Privacy Policy

Last updated: April 25, 2026

The short version

Dunzo (Task Assistant) stores your tasks so you can access them. I don't sell your data and I only collect what's needed to make the app work.

When you sign in with Google, Dunzo collects:

Email address: Used to identify your account and enable login.
Name: Used to personalize your experience in the app.
Profile picture: Displayed in the app interface (optional, if available from your Google account).

In addition, Dunzo stores data you create within the app:

Tasks, projects, and lists you create
Due dates, notes, and other task details
Conversation history with the AI assistant
System-generated metadata: Dunzo automatically creates internal identifiers and technical data to keep things running smoothly. This includes user IDs, task IDs, version fields, internal status flags (like draft state and automation level), and timestamps. This metadata is used to operate the service — things like syncing your tasks, preventing conflicts, and tracking task state. It's not shared with third parties except as needed to provide the service (e.g., when you connect via ChatGPT, internal fields are stripped before data leaves Dunzo).

Your data is stored securely:

Location: Data is stored on secure servers hosted by Railway (cloud infrastructure provider) in the United States.
Database: PostgreSQL database with encrypted connections (TLS/SSL).
Retention: Your data is retained for as long as your account is active. You can request deletion at any time.
Backups: Regular automated backups ensure data durability.

Dunzo uses your Google account data solely to:

Authenticate you: Your email identifies your account when you sign in.
Personalize the app: Your name and profile picture are shown in the interface.
Communicate with you: Your email may be used to send account-related notifications (security alerts, account changes, service updates), and occasionally to ask about your experience with Dunzo so I can improve the product. You can opt out of product-feedback emails at any time by replying to any such email — it's a one-person operation and I'll honor the request immediately.

Dunzo does NOT:

Dunzo uses the following external services to provide functionality:

Google OAuth: Handles secure sign-in. Google receives only the authentication request; Dunzo receives your basic profile info (email, name, picture) after you consent.
Anthropic (Claude): Powers the AI assistant in the Dunzo app. When you interact with the assistant, your messages and relevant task data are sent to Anthropic's API to generate responses. Anthropic's data handling is governed by their privacy policy.
OpenAI (ChatGPT): If you connect Dunzo via ChatGPT, your tasks can be accessed through OpenAI's platform. This connection is initiated by you and can be revoked at any time. OpenAI's data handling is governed by their privacy policy.
Railway: Cloud hosting provider that stores the database and runs the application servers.

You have full control over your data:

Access: Request a copy of all data associated with your account.
Deletion: Request permanent deletion of your account and all associated data.
Export: Request an export of your tasks and data in a portable format.
Revoke access: Disconnect Dunzo from your Google account at any time via Google's security settings.

To exercise any of these rights, email me and I'll respond within 30 days.

I take security seriously:

While I use industry-standard practices, no system is 100% secure. I'll notify you promptly if there's ever a breach that affects your data.

Dunzo is not intended for children under 13. If you're a parent and believe your child has created an account, please contact me to have it removed.

If I make significant changes to this policy, I'll notify you through the app or by email before the changes take effect.