Privacy Policy

Last updated November 8, 2026

Ottery is a to-do app with a calendar and an AI assistant, available at app.ottery.eu. It is run by Michael Knapp ("we"). This policy explains what data Ottery uses, why, and what you can do about it. Questions go to michael@ottery.eu.

What we collect

• Your Google account basics. When you sign in with Google we receive your name, email address and profile picture, used to create your account and show who is signed in.
• What you put into Ottery. Tasks, lists, notes, due dates, reminders, your progress (XP, streaks) and your conversations with the assistant.
• Access requests. If you ask for access, we store your name, email address, the date of the request and whether it was approved.
• Feedback you send from the Help menu, together with the page you were on and your browser type.

We do not use analytics, advertising trackers or tracking cookies.

Google user data

With your permission, Ottery requests these Google scopes:

• Google Calendar (read) to show your events next to your tasks.
• Google Calendar events (write) to create or change an event only when you ask the assistant to.
• Google Docs (read only) to read a document only when you give the assistant its link, for example to pull to-dos out of meeting notes.

To keep the calendar working we store a Google refresh token for your account. Calendar events are fetched when you open the calendar and may be cached in your own browser. We do not store copies of your documents, beyond what ends up in your assistant conversation.

Ottery's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide the features you see in Ottery. We do not sell it, use it for advertising, or use it to train AI models, and no person reads it unless you ask us to for support, it is needed for security, or the law requires it.

The AI assistant

When you message the assistant, your message, the conversation so far and the task, calendar or document details it needs to answer are sent to Anthropic, which runs the Claude model, to produce the reply. Anthropic processes this data on our behalf and does not use it to train its models.

Who processes your data

• Supabase stores your account and data, in the EU (Frankfurt).
• Cloudflare hosts the website and app.
• Google provides sign-in, Calendar and Docs.
• Anthropic runs the AI assistant.
• Resend sends the email that tells us about a new access request.

Some of these providers may process data outside the EU. Where they do, they rely on safeguards such as the EU Standard Contractual Clauses.

Your browser

Ottery keeps a few things in your browser's local storage so it opens quickly: your last view, the open conversation, and a cache of your calendar. Sign-in uses Supabase's session storage. None of this is used for tracking.

Why we may use it

We process your data to provide the service you signed up for (Art. 6(1)(b) GDPR) and, for keeping Ottery secure and working, on our legitimate interest (Art. 6(1)(f) GDPR). Access to Google data rests on the consent you give on Google's screen, which you can withdraw at any time.

How long we keep it

Your data stays as long as your account exists. Deleted tasks sit in the Trash for 30 days, then are removed. When your account is deleted, your tasks, conversations, access record and Google token are deleted with it.

Your rights

You can ask to see, correct, export or delete your data, object to or restrict how we use it, and complain to a data protection authority. To delete your account or use any of these rights, email michael@ottery.eu. You can remove Ottery's access to your Google account at any time at myaccount.google.com/permissions.

Children

Ottery is not meant for anyone under 16.

Changes

If this policy changes, the new version goes on this page with a new date. If the change matters, we will tell you in the app.