Privacy policy

Fibotree is a planning app: goals, tasks, routines and sprints, alone or with a team. This policy explains what we collect when you use the Fibotree app for iOS and Android, the fibotree command-line tool and this website, why, who else handles it, and how to remove it.

“We” means Hieu Tran Duc, who makes and runs Fibotree. Contact: contact@fibotree.com.

In short

We keep your account and the plans you make so the app can work, on your phone and on our servers.
The app sends usage statistics and crash reports to Google so we can see what is used and fix what breaks. Both are on by default and you can turn each off in Settings, under Privacy. Usage statistics never include what you write.
No ads, no advertising ID, no tracking across other companies’ apps, and we do not sell your data.
You can delete your account in the app. It is locked at once and erased 30 days later.
When you mention Fibotree in a note, or ask it in My notes, that note’s messages or your recent notes in My notes, the workspace’s open goals, your routines that have a set time, your open tasks in that workspace, and the item or message you asked about are sent to Groq, through Cloudflare AI Gateway, to draft a goal, tasks or routines, or to answer a question. Nothing is sent unless you mention it or ask it: notes in My notes are never sent unless you ask Fibotree there. The app asks you to accept this the first time. My notes is private to you; no one else in the workspace can read it.
You can connect an app you use, such as Claude, to Fibotree. It then reads everything you can read in every workspace you are in, and can write notes, including drafted routines that you create in the app, until you remove it in Settings. What it receives is handled by that app’s provider under your agreement with them.

What we collect

Your account

Your name and email address, and which way you sign in (Apple, Google or email and password).
Your Firebase user ID, a random identifier Google Firebase gives your account.
If you used Cando as a guest, your guest account and its data carried over to Fibotree with the same user ID.

What you put in Fibotree

Workspaces and their names and settings, including the time zone, which the app takes from your phone.
Goals, key results, tasks, checklists, routines, sprints, reflections and comments.
Chat messages in shared workspaces.
A history of changes in each workspace (Activity), which records who changed what and when.

People in a shared workspace see your name and everything you add there. In a personal workspace, only you do. If someone in a shared workspace connects an app such as Claude, that app can read what they can read there, including what you add.

On your phone

The app keeps a copy of your workspaces in a database on your phone, so it works offline. That copy is removed when you sign out. Your appearance, language and privacy choices stay on the phone and are never sent to us.

Notifications

If you allow notifications, the app sends us a push token for your phone. A notification can contain a task’s title, the start of a chat message, or the start of Fibotree’s answer to your question, which passes through the push services listed below on its way to your phone. In Settings, under Notifications, you can turn off notifications for shared chats, mentions and Fibotree’s answers. The token is deleted when you sign out or delete your account.

When you mention Fibotree in a note, or ask it

Fibotree can draft a goal, tasks for a goal you already have, or a set of weekly routines, when you mention it in a note, and it answers questions and drafts the same things in My notes, your private thread in each workspace, when you ask it there. A message in My notes is a note to yourself and is sent nowhere, unless you turn on Ask Fibotree or write @Fibotree in it. Before the first time, and once more when what is sent has grown, the app shows a notice that says what is sent, and nothing is sent until you accept it.

What we send:

The messages in that note, or your recent notes in My notes (at most the last 50 messages there, with Fibotree’s answers), with the sender’s display name.
The workspace’s open goals: their names, emoji, short descriptions, key results, and how many tasks in each are open and done.
Your routines that have a set time, and those with a set time that no one owns, leaving out paused ones: their titles, days and times, so new routines do not clash with them.
The workspace’s time zone and today’s date.
When you ask in My notes only: your open tasks in that workspace (key, title, state, due date, goal and sprint, at most 80), and the item you asked about, if the message names one: a task with its description and checklist, a goal, a sprint, a routine, or a message, sent with its author’s display name, where it was written (the chat, the note’s title or My notes) and its text.

Nothing else about the workspace is sent: no other tasks, no other routines, no sprints beyond the item you asked about, no chat messages from elsewhere beyond a message you asked about, no email addresses and no tokens. A note in My notes is sent only among your recent notes when you ask there; if you never ask, it is never sent. Drafted routines create nothing until you tap Create routines in the app. My notes is private to you: no one else in the workspace, not even its owner, can read it.

