This is a plain-language template. It should be reviewed by a lawyer before Hecho launches.

Privacy policy

Last updated September 25, 2026

Hecho is a to-do app. To make it work we need to keep some information about you and your tasks. Here is what we keep, why, and what you can do about it, in plain words.

What we collect

Your account: name, email address, password (stored only as a secure hash), avatar, time zone and language.
What you put in Hecho: tasks, projects, comments, labels, files you attach and your settings.
Teams: the teams you belong to, your role, and invites you send or receive.
Sign-in with Google or Apple: if you use it, we receive your name, email and an account identifier from them. Nothing else.
Basic technical data: the device type and rough country when you sign up or log in, used for security and to fight abuse.

How we use it

To run Hecho: show your tasks, sync them across devices and share them with your team.
To send emails you need, like verification links, password resets, invites and reminders you turned on.
To keep accounts safe and stop spam.

We don't sell your data and we don't show ads.

Where it's stored

Hecho runs on Cloudflare. Your data is stored in Cloudflare's databases and file storage and is encrypted in transit. Only a small number of people who operate Hecho can access it, and only to help you or keep the service running.

Payments

Subscriptions are sold through the Apple App Store and Google Play. Apple or Google process the payment; we never see or store your card details. We only receive the subscription status we need to unlock your plan.

Who else sees your data

People in your teams see the team projects, tasks and comments you share there. Your personal projects stay private.
Service providers that help us run Hecho (hosting, email delivery), only as needed to provide the service.
Authorities, only when the law requires it.

Your choices

You can edit your profile and settings anytime in Settings.
You can delete your account anytime in Settings → Account. We remove your personal data and personal projects; content you shared with a team may stay for the team.
You can ask us for a copy of your data, or ask any question about privacy, at support@hechotask.com.

Changes

If we change this policy in a meaningful way, we'll tell you in the app or by email before it takes effect.