Privacy Policy
Honeylist is a calm to do app with notes, habits and a scratchpad. This page explains what we keep, why, and how you stay in control. We keep it short on purpose.
What we store
- Your content: tasks, subtasks, notes, scratchpad text, folders and habits, plus the name you choose and your preferences (theme, sounds).
- A guest account: the first time you open the app we create an anonymous account and set a session cookie so your data stays with your browser. No sign up is needed.
- If you sign in with Google: your name, email address and profile photo, and your Google account ID. We use them only to recognise you and show your name and photo in the app.
- For reminders: your time zone, the reminder you set on a task, and, only if you turn notifications on, a push subscription for that browser (an address at your browser's push service and two keys, plus the browser name). Turn it off in Profile and it is deleted.
- In your browser: a few small settings in local storage (for example list or grid view and whether a tip was shown) and a service worker that lets the app open offline.
What we do not do
- We do not sell your data or use it for advertising.
- We do not use analytics or tracking cookies.
- We do not read your tasks or notes except to run the app.
AI features
If you press Break it down or Turn into tasks, the text you selected (a task title or a note) is sent to an AI provider to produce the result. We try Groq first and Google Gemini as a backup, and xAI if it is configured. We send only that text, never your account details. Nothing is sent unless you press the button, and each account is limited to 20 AI requests a day.
Who processes your data
- Vercel hosts the app.
- Neon stores the database.
- Google handles sign in, and Groq and Google process AI requests.
- Your browser's push service (Google, Apple or Mozilla, depending on the browser) carries reminder notifications to you. They contain the task title and time.
These providers act on our behalf and only to run the service.
Google user data
Honeylist asks Google only for your basic profile (name, email and photo). We use that information to sign you in and show your account in the app, and for nothing else. We do not share it, sell it, or use it for advertising. Honeylist's use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
Your choices
- Export: Profile, then Export as JSON, gives you everything we hold.
- Delete: Profile, then Delete all my data, removes your tasks, notes, folders and habits right away. Guests get a fresh empty account.
- Google access: you can remove Honeylist any time at myaccount.google.com/permissions.
- Guest accounts unused for 90 days may be deleted automatically.
Security
Traffic uses HTTPS. Your data is private to your account and never shown to other users. No system is perfectly secure, so please do not store passwords or other secrets in your notes.
Children
Honeylist is not aimed at children under 13 and we do not knowingly collect their data.
Changes
If we change this policy we will update the date above. Continuing to use Honeylist means you accept the updated policy.