Draft. This document has not yet been reviewed by a lawyer and may change before Ivy Lee Tasks launches. Items in [brackets] are still to be filled in.

Privacy Policy

Last updated October 2, 2026

This policy explains what Ivy Lee Tasks (“Ivy Lee”, “we”, “us”) collects when you use our website (ivyleetasks.com), our web app (app.ivyleetasks.com) and our iPhone and Android apps (together, the “Service”), and what we do with it. We run the Service as [LEGAL ENTITY NAME], [MAILING ADDRESS].

The short version: we collect what we need to run your task list, we don’t sell your data, we show no ads inside the app, and you can delete your account and everything in it at any time.

1. What we collect

Account information

You sign in with Google or Apple. We receive your name, email address and a unique account ID from them (Apple may give us a private relay address if you choose to hide your email). We don’t see your Google or Apple password.

Your content

The tasks, notes, workspaces, daily plans, completion history and settings you create (such as reminder times, time zone, theme and notification choices). If you add a Slack or Google Chat webhook address to receive reminders, we store that address and send reminder messages to it.

Shared workspaces and invites

If you invite someone to a workspace or send a Pro gift invite, we store the invite code and the invited person’s email if you enter one, and the people in a shared workspace can see the tasks in it, along with your name.

Subscription and payment information

If you buy Ivy Lee Pro, payment is handled by Stripe (web), Apple (iPhone) or Google (Android), with subscription status managed through RevenueCat. We receive your subscription status, plan, renewal dates and a purchase identifier. We never see or store your card number.

Affiliate program

If you refer people with an affiliate link, we store your referral code, your referral and commission records, and the information Stripe Connect needs to pay you (which Stripe collects and holds, including identity and bank details). If you arrive through someone’s link, we record that code so they can be credited.

Device and usage information

We receive technical information needed to run and protect the Service, such as your device type, app version, push notification token, IP address and error logs.

Product analytics (PostHog)

We use PostHog to understand how Ivy Lee is used so we can improve it: for example which screens are opened, which features are used, and how visitors reach our website. On the website, the web app and the phone apps we record usage events and, when you are signed in, tie them to your account ID. We do not send the text of your tasks, notes or workspace names to PostHog. PostHog also receives technical details such as your device, browser, approximate location (from your IP address) and the page you were on. PostHog processes this on our behalf and does not use it for its own purposes. On the website we also record clicks, scrolling and page speed, and short session recordings of how pages are used (form fields are hidden). In the web app we record page speed and session recordings in which all text, including your tasks, notes and workspace names, and all form fields are hidden, so a recording shows layout and behavior but never your content. The phone apps send only the usage events described above. PostHog Cloud is hosted in the United States. See cookies and opting out below.

Crash and error reports (Sentry)

When the web app, the phone apps or our servers hit an error or crash, we use Sentry to receive a report so we can find and fix the problem. A report contains the technical details of the error (what went wrong and where in our code), your device, browser or operating system and app version, and, when you are signed in, your account ID. It does not include the text of your tasks, notes or workspace names, your name or your email address; we remove console output, request contents and the codes in invite, gift and referral links before a report is sent. Sentry processes reports on our behalf. Reports from the apps follow the same opt-out as analytics (see below). Our servers do not send reports about individual people.

Cookies and local storage

The website uses PostHog without cookies or local storage: visitors are counted anonymously and nothing is stored on your device for it. The web app uses local browser storage to recognise a returning browser, so we can count sessions. The website also sets one cookie, ivylee_ref, only if you arrive through an affiliate link; it stores the referral code for 60 days. The web app uses local browser storage for your theme choice and a pending referral code, and our sign-in provider uses storage to keep you signed in. Apart from the optional advertising measurement described next, we don’t use advertising cookies or cross-site trackers. [If we serve visitors in the EU/UK, add a consent banner for analytics cookies before launch; lawyer to confirm.]

Advertising measurement (when enabled)

When we run paid ads, we may load the advertising tags of Google Ads, Meta (Facebook and Instagram), TikTok and Reddit on our website, so we can tell which ads bring people to Ivy Lee and show our ads to the right audiences. These tags load only if you click “Accept” on our consent banner, and never if your browser sends Do Not Track or Global Privacy Control, which we treat as Decline. They are off until we switch them on. If you accept, those companies may set cookies and receive your IP address, device and browser details and the pages you view, and may use that under their own privacy policies. If you arrive from an ad, we also save the ad’s click ID and campaign tags (such as utm_source) in a first-party cookie, ivylee_attr, for 90 days, and attach them to links to our app so we can match your sign-up or purchase to the ad. [Once the apps are in the stores and use ad-attribution tools, extend this paragraph to cover the iPhone and Android apps (Apple App Tracking Transparency prompt, advertising ID, install attribution partner).] None of these tags receive the text of your tasks.

