Privacy Policy

BeProductive is operated by Alcanca Group OÜ (Estonian registry code 17299925), with registered office at Sepapaja tn 6, 15551 Tallinn, Estonia. Alcanca Group OÜ is the data controller for the personal data described in this policy. You can contact us at support@beproductive.app.

We process account and authentication data, such as your email address, name, username, sign-in provider and security settings; the content you choose to sync, including tasks, goals, reminders, routines, notes, shopping data, alarms, calendar data and iPhone calculator history; subscription product, store, entitlement, trial and renewal status, RevenueCat and Stripe customer references; records of your acceptance of current legal terms; and limited technical, security and support information such as IP address, device, browser and operating-system details, request timestamps, security events, diagnostic metadata and messages you send to support. RevenueCat may also receive your account email and display name to manage purchases. We do not receive or store your full card number or CVC. Web calculator history, converter recents, Home layout, icon size, theme and similar browser preferences remain in that browser unless a feature clearly says otherwise.

We use account data and synced content to provide, secure and support BeProductive and to keep supported content available across your devices. This processing is necessary to perform our contract with you. We process billing records to administer subscriptions and meet tax, accounting and legal obligations. We may use limited technical and security data for our legitimate interests in preventing fraud and abuse, diagnosing faults and protecting the service. We send essential account and security messages to perform the service. Optional product analytics and non-essential product emails are used only after your consent, which you can withdraw at any time. An email address and the minimum authentication data are required to create and secure an account; optional profile fields, connected services and analytics are not required to use the core service.

On the web, essential cookies and browser storage keep you signed in, remember security and interface choices, and make requested features work. With your permission, first-party analytics record a random install and session identifier, product-interaction events, A/B variant, platform, app and operating-system version, language, timestamps, and limited counts or selections. When you are signed in, the backend may associate these events with your account ID. Analytics must never contain email addresses, task titles, note bodies or other user-created content. We do not use advertising or cross-site tracking cookies. You can refuse analytics and later change your choice without losing access to BeProductive. In new iPhone releases, “Share product usage analytics” is off until you enable it in Settings. Our backend rejects analytics from older app builds that do not include an explicit consent marker.

We use carefully selected providers only where needed: Supabase for database, authentication and synchronisation; Cloudflare for web hosting, delivery and security; RevenueCat for subscription management and web billing; Stripe for web payment processing; Apple for iOS distribution, payments and Apple sign-in; Google when you choose Google sign-in; and Sentry for app diagnostics. Stripe Radar may automatically assess a web payment using transaction, device, network and fraud-risk signals. Google and Microsoft also process data if you connect their calendar or email services. These providers process data under their own contractual and legal obligations. We do not sell your personal data, show third-party ads or use your private content to train AI models.

On iPhone, Sentry may receive an account or pseudonymous identifier, crash and error information, stack traces, device and operating-system details, and limited technical diagnostics. New app releases are configured not to attach your BeProductive account ID, screenshots or view hierarchy; update the app to receive the latest privacy safeguards. We use diagnostics to investigate faults and do not intentionally include the content you create. If you connect an Apple, Google or Microsoft calendar or email account, BeProductive uses the permissions shown during connection to provide that feature. OAuth credentials and email-account secrets are kept in the iOS Keychain. Mailbox content is exchanged directly with the connected provider and may be cached in protected local files, but is not stored in the BeProductive backend. Connected Google or Microsoft calendar account, source and event details may be mirrored to our backend for synchronisation. The app asks for calendar, alarm or notification, Face ID, camera, microphone and photo access only when a feature that needs it is used; you can control these permissions in iPhone Settings.

When you connect Google Calendar or Gmail, BeProductive accesses Google user data only to provide the features you request: showing calendars and events; and letting you read, search, compose, send, reply, forward, archive, star, mark, move or delete email. We do not use Google user data for advertising, credit decisions, audience profiling or training general-purpose AI models, and we do not sell it or transfer it to data brokers. Human access is prohibited except when you give specific consent for support, when needed to investigate abuse or a security incident, or where required by law. OAuth credentials are stored in the iOS Keychain and Gmail content is kept only in protected on-device cache; disconnecting the account removes its credential and local mail from BeProductive. You can also revoke BeProductive in your Google Account security settings. BeProductive's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Some providers may process data outside Estonia or the European Economic Area. Where required, we rely on an adequacy decision, the European Commission's Standard Contractual Clauses or another lawful transfer safeguard. You may contact us for more information about the safeguards relevant to your data.

Account data and synced content are kept while your account is active. When an account is deleted, its profile and synced product content are removed from the live database; residual copies then age out through the normal protected-backup cycle. Product analytics are kept for no longer than 13 months. Security, diagnostic and support information is kept for the configured provider retention period or as long as reasonably needed to investigate and document the issue, then deleted or anonymised. Transaction and accounting records may be kept for seven years, or longer if required for a legal claim or by applicable law. Local browser data remains until you clear it or use the relevant in-product control.

Account deletion is available in the iPhone app under Settings → Account → Delete Account. If you cannot access the app, contact support@beproductive.app. Deleting your BeProductive account does not cancel an App Store or web subscription. Cancel it separately through the same store or billing portal where it was purchased. Payment, diagnostic and subscription providers may retain limited records under their own legal duties or retention periods. Account deletion does not revoke access at a connected Google or Microsoft account or erase content already stored by Apple, Google or Microsoft; disconnect or revoke those services with the relevant provider separately.

Depending on where you live, you may ask to access, correct, erase, restrict or receive a portable copy of your personal data, and object to processing based on legitimate interests. You may withdraw consent at any time without affecting earlier lawful processing. We normally respond within one month and may need to verify your identity. Write to support@beproductive.app. You may also complain to the Estonian Data Protection Inspectorate or your local supervisory authority. Stripe and payment providers may use automated fraud checks that can affect whether a payment is accepted; contact us if you want us to review a payment-related problem.

We use access controls, encrypted connections and other proportionate safeguards, but no online service can promise absolute security. BeProductive is not directed to children under 13. Where local law requires parental consent for a younger user, a parent or guardian must provide it. We will update this policy when the product or law changes and give reasonable notice of material changes.