Privacy
OnlyCheckboxes stores the information needed to keep your checklists useful, your account secure, and your connected assistants working with the access you approve.
Information we handle
- Account information: email address, authentication methods, profile details, and active sessions.
- Your work: workspaces, checklists, items, descriptions, schedules, tags, completion history, and files you attach.
- Connected-assistant access: authorization grants, access-token records, and the actions sent through those connections.
- Billing information: plan, subscription status, and billing identifiers. Payment details are collected and handled by Stripe or Apple rather than stored by OnlyCheckboxes.
- Operational information: device, browser, IP address, request logs, error reports, and product analytics used for security and reliability.
How we use it
We use this information to provide and secure the service, synchronize your work across devices and assistants, process subscriptions, send account messages, investigate errors, prevent abuse, and understand whether the product is working as intended.
Connected assistants
When you authorize an AI assistant or MCP client, that client can use the permissions shown during authorization. The assistant provider may process the information it reads from or writes to OnlyCheckboxes under its own terms and privacy policy. You can revoke connected access from OnlyCheckboxes.
Service providers
We use service providers for hosting, file storage, email delivery, payments, analytics, and error monitoring. They receive only the information needed to perform those services. Stripe handles web checkout and card details. Apple handles App Store purchases and related payment details under Apple's own terms and privacy policy.
Retention and control
We keep information while your account is active and as needed to provide the service. You can update your information or delete your account from Settings. Account deletion removes or anonymizes your profile, authentication data, personal workspace, checklist content, files, connected-assistant access, and active sessions. Limited billing, security, backup, or transaction records may be retained when required by law, fraud prevention, dispute resolution, or ordinary backup rotation, then deleted when they are no longer required.
Security
We use access controls, signed sessions, authorization boundaries, security logging, and other technical safeguards. No online service can promise absolute security, so please use a strong authentication method and review connected access regularly.
Contact
Questions or privacy requests can be sent to [email protected].