Privacy Policy
Effective 20 October 2026
GetDone is a task app. This page explains what information it handles, what it never does with it, and how you can get it deleted. It covers the website at getdone.sume.uk and the GetDone mobile apps.
Who is responsible
GetDone runs GetDone and is the controller of the information described here. Questions or requests: getdone@sume.uk.
What we collect
| Information | Why |
|---|---|
| Google account details: your name, email address and profile picture, received when you sign in with Google. We never see your Google password. | To sign you in and show who you are to people in your workspaces. |
| Your content: tasks, notes, due dates, priorities, projects, labels, comments, workspaces, members and invites. | To provide the app. |
| Preferences: default due date, menu and tab order, and similar settings. | To remember how you like the app set up. |
| Jira connection (only if you connect it): your Jira site address, Atlassian email, an API token, and the Jira issues your filter selects (key, title, description, status, priority, due date, link). | To bring your Jira issues into GetDone and move them between statuses. |
| Calendar settings (only on iPhone, only if you turn it on): which calendar tasks are written to (account and calendar name). | So all your devices use the same calendar. |
| Technical data: standard server logs such as IP address, browser type and time of request, and sign-in session cookies. | To keep the service running and secure. |
What stays on your device
- Your calendar events. If you let the iPhone app read your calendars, today's events are shown inside the app. They are read on the phone and are not uploaded to GetDone or shown on the website.
- Calendar events GetDone creates (from your tasks) are written into your own calendar by the app. They carry the task title and time and a hidden link that lets GetDone recognise them. They then sync like any other event through your calendar provider (for example iCloud or Google), under that provider's terms.
- Jira comments are read from Jira each time you open a task and are not stored by GetDone.
How the Jira token is protected
Your Jira API token is stored encrypted in Supabase Vault. It can be read only by GetDone's server-side function that talks to Jira. It is never sent back to your browser or phone, and neither you nor other members of your workspace can read it again. Disconnecting Jira deletes it.
Who we share data with
We do not sell your information and we do not show ads. We use these providers to run the service:
| Provider | Role |
|---|---|
| Supabase | Database, authentication and secret storage. The GetDone database is hosted in Singapore. |
| Vercel | Hosts the website and its server code. |
| Sign-in. The website also loads fonts from Google Fonts, which means Google receives your IP address when the page loads. | |
| Atlassian | Only if you connect Jira: GetDone calls the Jira API of your site on your behalf. |
Other people see your information only through workspaces you choose to share. Everyone in a workspace can see and edit every project and task in it, and sees the names and email addresses of its members. Your personal workspace is visible only to you. We may disclose information if the law requires it.
Cookies and tracking
GetDone uses only the cookies it needs: your sign-in session, the workspace you last selected, and a short-lived value used during Google sign-in. There is no advertising, no analytics and no cross-site tracking. The website saves a small cache of its own files (a service worker) so it can start quickly and be installed on your home screen; it does not cache your tasks.
How long we keep it
We keep your information while your account exists. Deleting a workspace permanently deletes its tasks, projects, comments, members and connected tools. Disconnecting Jira deletes the stored token and the links between GetDone tasks and Jira issues (imported tasks stay until you delete them). Tasks you delete are hidden immediately and removed from our systems on request. Routine backups held by our hosting provider expire on their normal schedule.
Your choices and rights
- Access, correct, export or delete your information by emailing getdone@sume.uk from the address you signed up with. You can correct your name in Settings yourself.
- Delete your account by emailing the same address. We will delete your profile, personal workspace and memberships, and reply to confirm. Content you added to a workspace owned by someone else stays with that workspace unless the owner removes it.
- Revoke Google access at any time in your Google account's security settings. Revoke the Jira token at id.atlassian.com.
- Depending on where you live you may have further rights, such as objecting to or restricting processing, or complaining to your data protection authority. Contact us and we will help.
Security
Data is encrypted in transit. Access to every table is restricted in the database so you can read only what belongs to workspaces you are a member of. No system is perfectly secure; if we learn of a breach affecting you we will tell you.
Children
GetDone is not directed at children under 13, and we do not knowingly collect their information.
International transfers
Your information is processed in Singapore and in the countries where our providers operate. By using GetDone you understand it may be transferred there.
Changes
If we change this policy in a way that matters we will update the date above and, for significant changes, tell you in the app or by email.