Privacy policy

Summary

• We collect what we need to run Procrastinate.ai for you: your account details, the tasks, reflections and other content you create, and basic technical data.
• We never sell your data, and we never use your journal entries, emotional check-ins or conversations for advertising. We do not show ads.
• Personal content is sent to an AI provider (Anthropic or OpenAI) only after you switch on AI processing, and you can switch it off at any time.
• Product analytics (PostHog) run only if you opt in.
• You can export your data or delete your account from Settings at any time.

Who we are

Procrastinate.ai ("we", "us") provides the Procrastinate.ai website and app at https://procrastinate.ai (opens in a new tab). For privacy questions or requests, contact hello@procrastinate.ai (opens in a new tab) or use the contact form and choose "Privacy or data request". The legal entity name, registered address and the named Grievance Officer / Data Protection contact are to be confirmed before launch; until then, all requests to the address above are handled by the team.

What we collect

Information you give us

• Account: email address, display name, password (stored only as a secure hash by our authentication provider) or sign-in via a linked provider.
• Profile and preferences: time zone, language, goals you choose during onboarding, and display settings such as theme, text size, high contrast and reduced motion.
• Content you create: tasks, projects, subtasks, notes, journal entries, daily and weekly reviews, emotional check-ins, incubation sessions and notes (including voice recordings if you choose to record them), creative ideas, conversations with the AI companion, and "memory" items the companion keeps to personalise suggestions (which you can view and delete).
• Accountability: if you invite a partner, their email and what you choose to share with them.
• Contact messages: your name, email and message when you contact us.

Information created when you use the service

• Decisions and recommendations: the inputs and results of the decision engine and, where you consent, AI interpretations.
• Usage records: counts of feature use (for example, AI messages per day) so plan limits work.
• Growth garden: positive-only points and achievements.
• Security data: IP address and request metadata used for rate limiting, abuse prevention and an audit log of security-relevant actions (such as sign-in changes, data export, account deletion and subscription changes).
• Notifications: in-app notifications and, if you enable them, browser push subscription details.

Information from third parties

• Payments: Razorpay (India) or Stripe (international) tell us your subscription status and provide customer and subscription identifiers. We never receive or store your full card number.
• Integrations you connect: for Google Calendar, an access token (encrypted at rest) and the calendar events needed for scheduling; for Telegram, your chat identifier so we can send messages you ask for.

How we use it

• To provide the features you use: storing your tasks and reflections, running the decision engine, showing insights, sending reminders you set up.
• To provide AI features only with your consent (see below).
• To process payments and manage subscriptions.
• To keep the service secure, prevent abuse and fix errors.
• To reply to your messages.
• To improve the product using aggregated, consented analytics.

We do not use your content to build advertising profiles, and we do not sell or rent personal data to anyone.

AI processing

AI features (the companion's interpretations, Creative Lab prompts and similar) use large language models from Anthropic or OpenAI. Personal content such as journal text or task titles is sent to these providers only if you have switched on AI processing in Settings. We send only what the feature needs, and we strip unnecessary identifiers. According to their published commercial API terms at the time of writing, these providers do not use API data to train their models by default; they may retain data for a limited period for abuse monitoring. Without AI consent, the deterministic decision engine still works and nothing personal is sent to an AI provider.

AI output can be wrong. The companion is not a therapist or medical professional.

Analytics and cookies

• Essential: authentication cookies set by our sign-in system (Supabase Auth) to keep you signed in, and local storage for your display preferences.
• Analytics (optional): if — and only if — you opt in, we use PostHog to record page views and simple, content-free events. Autocapture and session recording are switched off, text is masked, and record identifiers are removed from page addresses. You can withdraw consent in Settings.
• We do not use advertising or cross-site tracking cookies.

Who we share data with (processors)

We use service providers who process data on our behalf under contract:

We may disclose information if required by law or to protect the safety of users. If the business changes ownership, this policy will continue to apply to your data and we will tell you before any change.

Some providers process data outside India or your country. Where that happens, we rely on contractual safeguards. The primary hosting region is to be confirmed in legal review.

How long we keep data

• Your content (tasks, journal, check-ins, ideas, reviews, settings) is kept until you delete it or delete your account.
• AI companion messages: automatically deleted after 730 days (2 years).
• Usage records: deleted after 400 days.
• Notifications: deleted after 90 days.
• Security audit log: kept for 1095 days (3 years) for security and legal purposes; it records actions, not your content.
• Contact messages: kept as long as needed to handle your request and any follow-up.
• Payment records: kept as long as tax and accounting law requires.

Deleted data may persist in encrypted backups for a limited period before being overwritten.

Your rights

Wherever you live, you can:

• Access and export your data (Settings → Privacy → Export).
• Correct inaccurate data (edit it in the app or ask us).
• Delete your account and personal data (Settings → Privacy → Delete account). Deletion removes your personal data from our database; a minimal audit record of the deletion is kept as described above.
• Withdraw consent for AI processing or analytics at any time in Settings; this does not affect processing that already happened.
• Ask questions or complain by contacting us.

India (Digital Personal Data Protection Act, 2023): you have the right to obtain a summary of your personal data and how it is processed, to correction, completion, updating and erasure, to grievance redressal, and to nominate another person to exercise your rights in the event of death or incapacity. If you are not satisfied with our response to a grievance, you may complain to the Data Protection Board of India.

EU, UK and similar laws (GDPR-style rights): you also have the rights to data portability, to restrict or object to processing, and to complain to your local data protection authority. Our legal bases are performance of our contract with you (providing the service), your consent (AI processing, analytics), and our legitimate interests (security and abuse prevention).

We will respond to requests within the time required by applicable law.

Children

Procrastinate.ai is intended for people aged 16 and over. Where the law requires parental consent for younger users (for example, under 18 in India under the DPDP Act), they may use the service only with verifiable consent from a parent or guardian. If you believe a child has given us data without appropriate consent, please contact us and we will delete it.

Security

We use encryption in transit, row-level security in our database so each account can only access its own data, encryption at rest for integration tokens, rate limiting, and redacted logging so your personal content is not written to logs. No system is perfectly secure; if a breach affects your data, we will notify you and the relevant authorities as required by law.

Sensitive information

Emotional check-ins and journal entries can be personal. We treat them as confidential: they are used only to provide the service to you, are never sold or used for advertising, and are sent to an AI provider only with your consent. Procrastinate.ai is not a medical or therapy service and does not diagnose conditions.

Changes to this policy

If we make material changes, we will update the date below and notify you in the app or by email before they take effect.