The request goes through Cloudflare AI Gateway, run by Cloudflare, to Groq, which runs the model that writes the draft. Cloudflare AI Gateway keeps a log of each request, including what was sent and what came back, so we can see what the feature costs and whether it is working. The draft itself is stored in Fibotree with the note it came from, until you accept it, dismiss it or delete the note.

Groq’s services agreement says it does not access, use, store or keep what is sent except as needed to run the service, to keep it reliable, to check it is not being misused, or to follow the law. Its data policy says inference requests are not kept by default, and that any log kept to troubleshoot a problem or look into misuse is deleted within 30 days. Anything Groq does keep is held in the United States.

The command-line tool

When you approve a sign-in for the fibotree tool, we keep a token for that computer. We store only a scrambled form (a SHA-256 hash), never the token itself. fibotree logout revokes it, and deleting your account revokes them all.

Apps you connect, such as Claude

You can connect an app such as Claude to Fibotree. The app opens a Fibotree page that shows a code, and nothing is connected until you approve that code in the Fibotree app. The page shows the app’s name, what it will be allowed to do, and where its access is sent.

Once connected, the app acts as you:

It can read everything you can read in every workspace you are in: goals, key results, tasks with their checklists and comments, sprints, routines and notes, including what other people in shared workspaces add.
If you allowed it, it can create notes and post messages in them. They show as yours. It can also post drafted routines in a note: a set of weekly routines with times, which become routines only when you tap Create routines in the app. It cannot change your goals, tasks, routines or sprints, and it cannot mention people.

What it reads is sent to that app’s provider (for Claude, Anthropic), when the app asks for it, under your own account and agreement with them. That provider is not one of our service providers, and their privacy policy covers what happens to it there.

What we keep: the name the app gave itself, when you approved it and what you allowed, and its access tokens, stored only as scrambled forms (hashes) in Cloudflare. We also keep a record of each code request: the code, the app’s name, whether it was approved and by whom.

Usage statistics (Google Analytics)

When “Share usage statistics” is on:

Which screens you open, as the screen’s pattern, for example workspaces/[workspaceId]/stories/[storyRef]. Never the real IDs.
These actions only: signing in, signing up, making a goal, making a task, planning a sprint, and adding a note or a score to a reflection. Each says only whether it happened in a personal or a shared workspace, or how you signed in.
What Google Analytics collects by itself: an ID for this install of the app (the app instance ID), when the app was first opened, sessions, app version, device model, operating system and language, and your country or region worked out from your IP address.

Usage statistics are not linked to your account: we never give Google Analytics your user ID, name or email. They never include titles, names, messages or anything else you write.

Crash reports (Firebase Crashlytics)

When “Send crash reports” is on and the app crashes or hits an error it cannot handle, it sends a report: what the code was doing (a stack trace), device model, operating system, app version, free memory and disk space, and an ID for this install. While you are signed in, the report also carries your Firebase user ID, so that when you ask us about a problem we can find your crash.

Server logs

Our servers keep short-lived technical logs of requests, which include IP addresses, to keep the service running and secure. Cloudflare Workers Logs keep them for at most 7 days.

This website

fibotree.com sets no cookies and asks for nothing. Cloudflare Web Analytics counts visits without cookies and without identifying you: the page, where you came from, your browser and device type, and your country worked out from your IP address. Cloudflare, which serves the site, handles your IP address to deliver its pages and protect it from attacks.

What we do not collect or do

No advertising, and no advertising ID (IDFA or Android advertising ID). The app does not ask to track you.
No contacts, photos, location from your phone’s GPS, microphone or health data.
We do not sell or rent personal data, and we do not use it to build advertising profiles.

Why we use it

Purpose	Data	Legal basis (EU and UK)
Running your account and your plans, syncing your devices, sharing with your team	Account, what you put in Fibotree, push and CLI tokens	Our contract with you
Fixing crashes	Crash reports	Our legitimate interest in a working app; you can turn it off
Learning which parts of the app are used	Usage statistics	Our legitimate interest in improving the app; you can turn it off
Keeping the service secure	Server logs	Our legitimate interest in security
Notifications	Push token	Your permission, which you can withdraw in your phone’s settings
Drafting a goal, tasks or routines from a note you mention Fibotree in, and answering or drafting when you ask in My notes	The note’s messages or your recent notes in My notes, the workspace’s open goals, your routines that have a set time, your open tasks in that workspace, and the item or message you asked about	Your permission, which you give when you accept the notice; after that, our contract with you
Letting an app you connect, such as Claude, read your plans and write notes, including drafted routines	What you can read in Fibotree; the connection’s record and tokens	Your permission, which you give when you approve the code; you can withdraw it by removing the connection

Who else handles your data

We use these services to run Fibotree. Each handles data only to provide its service to us.