You can change your mind at any time: click “Ad preferences” in the website footer to decline, clear the ivylee_ads_consent and ivylee_attr entries from your browser, or use your browser’s tracking controls. Declining doesn’t change how Ivy Lee works.

Opting out of analytics and crash reports

You can turn off analytics and crash reports at any time: use the “Share usage analytics” switch in Settings in the web and phone apps, enable your browser’s Do Not Track or Global Privacy Control setting, or block cookies and trackers in your browser. You can also email us to have your analytics data deleted. The Service works the same if you opt out.

Messages

We send account and service emails (for example welcome, receipt and account notices) and, if you turn them on, push notifications and reminders. If you write to us, we keep your message and our reply.

2. How we use it

To provide the Service: store your tasks, sync across devices, send the reminders you ask for, and run shared workspaces.
To process subscriptions, gift invites and affiliate payouts.
To keep the Service secure, prevent fraud and abuse, and fix bugs.
To measure usage and improve the product (analytics).
To communicate with you about your account and the Service.
To meet legal obligations such as tax and accounting.

We don’t sell your personal information, we don’t give advertisers your account or task data (only the browser-level data described under advertising measurement, and only if you accept), and we don’t use your tasks to train AI models.

3. Who we share it with

Only with service providers who help us run Ivy Lee, under terms that limit what they can do with it:

PostHog for product analytics (no task content).
Sentry for crash and error reports (no task content).
Advertising platforms (Google Ads, Meta, TikTok, Reddit), only when we run ads and you accept the consent banner.
Google (Firebase) for sign-in, database and hosting.
Expo for delivering push notifications to the phone app and for app updates. It receives your device’s push token and the text of each notification, which for the morning plan can include your task names.
Apple for Sign in with Apple and iPhone purchases and notifications.
Render for our backend servers.
Stripe for web payments and affiliate payouts (Stripe Connect); Apple and Google for in-app purchases.
RevenueCat for subscription management.
Resend for sending email. [Confirm once email is live.]
Slack or Google Chat, only if you give us your webhook address.
Other people in a workspace you share, and the person who referred you (only that you became a paying customer, never your tasks).

We may also disclose information if the law requires it, to protect our rights or users’ safety, or as part of a merger or sale of the business (we’ll tell you first).

4. How long we keep it

We keep your content and account information while your account is open. When you delete your account, we delete your tasks, workspaces, history and settings. Some records may remain for a limited time in backups, and we keep payment, tax and anti-fraud records as long as the law requires. If you delete an account, you leave any shared workspaces, but tasks you added to someone else’s workspace stay with that workspace.

5. Your choices and rights

Delete your account: in the app, go to Settings, then Delete account. This permanently removes your data.
Export your tasks: on the web app, go to Settings, then Export tasks, to download a CSV.
Access, correct or delete: email us at the address below. We’ll respond within the time the law allows (generally 30 to 45 days).
Notifications: change reminders and channels in Settings, or turn off notifications in your device settings.

If you are in the EU, UK or similar regions

You have the right to access, correct, delete, restrict or object to our use of your data, to data portability, and to withdraw consent. Our legal bases are: performing our contract with you (running your account), our legitimate interests (security and improving the Service), your consent (optional notifications) and legal obligations. You may also complain to your local data protection authority. Your data may be processed in the United States and other countries; where required, we rely on approved transfer safeguards.

If you are in California or another US state with a privacy law

You have the right to know what we collect, to access and delete it, to correct it, and not to be discriminated against for using these rights. We don’t sell your personal information. If you accept our advertising cookies, the ad platforms listed above receive some data from your browser, which some US state laws call “sharing” for advertising; you can decline on the banner or use “Ad preferences” at any time, and we honour Global Privacy Control. To exercise your rights, email us below.

6. Children

Ivy Lee is not for children under 13 (or under 16 in the EU/UK, or the minimum age in your country). We don’t knowingly collect information from them. If you think a child has given us information, email us and we’ll delete it.

7. Security

We use encryption in transit and access controls, and rely on the security of our providers. No system is perfectly secure, so we can’t guarantee absolute security, but we’ll notify you of breaches as the law requires.

8. Changes

If we make material changes, we’ll update the date above and tell you in the app or by email before they take effect.

9. Contact

Questions or requests: privacy@ivyleetasks.com[placeholder address]
[LEGAL ENTITY NAME, MAILING ADDRESS]