Do It List Privacy Policy
Last updated 2026-10-03.
Do It List (doitlist.app) is a web app for nested task trees with real, rolled-up progress. This policy says what we collect, why, who can see it, how long we keep it, and how to delete it. "We"/"us" means Do It List. "You" means the person using it. Questions: support@doitlist.app.
Information you give us
- Account. Email, username, display name, and a password.
- Two-factor authentication, if you turn it on: an authenticator secret and one-time recovery codes, stored protected.
- Your work. The Initiatives and Tasks you create, their descriptions, and your comments.
- Invitations you send. The email address you give us, the role you offer, and whether it's been accepted.
- Support access you approve. If you ask our Support team for help, we record your reason and which Initiatives you chose to share, and what Support did with that access.
- Payment, if you buy a paid plan: our payment processor handles your card; we never store your card number. We keep your subscription status and paid-through date.
Information we collect automatically
- Sessions. A browser cookie keeps you signed in.
- Security and operations. We use technical details such as IP addresses and failed sign-in attempts to protect accounts and run the service.
- Activity. Who changed what, and when, inside Initiatives you belong to.
- Presence. While you're active in an Initiative, other members can see that you're online and what you're looking at.
- In-app chat. Live chat in an Initiative is temporary and isn't saved with your work.
- Page-visit analytics. We count page visits to see how the site is used.
Who can see it
- Other members of an Initiative you're in can see its Tasks, comments, activity, and assignments. People outside your Initiatives don't.
- Our Support team sees an account's basic status. It sees Initiative content only with your approval, and that access is logged.
- Service providers that help run Do It List, such as an email provider and a payment processor, handle the data they need for that job.
- We remember who you've worked with, so re-inviting someone is easier.
How long we keep it
- We keep your information for as long as we need it to run the service, or until you delete it.
- Deleted Tasks and Initiatives may go to Trash for a while before they're permanently removed.
- A locked Initiative (one over your Free limit after a paid plan ends) is held for at least 60 days.
- We may keep backups and operational logs to run and protect the service. We don't promise either exists.
- We may keep billing and payment records — including after you delete your account — for accounting, tax, or legal reasons.
Deleting your account
You can delete your account at any time. When you do, your account and its sign-in details are deleted, and any paid subscription is canceled. Work you shared may stay with the people you shared it with.
Your choices
- Change your profile, email, password, and two-factor setup at any time.
- Revoke an API or MCP token at any time.
- Leave a shared Initiative at any time.
Security
We use reasonable measures to protect your information.
Children
Do It List isn't directed at children, and we don't knowingly collect information from anyone under 13.
Changes to this policy
When this policy changes, we update the date at the top.
Contact
support@doitlist.app