Privacy Policy
Doey is built to keep your to-dos yours.
What is stored
Your account is a passkey: you create it on a device or in a browser, and your password manager (iCloud Keychain, Google Password Manager, 1Password…) keeps it and syncs it. The server stores only the passkey’s public key, which can check a sign-in but can’t make one, and the name of the password manager when the passkey says. Your to-dos, projects, headings, areas, tags and checklists are stored on Cloudflare, the hosting provider this service runs on. Each account has its own isolated storage. Nothing else is collected: no name, email address, password, contacts or location.
Everything that can reach your account is a connection with its own key or tokens: each device and browser you sign in, each AI assistant you connect and each key you make for a developer tool. For each, the account keeps the name it was given (like “Safari on Mac” or “Claude”), where an assistant says it lives, when it connected and roughly when it was last used, and one-way hashes of its secrets.
The web app keeps its key in a cookie that only Doey’s own pages can send and that no script can read. Signing out of the web app disconnects that key and removes the cookie.
Who can see it
Your data can only be read or changed through one of your account’s connections. The server keeps only one-way hashes of their secrets, so they can’t be recovered from the server. Anything you connect can read and change your to-dos, so only connect what you trust. An assistant can only use Doey’s MCP server, and a developer tool’s key only the MCP server and the REST API: neither can sync, see or change your connections, or delete your account. Settings → Connections lists everything connected and disconnects any of it, one at a time or all at once.
No tracking, no third parties
There is no advertising, no analytics and no tracking of any kind, in the app or on this service. Your data is never sold or shared with third parties; it goes only to the assistants you connect. Cloudflare keeps short-lived request logs to operate the service.
Deleting your data
Deleting a to-do or project removes its content from the server right away; a small marker with its id is kept for 90 days so your other devices learn it is gone, then that is erased too.
To delete everything, open Settings → Account → Delete Account in the app or on the web. This erases your account and all of its data from the server at once, including its passkeys and every connection, and every key stops working. Nothing is kept afterwards, and there are no backups to restore it from. The passkey itself stays in your password manager until you remove it there.
Contact
Questions about privacy: get in touch.