Privacy Policy

The short version

Donelane stores what you write down and who you share it with, so it can show your team what got done. It sets one cookie to keep you signed in. There is no analytics, no advertising and no tracking, and your posts are never sold or used to train anything.

Who is responsible

Contact: hello@xivi.ch

What is stored, and why

Your account

Your email address, the display name you choose, your timezone, when the account was created, and a hashed password if you set one. The email address identifies you and is where digests and sign-in links are sent. The timezone decides when your morning digest goes out.

What you post

Your dones, goals, comments, likes and tags, with the date and time each was written. This is the content of the product: it is visible to the members of the teams you post it in, and to nobody outside them.

Teams and invitations

Which teams you belong to and your role in each, plus invitations you send or receive, which record the invited address until the invitation is accepted or removed.

Email we send and receive

A record of which digests and reminders were sent to you, so the same one is not sent twice. If you reply to a digest to post a done, the incoming message — sender, recipient, subject and body — is stored so the reply can be turned into a post and so a failed one can be diagnosed.

Payment

If your team subscribes, Stripe handles the payment. Card details are entered on Stripe's systems and never reach ours. We keep the Stripe customer and subscription identifiers, the plan, its status and the current period end, so we know what your team is entitled to.

Sign-in

A session cookie keeps you signed in; it is strictly necessary for the app to work and is not used to track you. Magic sign-in links are stored as single-use tokens with an expiry.

Who else sees it

Your teammates, for the teams you post in. Beyond that, only the services needed to run Donelane: the hosting provider that runs the servers, the mail provider that delivers digests and receives your replies, and Stripe for payment. They process this data on our instructions and for no purpose of their own. Nothing is sold, rented, or shared with advertisers, and nothing you write is used to train machine learning models.

The layout loads Inter and JetBrains Mono from Google Fonts, which means your browser contacts a Google server and that server sees your IP address. A content blocker prevents this and the app stays fully usable.

How long it is kept

Your posts stay until you or your team delete them, or until the account is deleted. Sign-in tokens stop working at their expiry. Server logs are kept only as long as needed to keep the service running and secure.

Deleting your account

You can delete your account from your settings. Doing so removes your user record, your dones, your goals, the comments and likes you left anywhere — including on other people's posts — your team memberships, your sign-in tokens, the record of reminders sent to you, and invitations you sent. Nothing you wrote is left behind.

Two things are worth knowing before you do it. Comments and likes your teammates left on your posts go with those posts, because the posts themselves are deleted. And a shared goal that one of your dones completed stays completed for the team — it simply stops pointing at the deleted post. Deletion is immediate and cannot be undone, so export anything you want to keep first.

Your rights

You can ask what is held about you, correct it, export it, or have it deleted. Your own posts can be exported as a CSV file from the app at any time without asking. For anything else, write to hello@xivi.ch.

Changes

If Donelane starts doing something that affects your data, this page changes with it. The date at the top shows when it was last revised.