← Back to home

Privacy Policy

Last updated: February 25, 2026

Overview

Done is a local-first productivity application. Your task data stays on your device. We don't collect, store, or have access to your tasks, notes, or any content you create within the app.

This Privacy Policy explains what limited data we collect for license management and how we use it.

Data We Collect

1. License Validation Data

When you activate your license, we collect:

  • Email address: Used to verify your purchase and send your license key
  • License key: Stored as a cryptographic hash for validation
  • Device identifier: A unique hardware ID to enforce single-device activation
  • App version: To verify your license covers the version you're running
  • Activation timestamp: When you first activated your license

2. Purchase Information

When you purchase a license through Paddle:

  • Email address: To send your license key
  • Payment information: Processed and stored by Paddle (we never see your payment details)
  • Transaction ID: For refund processing and support

3. Email List (Optional)

If you sign up for our waitlist or updates:

  • Email address: To send product updates and launch notifications
  • Signup timestamp and source: To track when and where you signed up

4. Website Analytics

We use Cloudflare's privacy-respecting analytics on our website. No cookies, no tracking across sites, no personal data collection.

Data We Do NOT Collect

  • Your tasks, notes, or any content created in the app
  • Usage patterns, habits, or behavior within the app
  • Crash reports or diagnostics (unless you explicitly send them to us)
  • Location data
  • Advertising identifiers or tracking cookies

How We Use Your Data

We use the data we collect to:

  • Validate licenses: Verify your purchase and enforce license terms
  • Send license keys: Email your license key after purchase
  • Provide support: Help with license activation issues or refunds
  • Send updates: Notify you of new releases (only if you opted in)
  • Prevent fraud: Detect and prevent license key sharing or abuse

We do not sell, rent, or share your data with third parties for marketing purposes.

Data Storage and Security

License data is stored in Cloudflare Workers KV (edge storage) with encryption at rest.

Email list data is stored in Cloudflare Workers KV.

Payment data is processed and stored by Paddle. We never see or store your credit card information.

All data transmission uses HTTPS encryption. License keys are stored as cryptographic hashes, not plaintext.

Third-Party Services

Paddle (Payment Processing)

We use Paddle as our merchant of record for payment processing. When you purchase a license, Paddle collects and processes your payment information. Review Paddle's privacy policy at paddle.com/legal/privacy

Resend (Email Delivery)

We use Resend to send license keys via email. Resend processes your email address solely for delivering messages on our behalf.

Cloudflare (Hosting & Infrastructure)

Our website and license server are hosted on Cloudflare. Cloudflare may collect technical data (IP addresses, request logs) for security and performance. Review Cloudflare's privacy policy at cloudflare.com/privacypolicy

Data Retention

  • Active licenses: Retained indefinitely while your license is valid
  • Revoked/refunded licenses: Retained for up to 2 years for fraud prevention
  • Email list: Retained until you unsubscribe
  • Support emails: Retained for up to 2 years

Your Rights

Under GDPR and UK data protection law, you have the right to:

  • Access your data: Request a copy of the data we hold about you
  • Correct your data: Update incorrect information
  • Delete your data: Request deletion (subject to legitimate business needs like fraud prevention)
  • Unsubscribe: Stop receiving marketing emails at any time
  • Port your data: Request your data in a machine-readable format

To exercise these rights, email privacy@domore.systems

Children's Privacy

Done is not intended for children under 13. We do not knowingly collect data from children. If you believe we have collected data from a child, contact us immediately.

International Data Transfers

Your data may be processed in the United States and other countries where our service providers operate. We ensure appropriate safeguards are in place for international transfers.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of Done after changes constitutes acceptance.

Contact Us

If you have questions about this Privacy Policy or how we handle your data:

Email: privacy@domore.systems

© 2026 Do More Systems. All rights reserved.