Privacy & data

Watchtower stores your Google account ID, name and email to identify your account. Your goals, tasks, reflections and weekly history are private to your account.

Your Todoist connection

If you connect Todoist, its API token is encrypted on the server. Watchtower reads your previous weekly projects when you request a refresh and creates a new weekly project only when you send a reviewed plan. Disconnecting removes the saved token. Copies already sent to Todoist remain there.

Where data lives

Cloudflare hosts the application and database. Google handles sign-in. Todoist receives the plans you explicitly send. Amplitude receives product usage events, such as signing up, finishing a plan and completing a task, with pseudonymous account and browser identifiers. Goal names, task text, descriptions, reflections, search queries, Google profile details and Todoist tokens are not included. We do not use advertising trackers, session replay or automatic input capture. Analytics identifiers are stored in your browser to connect visits.

Your controls

You can export your data and delete your account from the account controls in the app. Deletion removes the active Watchtower records, saved token and sessions. A minimal account marker prevents in-flight requests from restoring deleted data. Provider backups may retain data for their configured retention period. Watchtower account deletion does not delete your Google or Todoist accounts.

Questions

Contact sergio.schuler@gmail.com about this app or your data.