, keeping the Service working and improving it, and defending legal claims. We weigh these against your rights and freedoms.
• Consent (Art. 6(1)(a)) — where you connect an optional third-party account, use the voice features, or where we otherwise ask for it. You may withdraw consent at any time; withdrawal does not affect processing already carried out.
• Legal obligation (Art. 6(1)(c)) — accounting and tax duties, and lawful requests from authorities.

We share your data only with the providers that make Tewdoo work. Each acts as our processor under contract, and only for the purpose named:

• Supabase — database and authentication. Your account and all product content live here.
• Anthropic — the AI assistant. Receives the content needed to answer your request.
• Voyage AI — search indexing for your knowledge base. Receives the text of documents you upload there, solely to compute the search index; nothing is shared between users.
• ElevenLabs — voice. Receives your recordings for transcription, and the text to be spoken.
• Stripe — payments and subscription management. Receives your payment details directly from you.
• Google — calendar access, and sign-in where you use it. Receives and returns data for the account you connected. Tewdoo’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements: Google user data is used only to provide the calendar features you see, is never used for advertising, and is never sold.
• Telegram — where you link a Telegram chat. Messages in that chat pass through Telegram’s platform.
• Meta Platforms (WhatsApp) — where you link a WhatsApp number. Messages pass through the WhatsApp Business Platform.

We may also disclose personal data:

• to authorities or other parties where we are legally required to, or where it is necessary to establish, exercise or defend legal claims — and we tell you when we are permitted to;
• to professional advisers, under a duty of confidentiality;
• to an acquirer in a merger, acquisition, financing or sale of assets — with notice to you, and the data stays subject to a policy no less protective than this one.

We use no advertising networks and no analytics providers.

• Product content stays until you delete it or your account. It is not deleted on a schedule — a planning product that quietly forgot would be worse than useless.
• Assistant conversations stay as part of your history. Starting a new conversation in the app does not delete the previous one; it opens a fresh one and leaves the old one in place. To have older conversations removed, ask us (section 9).
• Voice recordings are not retained by us at all. Our speech provider processes them under its own terms for the time it needs to return a result.
• Calendar tokens are kept while the connection is live and deleted when you disconnect.
• Messaging links are kept while the link is live and deleted when you unlink.
• Billing records are kept for as long as tax and accounting law requires — typically several years — even after an account is deleted.
• Technical logs are kept for a short period, for security and diagnostics.

When your account is deleted, the records attached to it are deleted with it by database cascade: your profile, workspace membership, tasks and projects, plans and schedule blocks, preferences, focus sessions, memory entries, conversations and their messages, calendar connections and messaging links.

To be plain about how deletion works today: individual items — tasks, memory entries, connected accounts, messaging links — can be deleted by you in the app. Deleting the whole account is done by writing to hello@tewdoo.com with the subject “Privacy request”; there is not yet a self-serve delete button in the app, and we would rather say so than imply one. Backups roll off on their own cycle, so a copy of deleted data can persist in backup for a limited period afterwards.

We take reasonable technical and organisational measures: encryption in transit, access controls, row-level security in the database, a strict separation between what a browser may reach and what only our server may reach, and secrets kept out of client code. Access to production data is limited to those who need it.

No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects your personal data and the law requires notice, we will notify you and the competent supervisory authority within the time the law allows.

Depending on where you live, you may have the right to:

• access the personal data we hold about you, and receive a copy;
• have inaccurate data corrected;
• have your data deleted;
• object to, or ask us to restrict, certain processing;
• receive your data in a portable format;
• withdraw consent you have given, at any time.

Much of this you can do directly in the app. For anything else, email hello@tewdoo.com with the subject “Privacy request”. We answer within one month, or tell you why we need longer. Exercising these rights is free and we will not treat you any differently for it. We may need to verify your identity before we act.

If you are in the EEA, the United Kingdom or Switzerland, you also have the right to complain to your data protection supervisory authority.

If you live in California, or another US state with a comprehensive privacy law — among them Colorado, Connecticut, Virginia, Utah, Oregon and Texas — you have the right to know what personal information we collect and why, to access and obtain a copy of it, to correct it, to delete it, to opt out of its sale, of sharing for cross-context behavioural advertising and of targeted advertising (we do none of those), and not to be discriminated against for exercising any of these rights.

In the categories those laws use, we collect: identifiers (email address, account and chat identifiers, IP address); customer records; commercial information (subscription state); internet or network activity (technical logs); audio information (voice, processed for transcription and not retained); and the content you create. We collect them from you, for the business purposes in section 2, and disclose them to the processors in section 5. We do not sell or share them, and we do not knowingly collect the personal information of minors.

Use the same address and subject line as in section 9. An authorised agent may act for you; we will ask for proof of authority. If we decline a request we will say why, and you may appeal by replying to that answer. If an appeal is refused, you may contact your state Attorney General.

Tewdoo is for adults: our Terms require you to be at least 18 years old, and we do not knowingly collect personal data from children. If you believe a child under 13 — or under 16 in the EEA and the UK, where that is the applicable age of digital consent — has provided us with personal data, write to hello@tewdoo.com and we will delete it.

We operate from the United States, and our providers process data in the United States and in other countries. If you are in the EEA, the United Kingdom or Switzerland, your personal data will be transferred outside your country.

For those transfers we rely on the European Commission’s Standard Contractual Clauses, together with the UK International Data Transfer Addendum and the Swiss equivalents where applicable, in our contracts with providers, plus the supplementary measures those clauses require. You can ask us for details at hello@tewdoo.com.

Tewdoo may link to sites and services we do not run. This policy does not cover them — read theirs.

We may update this policy. The current version is always at tewdoo.com/privacy, with the date it was last updated at the top. If a change materially affects how we handle your personal data, we will give you notice — by email or in the app — before it takes effect.

For privacy matters, write to us with the subject “Privacy request”: