CrackerPad ("we", "our", or "us") is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights.
Account information. When you sign in with Clerk, we receive your email address and a unique user identifier. We do not store passwords.
Task data. Tasks, daily plans, and sync preferences you create are stored server-side in our PostgreSQL database, scoped exclusively to your account.
Billing information. If you subscribe to CrackerPad Pro, we store a reference to your Stripe customer ID. Payment card details are held entirely by Stripe; we never see or store them.
Usage data. We collect minimal server logs (request paths, HTTP status codes, timestamps) to operate and debug the service. Logs do not contain task content.
AI suggestion data. AI suggestions are optional. When you explicitly request one, CrackerPad sends only the task title, notes, subtasks, and planning context needed for that request to your selected AI provider. We do not send your entire task list unless it is part of the context shown for that request.
AI provider credentials. You may use Built-in CrackerPad AI or connect your own OpenAI, Anthropic Claude, or Google Gemini API key. Bring-your-own keys are encrypted server-side, are never returned to the browser after saving, and are not included in task exports, encrypted backups, or sync data.
We do not sell, rent, or share your data with third parties for advertising.
You can export your task data, revoke a stored AI provider key, or permanently delete your account at any time from account settings in the app. Revoking deletes the stored encrypted key. Account deletion removes your active and recent synchronized task snapshots, stored encrypted AI provider credentials, billing account record, and Clerk user. Stripe may retain transaction records as required by law.
All data is transmitted over HTTPS. Task data at rest is stored in a managed PostgreSQL instance with access controls. AI provider credentials are encrypted server-side before storage and are never returned through our settings API. We regularly review our security practices.
CrackerPad is not directed at children under 13. We do not knowingly collect data from children.
We may update this policy occasionally. We will note the "Last updated" date above and, for material changes, notify you by email or in-app message.
Questions, data access requests, security reports, or support requests can be sent to support@crackerpad.app. Include the email address associated with your account so we can verify and assist you.