Privacy Policy

01Who we are

Check is a task and reminder service for iPhone, Mac and the web, operated by Krit Sinha (“Check”, “we”, “us”). This policy covers joincheck.app, the Check apps, and our account, sync and connected-tool services.

Krit Sinha is responsible for the personal information described in this policy. For privacy questions or requests, email support@joincheck.app.

02Information we collect

• Account information: your email address, account identifier, any name you provide, sign-in method, and authentication records. If you use a Check password, our authentication provider manages it; we do not receive your Google or Apple password.
• Your workspace: task titles and notes, groups, lists, sections, subtasks, dates, times, time zones, reminder and repeat settings, flags, ordering, and completion history. We also store identifiers and timestamps needed to sync changes.
• Device and notification information: notification permissions and preferences, device identifiers and platform, push tokens where enabled, and the task and scheduling details needed to deliver an alert.
• Technical information: our hosting and authentication services process IP addresses, browser or device information, request times, sign-in events, and error or security logs needed to operate and protect Check.
• Support information: your email address, messages, and any information you choose to send when asking for help.

Check does not require access to your contacts, photos, microphone or precise location. Please avoid putting information in tasks or support messages that you do not want Check to process.

03Google and Apple sign-in

Google and Apple sign-in are optional and apply when those sign-in methods are available. Email sign-in is also offered. Choosing a provider lets that provider authenticate you and share the information described below with Check and our authentication provider.

Google: we request basic identity permissions (openid, email and profile), which can provide your Google account identifier, email address and verification status, name and profile picture. We use this information to create or identify your Check account, sign you in, secure your account and communicate about the service. Google sign-in does not give Check access to Gmail messages, Google Drive files, calendars or contacts, and we do not request those permissions for sign-in.

Apple: we receive an identifier for your account, your email address or Apple private relay address, and your name if Apple supplies it and you choose to share it. Apple may supply your name only on the first authorization. If you choose Hide My Email, we use the relay address Apple provides; we do not require your real email address. We use this information only for account creation, authentication, security and service communications. Sign in with Apple does not give Check access to your iCloud content.

Provider identity information is stored with your account by our authentication service. Authentication tokens and session credentials are processed to verify sign-in and maintain your session, and session credentials can be stored on your device. We do not use Google or Apple sign-in information for advertising, tracking across other services, data brokerage or training general-purpose AI models.

For Google user data, Check follows the Google API Services User Data Policy, including its Limited Use requirements. Use and transfer are limited to the disclosed features, necessary security purposes, legal obligations and other uses that policy permits. Human access is limited to your affirmative permission, necessary security investigations, legal requirements, or other exceptions expressly allowed by that policy.

04How we use information

We use your information to operate your account; save, organize and sync your workspace; deliver reminders you enable; carry out requests from tools you connect; send sign-in codes and essential service messages; answer support requests; diagnose errors; and prevent misuse or unauthorized access.

Where applicable data protection law requires a legal basis, we process information to provide the service you request, for legitimate interests in keeping it reliable and secure, to meet legal obligations, or with your consent for optional permissions and integrations. You can withdraw consent for optional processing as described below.

We do not sell or rent personal information, use it for targeted advertising, or include advertising trackers in Check. We do not use your task content or sign-in data to train general-purpose AI models.

05Sharing and connected tools

We share information only as needed for the following purposes:

• Service providers: Supabase provides account authentication, database storage, sync and backend functions. Vercel hosts the website and processes web requests. Our email delivery provider, currently Gmail, processes recipients and messages for sign-in and service emails. Apple processes push tokens and notification payloads when push notifications are used; these payloads can include a task title.
• Sign-in providers: if you choose Google or Apple sign-in, the selected provider processes the authentication request under its own privacy policy. Check does not send your workspace to those providers as part of sign-in.
• Tools you authorize: connecting an MCP client or AI assistant lets that service request your task and list information and perform the actions available through the connection, including creating, changing, completing and deleting items. Information returned to that service is also subject to its policies. Check does not send your workspace to an AI assistant unless you connect and authorize it.
• Legal and security needs: we may disclose information where required by law or where necessary to protect people, investigate abuse, or protect the service and legal rights.
• A change of operator: if Check is transferred, information may transfer subject to this policy and applicable law. Any transfer of Google user data must also meet Google's policy, including obtaining prior consent where required.

Providers processing information on our behalf must protect it consistently with this policy and applicable law, and use it only to supply their services. Independent services you choose to connect, including AI assistants and sign-in providers, have their own privacy practices. Review those practices before connecting them.

06Storage and security

Your account and synced workspace are stored in our Supabase project. Check also keeps a local workspace cache and queued edits on your device or browser so it can respond quickly and sync after a connection returns. The web app uses browser local storage for these records, authentication sessions, appearance and notification preferences.

We use HTTPS for data in transit, our cloud providers' protections for stored data, and account-based access controls to restrict workspace access. Check does not provide end-to-end encryption, and local browser storage depends on your device and browser protections. No storage or transmission method can guarantee absolute security.

Our providers may process information in countries other than where you live. Where required, we rely on appropriate contractual protections and other lawful safeguards for international transfers.

07Retention and deletion

We retain your account and workspace while your account is active and as needed to provide Check. Removing a task or list from the interface can mark it as deleted for sync rather than immediately erase the underlying record. For permanent removal of retained records or your entire account, send a deletion request.

Email support@joincheck.app to request deletion of your account and associated personal information. Include your Check account email; never send a password or sign-in code. If you use Apple Hide My Email, include the relay address associated with Check. We may verify account ownership before acting.

We process verified requests without undue delay and within the deadlines required by applicable law, confirm completion, and explain any information that must be retained and why. Limited records may remain where necessary for legal obligations, resolving disputes or preventing fraud. Backup copies may remain until overwritten under our providers' backup cycles and are not used for ordinary service operations.

Closing or uninstalling an app, signing out, or revoking Google or Apple access does not itself delete your Check account. To remove copies on a device, sign out and clear Check's site data or app data as appropriate. A connected third-party service may retain information it previously received; request deletion from that service separately.

08Your choices and rights

• Provider access: remove Check's authorization in your Google Account connections or your Apple Account's Sign in with Apple settings. This can prevent further provider sign-in; request account deletion separately if desired.
• Connected tools: disconnect Check in the MCP client or assistant. Contact support if you also need help revoking the underlying authorization.
• Notifications: turn alerts off in Check or your device or browser settings. Reminder content may be visible on your lock screen depending on those settings.
• Local storage: clear site data in your browser to remove local sessions and preferences. Unsynced changes may be lost, and clearing site data does not remove server records.

Depending on your location, you may have rights to access, correct, export or delete your information, restrict or object to processing, and withdraw consent. Send requests to support@joincheck.app. We will verify your identity where needed and respond as required by applicable law. You may also complain to your local data protection authority.

09Children

Check is not directed to children under 13, or a higher minimum age where applicable law requires it. We do not knowingly collect their personal information. If you believe a child has provided information in violation of this policy, contact support@joincheck.app so we can investigate and delete it where appropriate.

10Changes and contact

We may update this policy as Check changes. We will update the date above and provide notice of material changes through the service or by email where appropriate. If a new use of Google or Apple user data requires consent, we will request that consent before starting the new use.

For questions or privacy requests, contact Krit Sinha at support@joincheck.app. Our Terms of Service describe the rules for using Check.