Privacy policy

Information used by the planner

Hajime stores your account details and the information you choose to enter or upload, including tasks, dates, priorities, notes, attachments, focus records and settings. It uses this information to display your planner, sync your devices, keep change history and provide the features you request.

Your browser also stores sign-in state, preferences, planner caches and local backups. These support continuity and recovery on that device. Use a trusted device and sign out when you finish on a shared one.

If you send feedback from Settings, Hajime stores your message, the page you were on and your account identifier, and keeps them until they are deleted. If you delete your account, the message stays but is no longer linked to it.

Optional Google connections

Google access starts only when you choose a connection feature and approve Google's consent screen. Hajime stores the connected Google account identifier, email address, granted permissions and encrypted access and refresh tokens. Tokens allow the approved features to continue working after a short-lived access token expires. Hajime does not receive your Google password.

• Account identity: your Google account identifier, email address and basic profile (the openid, email and profile permissions) confirm that each connection and renewal stays on the same Google account.
• Notes backup: when enabled, Hajime sends note text and attachments to your Google Drive, creating or updating Google Docs and files in a Hajime Notes folder. It stores backup file identifiers and progress so later runs can update existing copies. The permission (drive.file) is limited to the files and folders Hajime itself creates; Hajime cannot see or open your other Drive files. Backups are one-way: changes in Drive are not imported into Hajime, and deleting a note in Hajime does not delete its Drive backup.
• Calendar sync: Hajime requests the Google Calendar permission calendar.app.created to create and maintain a separate Hajime calendar. It writes dated tasks, recurring occurrences, follow-ups and reminders, and reads its own calendar events to reconcile changes. The permission covers only calendars Hajime creates; it cannot see or change your other calendars. Turning calendar sync off deletes the Hajime calendar and its events; it does not delete your tasks in Hajime.

Services that process information

Vercel hosts the app. Supabase provides account authentication, the planner database and attachment storage. Google processes information sent to Drive and Calendar when you enable those features. Your information is stored and processed by Supabase and Vercel in data centres that may be outside Australia. It is sent to Google only to provide the Calendar and Drive features you connect.

If you connect an external assistant, that service receives the planner information returned by the tools you authorize. If the optional in-app assistant is available and you use it, your conversation and the planner information retrieved for it are sent to Anthropic. The assistant provider's own privacy controls also apply. Using the planner alone does not send your notes to an AI provider. Hajime's in-app AI assistant is currently switched off, and this policy will be updated before any AI assistant feature is enabled.

Google data and Limited Use

Hajime uses Google user data to provide the connected features described here. Hajime's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Hajime does not sell Google user data, use it for advertising or use it to train general-purpose AI models.

Human access to Google data is limited to your specific consent, necessary security or bug investigations, legal obligations, or aggregated internal operations permitted by that policy. Google data is not made public by connecting your account.

Security and diagnostics

Hajime uses HTTPS, account-based data access rules and encryption for stored Google tokens. The hosting and database services process operational and security logs. The app can record error messages, stack traces, page paths, the app version, browser details and an account identifier (when you are signed in) to investigate failures. To limit abuse, it also stores a salted one-way hash derived from your network address and browser; your network address itself is not stored. Reports redact common credentials and email addresses, but an error can incidentally contain text entered in the app.

Error reports are meant to be deleted after about 30 days. Deletion runs as part of normal operation rather than on a fixed schedule, so a report can stay somewhat longer, for example when few errors are being reported. If you delete your account, remaining reports are no longer linked to it. No system can guarantee absolute security.

Your controls, retention and deletion

• You can edit planner records and use Settings to export planner data. Keep separate copies of important attachments and Drive backups.
• Disconnect Google in Settings to remove Hajime's stored Google connection and stop features relying on it. Existing backup records may remain. You can also revoke access from your Google Account connections. Disconnecting does not delete the backup files already in your Drive.
• Planner records are retained while needed for your account and selected features. Archived items, change history, local backups and copies in Google Drive can remain after an item disappears from an active view. Device copies can be removed by clearing the site's data; Drive copies can be managed directly in Google Drive.
• You can delete your account yourself in Settings. This removes your account, planner data, notes and attachments immediately and asks Google to revoke Hajime's connection. That revoke is best effort, so you can also remove Hajime at myaccount.google.com/permissions. Google Drive backups you created and the Hajime calendar remain in your own Google account for you to manage or delete there. Database backups are kept for a short period and then expire.
• If you cannot sign in, email hello@gethajime.com and we will delete your account for you. For access, correction or removal of stored data, use the same address. Identity may need to be checked before processing the request. Backup and security records may remain for their normal retention period or where legally required.

Policy changes

Updates will appear on this page with a revised date. If a change introduces a new use of Google data or requires additional access, Hajime will disclose it and request the necessary consent before using that access.