Privacy Policy

1. What Information Do We Collect?

Personal Information You Provide

We collect personal information that you voluntarily provide to us when registering or using the Services. This may include:

• Name
• Email address
• A one-way password hash when you create an email/password account
• Profile picture (as provided by your social login provider)

Authentication Information

Email/password accounts store a one-way password hash rather than the password in readable form. When you use a third-party authentication provider such as Google, we receive basic profile information such as your name, email, and profile picture. We do not receive or store the password for that provider.

User-Generated Data

We store data you create within the Services, such as projects, tasks, focus sessions, and related activity logs. This data is used solely to provide the Services.

Sensitive Information

We do not intentionally collect or process sensitive personal information.

2. How Do We Process Your Information?

We process personal information to:

• Create and manage user accounts through email/password or social sign-in
• Provide access to features of the Services
• Store your projects, tasks, and focus session data
• Respond to support requests
• Send important service-related communications
• Maintain security and prevent misuse

We do not use personal information for advertising or profiling.

3. Legal Bases for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or similar jurisdictions, we process personal data under the following legal bases:

• Performance of a contract (to provide the Services)
• Consent (where explicitly given)
• Legal obligations
• Legitimate interests (such as maintaining security and improving reliability)

4. Sharing of Information

We do not sell personal information.

We may share personal information with trusted service providers who assist us in operating the Services (such as hosting, authentication providers, and analytics). These providers process data only on our behalf and under contractual confidentiality obligations.

We may also disclose information if required by law or in connection with a business transfer.

5. Data Retention

We retain personal information and user-generated data for as long as the user account remains active.

After account deletion, we will delete or anonymize personal data within a reasonable period unless retention is required by law or necessary for backup and security purposes.

6. Data Security

We implement appropriate technical and organizational measures to protect personal information. However, no system is completely secure, and we cannot guarantee absolute security.

7. Children's Privacy

The Services are not intended for children under 18. We do not knowingly collect data from children.

8. Your Privacy Rights

Depending on your location, you may have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict processing
• Request data portability

You can exercise these rights by contacting us at support@wscm.eu or through your account settings.

9. Do-Not-Track

We do not respond to browser Do-Not-Track signals, as no standard currently exists.

10. Changes to This Notice

We may update this Privacy Notice from time to time. The updated version will be indicated by a revised date at the top of this document.

11. Contact Us

Email: support@wscm.eu