Privacy Policy
Last updated: July 16, 2026
GemTodo (“we”, “us”, or “the app”) is a to-do and daily-log app at gemtodo.com. We collect the minimum data needed to run the app and are transparent about how we handle it.
What we collect
- Account information. If you sign in, our authentication provider Clerk gives us your email address and name. Clerk may pass along additional identity fields; we use only what is shown to you in the app.
- Your to-dos. The items you create (task text, project, type, dates such as due date or expected-by, “today” status, and whether an item is shipped or cleared) are stored in our Supabase database, associated with your account and readable only by you.
- Your daily log (Libretto). If you use Libretto, your reflections (what went well, what surprised you, what to get right) are stored per day, associated with your account and readable only by you.
- Guest trial. If you use GemTodo without signing in, we set a gemtodo_guest cookie so your trial items (up to five) stay tied to your browser. If you later sign in, those items are migrated to your account and the guest cookie is cleared.
How we use it
Your data is used only to run the app: to store and display your to-dos and daily log, keep them in sync across your devices when you are signed in, and support the signed-out trial. We do not sell or share your data, and we do not use it for advertising.
Where it is stored
- Supabase (cloud). Your to-dos and daily-log entries live in a Supabase-hosted PostgreSQL database. Rows are scoped to your account and protected by row-level security so only server requests authenticated as you can read them. See Supabase’s Privacy Policy.
- Clerk (authentication). Sign-in is handled by Clerk. See Clerk’s Privacy Policy for how they handle authentication data.
- Vercel (hosting). The app and its server routes run on Vercel. See Vercel’s Privacy Policy.
Retention and deletion
You can delete individual to-dos and daily-log entries in the app at any time. To delete all of your data and your account, contact us and we will remove your cloud-stored data and your Clerk account.
Cookies
GemTodo does not use tracking or advertising cookies. Clerk sets cookies to manage your signed-in session. The gemtodo_guest cookie supports the signed-out trial as described above.
Third-party services
Children’s privacy
GemTodo is not directed at children under 13, and we do not knowingly collect personal information from children.
Changes to this policy
We may update this policy from time to time. Changes are reflected on this page with an updated “Last updated” date.
Contact
Questions or deletion requests: jeremy@gemka.co