1. Who is responsible
Tarefin is an app developed by Ulises Ortiz, with a notice address at Cerrada San Borja, Col. Del Valle Centro, Benito Juárez, 03100 Mexico City, Mexico ("we"). For any privacy matter, write to uortiz@gmail.com.
2. The short version
- Your data stays on your phone. Tarefin has no accounts and no servers that store your tasks, what you write, your self-assessment answers or how you feel.
- Nothing leaves your phone unless you decide. There are only two exceptions, and both depend on you:
- Usage data (optional, off by default): counters such as "first block completed" or "the app had an error", linked to a random installation ID (this is pseudonymous data, not anonymous). It never includes what you write.
- Encrypted backup: a file you create with your own password and save wherever you want. We never receive it.
- We do not sell data, show ads or use advertising identifiers.
- Tarefin is a personal organization tool. It is not a health service and does not replace care from a professional.
3. Data stored on your phone
For the method to work, the app stores only on your device:
- Your tasks (title, first step, if-then plan, estimates, status) and inbox.
- Your focus blocks, daily wrap-ups and weekly reviews, including your WOOP plan and notes.
- Your self-assessment answers, your profile (focus skills and strengths) and your impact answers.
- Your optional "How are you doing today?" answer.
- Your settings (language, schedules, notifications).
- An internal event log (for example, "task created" or "block finished") the app uses to calculate your metrics.
This data is not sent to us or to third parties. Only you have access to it, through your phone.
4. Usage data (optional)
If you turn it on in the consent screen or in Settings > Usage data, the app sends, at most once a day and encrypted in transit (HTTPS):
- A random installation ID generated on the phone, not linked to your Google account, device ID or advertising ID, but it lets us group the events of one installation: that is why this data is pseudonymous and we treat it as personal data. Our server does not store your IP address with the events.
- Technical data: app and method version, app language, platform and major OS version, and phone manufacturer (it helps us detect notification problems on some brands).
- The week of use, without exact dates or times.
- A closed list of events: onboarding completed (rounded time), first block started or completed, self-assessment parts completed, activity on certain days of use (2, 7, 14, 30, 60, 90), a weekly summary in ranges (active days, day starts, wrap-ups and blocks), weekly review completed, notification test result, likely missed reminders, backup created or restored, and app errors (error code and screen, no content).
We never send: your tasks, what you write, your WOOP plan, your self-assessment answers or scores, your impact answers, your profile, your mood, whether professional-support information was shown to you, your emotions, exact times or your location.
Why: only to know whether the app works and what to improve. Not for profiling, advertising or decisions about you.
Who receives it: Cloudflare, Inc. processes it as our processor, on our behalf and only for this purpose, on its infrastructure with storage in Western Europe. Cloudflare may process data outside your country under its contractual data protection commitments.
How long: up to 13 meses, in aggregated form only.
How to turn it off: Settings > Usage data. The app stops sending, deletes anything pending and creates a new ID. "Ask to delete what was sent" lets you request deletion of what we received under your previous ID.
Legal basis (EU/UK): your consent, which you can withdraw at any time.
5. Encrypted backup
Settings > Save backup creates a file encrypted with a password you choose and saves it wherever you decide (a phone folder, your personal cloud, your email). We never receive the file or your password. If you store it with a third-party service, that service's terms apply. If you forget the password, the backup cannot be opened and we cannot recover it.
Export my data creates a readable, unencrypted file; the app warns you first.
6. Permissions
- Notifications: for your if-then plans, block start and end, and day-start, wrap-up and review reminders.
- Exact alarms or foreground service (if your Android version requires it): so the block timer and reminders arrive on time.
- Internet: only to send usage data, if you turn it on.
The app does not request your location, contacts, camera, microphone, photos or calendar.
7. System automatic backup
To keep your data on your phone, Tarefin turns off Android's automatic backup, which could upload app data to the manufacturer's or Google's cloud. Use the encrypted backup to move your data to a new phone.
7b. If you write to us or join the beta
If you sign up for the beta or contact support, we receive your email address and whatever you choose to tell us (for example your name, country or a problem description). We use it only to invite you to the beta, give you access in Google Play and reply to you. For the beta, Google Play knows your Google account because it distributes the test app. We keep these emails for the duration of the beta and up to 12 months afterwards, unless you ask us to delete them sooner. Legal basis in the EU/UK: your consent and handling your request.
7c. The tarefin.app website
The website uses no cookies or advertising trackers. To know how many people visit it we use Cloudflare Web Analytics, which measures visits in aggregate without cookies or profiles. The beta form stores only what you type (section 7b), without your IP address.
8. Your rights
Your data is on your phone, so you control it directly:
- Access and take it with you: "Export my data" or "Save backup".
- Correct it: edit it in the app.
- Delete it: "Delete all my data" or uninstall the app.
- Withdraw consent for usage data and ask us to delete what was sent: see section 4.
You can also write to uortiz@gmail.com to exercise the rights granted by Mexican law (ARCO rights), the EU GDPR, Brazil's LGPD or the law of your state or country. How: write to uortiz@gmail.com with the subject "Privacy", say which right you want to exercise and, for usage data, include the ID shown in Settings > Usage data (the app shows it for this purpose). We will acknowledge your request within 5 business days and respond within the legal deadlines. We will only ask for what is strictly needed to verify that the request is yours. You may also contact your local data protection authority.
9. Children
Tarefin is designed for adults. It is not directed to children under 16 and we do not knowingly collect children's data.
10. Security
Data is stored in the app's private storage on your phone. Usage data is encrypted in transit (HTTPS), and backups use authenticated encryption with a key derived from your password. No system is perfect: protect your phone with a screen lock and do not share your backup password.
11. Future features
If we add features that send data off your phone (for example, AI assistance), we will tell you first, ask for your specific consent and update this policy. Those features will be optional; the full method will keep working without them.
12. Changes
If we change this policy we will update the date above and, for important changes, notify you in the app before they apply.
13. Contact
Ulises Ortiz · Cerrada San Borja, Col. Del Valle Centro, Benito Juárez, 03100 Mexico City, Mexico · uortiz@gmail.com