Privacy Policy

Account information. If you create an account with an email address, we store that address, a securely hashed version of your password, and whether the address has been verified. If you sign in with Google or Apple instead, we store the identifier that provider gives us rather than a password. You can also use the app as a guest, in which case we hold no email address and no password at all - only an anonymous account identifier.

Profile information. Your first and last name, your username, and a profile photo, if you choose to add one. All of these are optional, and any of them can be changed or removed from the Profile tab.

Content you create. The tasks and checklists you add, their emoji, their XP values, when they are scheduled, and whether they repeat - along with a record of which ones you completed and when. The titles you give completed tasks are shown to other people through your activity feed; see "What other people can see" below, which explains who, and how to narrow it.

Progress. Your XP total, level, current and best streak, daily totals, badges earned, and an activity record of the days you showed up.

Social connections. Who you follow and who follows you, any follow requests waiting on an approval, the applause and nudges exchanged between you and other accounts, the chats you take part in and the messages you send in them, and any accounts you have blocked.

Reports and moderation. If you report content or an account, or if somebody reports you, we keep the report, what it was about, and a record of what we decided to do. We keep a copy of the reported content even after it has been taken out of the app, so that we can recognise repeat behaviour and answer a challenge to the decision.

Well-being sessions. When you use a focus timer, a breathing exercise, or a meditation, we record that the session happened and how long it ran. We do not record audio, and we collect no health data from your device.

Device tokens. If you turn on notifications, we store the push token your device issues so we can deliver reminders, applause, nudges, and chat messages. Turning notifications off removes it.

Technical information. Our servers keep standard logs - IP address, request times, and error details - for security, debugging, and abuse prevention.

Chat invite links. When you open an invite link to a group chat, we record that someone on your network tapped that invite, along with whether you are on iPhone or Android. Your IP address is not stored - only a scrambled, one-way fingerprint of it - and the record is deleted after two hours. Its only purpose is to put you in the right chat if you install the app straight afterwards, since the app itself has no way of knowing which link brought you.

We use the information above to:

• Run the app - store your tasks, keep your streak, and sync them across your devices.
• Authenticate you and keep your account secure.
• Show you to the people allowed to see you, and show you the progress of the people you follow.
• Send transactional email: address verification and password resets.
• Deliver notifications you have asked for.
• Review reports of objectionable content or abusive accounts, and enforce our Terms and Conditions.
• Diagnose problems, prevent abuse, and improve the app.
• Meet our legal obligations.

We do not sell your personal information, we do not share it with advertisers, and we do not use your tasks to build an advertising profile of you.

Please read this section carefully, because some of what you write in the app is shown to other people.

Your activity feed lists the tasks you complete by name. Anyone who can see your feed can therefore read the titles you gave those tasks - not merely that you finished something. If you would rather a task's name were not shown to anyone, either give it a title you are comfortable sharing or set your activity to "Only me", described below.

Following is one-directional. Someone who follows you does not need your permission unless you ask for it, and following someone does not oblige them to follow you back. You choose who may see what with two settings in the app, under Settings - Privacy.

Who can see my profile. Set to "Everyone" - the default - anyone signed in can follow you without asking, and can see your display name, username, profile photo, bio, level, XP, current streak, and your progress against the goals you set. Set to "Followers", each new follower has to be approved by you first, and until you approve them they see only your name, username, photo, and bio.

Who can see my activity. Set to "Everyone" - the default - anyone who can see your profile can read your activity feed, including the titles of the tasks you completed. Set to "Followers", only people you have let follow you can read it. Set to "Only me", nobody else can.

Anyone who can read your feed can also applaud an entry on it, which sends you a notification naming the task they applauded. People who follow each other can additionally send each other a nudge, and start a chat.

The app also has a public ranking, which anyone can read - including people using the app without an account. You are on it by default: once you have chosen a username, anyone can see your username, display name, photo, level, the XP you earned that day, and your streak there. You can take yourself off it at any time by turning off "Show me on the leaderboard" in the app, under Profile - Settings - Privacy, and your scores stop appearing on it from that moment. Opening you from that ranking shows them your profile, subject to the two settings above.

You can change any of these settings at any time, and a change applies immediately to what other people see from that point on. You can also remove a follower, stop following someone, and block an account outright, which ends the connection in both directions and stops them finding you. Anything you find objectionable can be reported from inside the app, or by writing to support@co.dev, and we act on reports within 24 hours.

We share information with a small number of providers who process it on our behalf, only to the extent they need it:

• Google and Apple - to authenticate you when you choose to sign in with them.
• Resend - to send transactional email such as verification codes and password resets.
• Cloudflare - to store and serve profile photos, and to serve our infrastructure.
• Our hosting provider - to run the servers and the database the app depends on.
• Apple and Google - as the stores that distribute the apps, subject to their own privacy policies.

We may also disclose information where the law requires it, or where it is necessary to protect our rights or the safety of our users.

We keep your information for as long as your account exists. When you delete your account, we remove your ability to sign in immediately and your profile stops being visible to other users.

A minimal record is retained afterwards so that shared history - applause you gave another user, or a message you sent in a chat - does not break for the people still using the app. Backups are cycled out on a rolling basis.

Reports and the moderation records that go with them are kept for as long as we need them to enforce our terms and to keep the app safe, which can be after the account concerned has been deleted.

Chat invite link records are the exception: they are deleted two hours after the link is opened, whether or not anyone installs the app.

You can view and edit your profile, and delete your account outright, from the Profile tab in the app. Deleting an account cannot be undone.

Depending on where you live, you may also have the right to request a copy of your information, to have it corrected, to have it erased, to object to or restrict how we process it, and to complain to your local data protection authority. Write to support@co.dev and we will respond within the period the applicable law allows.

We do not discriminate against anyone for exercising these rights.

Passwords are stored hashed, never in plain text. Traffic between the app and our servers is encrypted in transit. Sessions use short-lived tokens that can be revoked.

No system is perfectly secure, and we cannot guarantee that a determined attacker will never succeed. If a breach affects your information, we will notify you as the law requires.

Kudos is not intended for children under 13, and we do not knowingly collect information from them. If you believe a child has given us their information, write to support@co.dev and we will delete it.

Our servers and our providers may be located in countries other than the one you live in. Where we move information out of your region, we rely on the safeguards the applicable law provides, such as standard contractual clauses.

We may update this policy as the app changes. When we do, we will revise the date at the top of this page, and for significant changes we will give notice in the app.

Questions about this policy, or about your information, go to support@co.dev.