Privacy

Local first, explicit when connected.

This engineering draft describes the current commercial architecture. It is not the final Privacy Policy and must be reviewed against the deployed product and applicable law.

Data Diligence may process

  • Account email, verification state, device labels, and session metadata.
  • Subscription status and provider identifiers—not complete card details.
  • Encrypted sync envelopes and conflict metadata; encryption keys remain client-held.
  • Allowlisted operational events without request bodies, passwords, tokens, or raw provider errors.
  • Feedback-board submissions only when you choose to publish an idea; the public projection contains plaintext title and body.

Local and optional data

Tasks, notes, journals, health entries, focus history, and other lifestyle data remain local unless a user explicitly enables a documented encrypted service. The manual backup flow uploads ciphertext only.

Public feedback board

Feedback-board submissions are a deliberate public exception to the local-first boundary. Published titles and descriptions are plaintext and visible to anyone; do not include names, contact details, client, task, productivity, secret, or diagnostic data. Diligence applies bounded sanitization for tags, URLs, emails, and credentials, but it cannot identify every name, phone number, or address. Use private supportfor sensitive diagnostics. Submissions are retained for up to 365 days, and a verified account owner can withdraw their submission; withdrawal removes it from the public board while the archived record remains subject to the retention schedule. Reports are reviewed by a human operator and do not instantly hide content.

Control and deletion

Authenticated users can export their account data and request permanent deletion with password reauthentication and an exact confirmation. Feedback-board submissions, votes, and reports are included in account export and account deletion. Private diagnostics remain separate from the public board and are never copied into public submissions.

Contact

Privacy requests will be handled at privacy@infinitevoid.ca after the owner replaces this placeholder with a verified business address and publishes the reviewed policy. For general account, billing, export, deletion, or passkey support, contact support@infinitevoid.ca. Address configuration does not prove mailbox delivery; the owner must complete an external send/receive/reply check.