Privacy

Goathill s.r.o., IČO 05212197, Czech Republic is responsible for your data (in data-protection law: the controller). For anything about your data, including seeing it, correcting it or deleting it, write to info@tydely.app. We answer within one month.

Your account: your email and a password (stored only as a hash by our login provider), or, if you use Google sign-in, your Google name, email address and account id. We need this to let you log in. Basis: the service you asked for.

Your age: when you start, we ask for your date of birth to check that you are old enough to use Tydely. We store only your year of birth, never the month or day. Basis: a legal duty to protect young people.

What you enter: classes, tasks, homework, projects, notes, research, exams and settings. It is saved first in your own browser, so the app works offline. It is also saved in our database, both for accounts and for guest sessions (using Tydely without creating an account), so it follows you to another device and can be turned into an account later. We use it only to run Tydely for you. Basis: the service you asked for.

Study groups (only if you join one): your display name, the title and date of your next deadline and your streak are shown to the other members of that group. Anything you put there is not private. Leave the group and it is removed.

Google Calendar (only if you connect it): if you choose to connect Google Calendar on the Calendar page, Tydely asks Google for two permissions. The first lets Tydely create and manage its own separate calendar named Tydely, where your planned tasks are shown. The second lets Tydely read your existing Google Calendar events so the planner does not schedule tasks over your classes and appointments. We store a refresh token from Google in our database so the connection keeps working; it is protected by row-level security and visible only to your account. We use your calendar events only to show them in Tydely and to plan around them. We do not sell them, use them for advertising, or share them with anyone. You can disconnect at any time with the Disconnect button on the Calendar page; this deletes the stored token and removes the imported events from Tydely. Deleting your account also deletes the token. Tydely's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Basis: your consent.

Reminders (only if you turn them on): your browser's push address, its keys and your time zone, so we can send the daily reminder. Your browser maker's push service (Google, Apple or Mozilla) delivers it. Basis: your consent; turn it off in Settings and it stops.

Technical data: our hosting provider keeps normal server logs (your IP address and which page was requested). Some actions (deleting an account, starting a payment, turning on reminders) briefly store your IP address to stop abuse. If the app crashes, a short technical error report goes to our error service. It contains the page, browser and error, and we have switched off sending your account details and form contents with it. Basis: keeping the service safe and working.

These companies work for us and may use your data only to provide their service to us. We have, or are putting in place, the written data-processing terms the law requires with each of them.

Supabase: login and database. Our project runs in the EU (Ireland). Supabase is a US company, so its staff in the USA could in rare support cases reach data held in Ireland; this is covered by the EU standard contractual clauses in its data-processing terms.

Vercel: runs the website and keeps request logs. Vercel is a US company and some processing and logs can be in the USA. Transfers rely on the EU-US Data Privacy Framework and standard contractual clauses.

Sentry: error reports. Stored in the EU (Germany). Sentry is a US company; the same safeguards apply.

Google, only if you choose "Sign in with Google": Google handles your Google account under its own privacy policy and tells us your name, email and account id. Google may process data worldwide. If you do not want this, sign up with email and password instead.

Stripe: only if Tydely Pro is on sale and you buy it. See Payments below.

If you want a copy of the safeguards for a transfer outside the EU, write to info@tydely.app. Nobody else receives what you enter, and we do not sell data.

Only you, with two exceptions: members of a study group you joined see the small summary described above, and the people who run Tydely can technically read the database. We do that only when needed to keep the service working or to help you when you ask. Every row in the database is locked to your account with row-level security. There is no advertising or analytics tracking inside the app.

Your account and what you entered stay until you delete your account (Settings, Danger zone, Delete my account), which removes them immediately and permanently. Copies in your own browser stay until you clear the browser. Error reports and server logs are kept by those services for a limited time (normally up to 90 days). Payment and invoice records must be kept for 10 years under Czech accounting law.

You can ask to see your data, correct it, delete it, limit its use, receive it in a file, and object to processing we do for our own legitimate interest. Where we rely on your consent you can withdraw it at any time. Most of this you can do yourself in Settings, including downloading a copy of your data in one file (Download my data); for the rest write to info@tydely.app. You can also complain to the Czech data protection authority, Úřad pro ochranu osobních údajů (www.uoou.gov.cz).

Tydely is for people aged 15 and over. We ask for your date of birth when you sign up and keep only your year of birth. If we find that someone below the age limit has an account, we delete it. A parent or guardian can write to info@tydely.app at any time to ask what we hold or to have an account deleted.

Tydely Pro is not on sale yet. When it is, payment is handled by Stripe. We never see or store your card number; we keep only your plan, subscription status and a customer reference. Your tasks, classes and homework are never sent to Stripe. Deleting your account does not cancel a subscription, so cancel it first under Manage billing.

Tydely shows no ads and uses no advertising cookies. We use only browser storage the app needs to work, such as keeping you logged in and saving your data offline. If ads are added later, this page will say so first and you will get a choice before any ad cookie is set.

Connections use HTTPS, passwords are hashed, and database rows are locked to their owner. If something goes wrong with your data we tell the authority within 72 hours where the law requires it, and tell you without delay if the risk to you is high. When this page changes in a way that matters, we change the date at the top.