Privacy

• What you write in your plans is encrypted in your browser before it is saved. We cannot read it, unless you let us keep a copy of your key or turn on AI connectors.
• Dates, times and settings are stored readable, so the planner can work.
• No ads, no trackers, and we never sell your data.
• AI connectors, reminders and Google Calendar are off until you turn them on.

We use this to run TickNow for you, including a welcome email when you create an account (contract), to keep it secure and answer feedback (legitimate interests), and to email you when Pro opens only if you ask (consent). We make no automated decisions about you.

TickNow uses no cookies. Your browser keeps your sign-in, your unlocked key and your preferences, and, if you turn on reminders, a small worker that shows them while TickNow is closed.

Your plans are encrypted with AES-256 using a key locked by your passphrase. We never receive your passphrase, so unless you let us keep a copy of your key, we cannot open your plans or recover them for you.

With an account, you can set a new passphrase on any device where your plans are open. If they are not open anywhere, you can start over with a new passphrase, which deletes your plans.

With an account, you can also let us keep a copy of your key, so signing in is enough to open your plans on a new device. We keep it sealed with our server's key and use it only to hand it back to you when you sign in, but while we have it, we could open your plans. It is off until you turn it on, and turning it off in Settings deletes it.

• They are off until you turn them on. While they are on, our server can open your plans to answer the assistant you connected, such as Claude or ChatGPT.
• An assistant can read your tasks, to-dos, drafts and lists, and add to them, edit lists, move tasks and lists, change task estimates, tick items off, start and stop sessions or archive tasks unless you limit it to reading. It never sees task descriptions, past sessions and events, or anything from Google Calendar.
• Turning them off removes the server's access and ends every connection. We keep a short history of which assistants connected and how many things they added, never your plan text.

• It is off until you connect it. TickNow then asks Google for one permission, to see the events on calendars you own (calendar.events.owned.readonly), and reads only your main calendar. It never adds, changes or deletes anything in Google Calendar.
• What it reads: the timed events from today to 30 days ahead, and for each one only its title, start and end time, whether it was cancelled, its video meeting link (such as Google Meet) and Google's id for it. All-day events are skipped. It never asks Google for descriptions, locations, guests, attachments or your other calendars.
• What it keeps: your browser encrypts each title and meeting link before it is saved, like everything you write. Our server keeps only those encrypted texts, the start and end times, and a one-way code made from the event's id, so the next sync recognises the event.
• So you are not asked to sign in to Google again, our server keeps the access key Google gives TickNow, encrypted with AES-256-GCM. It uses it only to give your browser an hour of read-only access at a time, and never reads your calendar itself. That hour of access stays in your browser's memory and is never saved.
• Disconnecting stops the syncing, gives the access back to Google, deletes the stored key and removes the events it brought in from today on. Past ones stay in your history. You can also remove TickNow at myaccount.google.com/permissions.
• TickNow's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We never share it with AI assistants, never use it for ads and never sell it.

• Everything between your browser, our server and Google travels encrypted over HTTPS.
• What you write, Google event titles and meeting links included, is encrypted with AES-256 in your browser before it is saved, with a key locked by your passphrase. Unless you let us keep a copy of your key, nobody at TickNow can read it.
• What our server must keep secret, such as Google's access key, is encrypted with a server key kept apart from the database.
• Passwords are kept only as a hash, never as the password itself.
• Everything you save belongs to your account, and every request is checked against the account making it, so no one else can read or change it.

Your data leaves the EU only when you email us, or connect an assistant whose provider is outside it, under that provider's safeguards, such as the EU-US Data Privacy Framework or standard contractual clauses.

• Your plans: until you delete them or start over.
• Your account: until you ask us to delete it.
• The Pro waiting list: until Pro opens or you unsubscribe.
• Everything else is short-lived: sign-in sessions 7 days, reminders in the bell 30 days, backups up to 60 days, feedback 90 days, logs 30 days.

You can ask for a copy of your data, or ask us to correct, delete or stop using it. Email support@ticknow.app and we will answer within a month. You can also complain to the data protection authority where you live, or to Romania's (ANSPDCP, dataprotection.ro).

You can try TickNow as a guest without giving us anything. An account needs only an email and a password. When this page changes, we update the date at the top.