Privacy Policy
Last updated: 20 September 2026
This policy explains what information CouldU collects when you use the CouldU website, web app and Android app (together, the “service”), what we do with it, and the choices you have. We’ve tried to keep it short and plain.
The short version: we store your email address and the tasks you create so the service can work. We don’t sell your data, and we don’t use advertising or analytics trackers.
1. Who we are
CouldU is operated by CouldU (“we”, “us”). We’re the controller of the personal information described in this policy. You can reach us at support@couldu.app.
2. Information we collect
Information you give us
| Account details | Your email address and a password. We never store your password itself, only a salted, one-way hash of it. |
|---|---|
| Your tasks | Whatever you enter for a task: its title, description, due date, and the “requested by” text, along with its status (Backlog, In progress or Done), its priority order, and the times it was created and changed. |
Some of what you type may be about other people, for example the name of a colleague in the “requested by” field. Please only enter information you’re entitled to store, and keep it to what you need.
Information created when you use the service
- Sign-in records. When you log in we issue a sign-in token so you stay signed in. We keep a one-way hash of it, together with when it was created and when it expires, so we can check it and revoke it when you log out. We don’t keep the token itself.
- Change history. The service keeps a history of the changes made to your tasks. See “How long we keep information” below.
- Technical and diagnostic data. To keep the service reliable and secure, our server software records operational information such as request times, errors and diagnostics, and sends it to Microsoft Azure Monitor. This may include technical details of a request, such as the IP address it came from.
What we don’t collect
We don’t use advertising, analytics or tracking tools, and we don’t set tracking cookies. The Android app asks for a single permission, access to the internet, so it can talk to our servers. It does not ask for your location, contacts, camera, microphone or files.
3. How we use your information
- To create and run your account, and to store and show you your tasks.
- To keep you signed in, and to keep the service secure, for example by detecting abuse.
- To find and fix errors and keep the service running reliably.
- To respond to you if you contact us, and to tell you about important changes to the service.
Where data protection law requires a legal basis, we rely on: providing the service you asked for (your email and tasks); and our legitimate interests in keeping the service secure and working (sign-in records and diagnostics).
4. Who we share it with
We don’t sell your information and we don’t share it for advertising. Your data is stored and processed for us by Microsoft Azure, which hosts our servers, database and monitoring. We may also disclose information where the law requires it, or to protect the rights, safety and security of our users or the service.
5. Cookies and information stored on your device
- This website (the pages describing CouldU) sets no cookies and has no analytics. It loads its fonts from its own server rather than a third party. Like any web host, the service that delivers the pages may process standard request information, such as your IP address, to deliver and secure them.
- The web app stores your sign-in token in your browser’s local storage so you stay signed in. It isn’t a tracking cookie. Logging out removes it.
- The Android app keeps your sign-in token in the phone’s secure credential storage (the Android Keystore). Logging out removes it.
6. How long we keep information
We keep your account and tasks for as long as you have an account. To keep a full record, the service stores a history of changes to each task, so a task you delete may remain in that history for a time after it disappears from your list. If you ask us to delete your account, we’ll delete your account details, your tasks, and their change history, except where we’re required by law to keep something. Sign-in records expire automatically. Diagnostic data is kept for a limited period by Azure Monitor.
7. Your rights
Depending on where you live, you may have the right to:
- ask for a copy of the personal information we hold about you;
- have inaccurate information corrected (you can also edit your tasks yourself in the app);
- have your information deleted;
- receive your information in a portable format;
- object to, or ask us to restrict, certain uses of it; and
- complain to your local data protection authority.
To use any of these rights, email support@couldu.app from the address on your account. We’ll respond without undue delay.
8. Security
We protect your information with measures including hashed passwords, short-lived access tokens, and a hosting platform that is secured and monitored. No system is perfectly secure, so please use a strong, unique password and keep it private. If you think your account has been accessed by someone else, tell us straight away.
9. Where your information is processed
Our hosting provider operates data centres in several countries. Where your information is transferred outside your own country, we rely on the safeguards our provider makes available for such transfers.
10. Children
CouldU isn’t intended for children under 16, and we don’t knowingly collect their information. If you believe a child has given us personal information, contact us and we’ll delete it.
11. Changes to this policy
We may update this policy from time to time. When we do, we’ll change the “last updated” date above, and if the change is significant we’ll let you know in the service or by email.
12. Contact us
Questions about this policy or your information? Email support@couldu.app.