Service	What it does	Data it handles
Google Firebase Authentication	Sign-in and account security; sends verification and password reset emails	Account details
Google Analytics for Firebase	Usage statistics	Usage statistics
Firebase Crashlytics	Crash reports	Crash reports, Firebase user ID
Cloudflare (Workers, D1, KV, Web Analytics)	Hosts our API, database, connection records and this website; counts website visits	Everything stored on our servers, server logs, website visits
Expo push service, Apple Push Notification service, Firebase Cloud Messaging	Delivers notifications	Push token, notification text
Sign in with Apple, Google Sign-In	Signing in, if you choose them	What you agree to share with us when you sign in
Cloudflare AI Gateway	Passes a draft request to the model and logs it	The messages, open goals, routines, open tasks and the item or message asked about, described above
Groq	Runs the model that writes the draft	The messages, open goals, routines, open tasks and the item or message asked about, described above

An app you connect yourself, such as Claude, is not on this list: you choose it and its provider handles what it reads under your agreement with them, not on our behalf.

These services may process data outside your country, including in the United States. They protect it with safeguards such as the EU Standard Contractual Clauses, and Google and Cloudflare also take part in the EU-US Data Privacy Framework. Groq keeps what it retains in the United States and offers the Standard Contractual Clauses for transfers to it.

We will disclose data if the law requires it.

How long we keep it

Your account and plans: until you delete your account or a workspace.
Deleting your account: it is locked at once: you are signed out, your CLI and push tokens stop, and the app refuses the account. 30 days later we erase it: your Firebase sign-in, every workspace where you are the only person, and your account. A guest account is erased within the hour. Until then you can sign in again and keep it.
Shared workspaces after you leave: your tasks, comments, messages and Activity there stay for the team, shown as “Deleted member”, not your name. If you were the only owner, the person who joined earliest becomes owner.
Deleted items: when something is deleted, we keep a record of its ID, without its content, for 90 days so other devices learn it is gone.
Crash reports: 90 days. Deleting your account does not erase crash reports already sent.
Usage statistics: for the retention period set in Google Analytics, at most 14 months.
Backups: Cloudflare D1 keeps a point-in-time history of our database for up to 30 days, so deleted data leaves the backups within 30 days.
Cando: Fibotree uses the same sign-in as Cando, so deleting your Fibotree account also ends your sign-in to the old Cando app. We keep a scrambled form (SHA-256) of a deleted account’s user ID so a later move of Cando data never brings the account back.
Drafts and their requests: a draft is kept with its note until you accept it, dismiss it or delete the note. Cloudflare AI Gateway keeps its log of the request for the period set on the gateway. Groq keeps nothing from a draft request by default, and at most 30 days if it needs to troubleshoot a problem or look into misuse.
Connected apps: a connection lasts until you remove it in Settings, or until it has gone 30 days unused. Deleting your account removes every connection at once. A record of an approved code request is erased with your account.

Your choices and rights

Usage statistics and crash reports: turn either off in Settings, under Privacy. Turning off usage statistics also resets the app’s analytics ID; turning off crash reports also drops reports not yet sent. The choice is kept on that phone.
Notifications: turn them off in your phone’s settings.
Connected apps: see and remove them in Settings, under The CLI and connectors. Removing one stops it at once. If your version of the app does not show them yet, email contact@fibotree.com and we will remove a connection for you; deleting your account also removes them all.
Your name: change it in Settings.
Delete your account: in Settings, Delete account. If you can no longer open the app, email contact@fibotree.com from the address on the account; this page explains what happens.
Other requests: depending on where you live, you may have the right to see, correct, move or delete your data, to object to or limit how we use it, and to complain to your data protection authority. Email contact@fibotree.com and we will answer within 30 days.

Security

Data travels encrypted (HTTPS). Every request is checked against your membership of the workspace. Command-line tokens and connected apps’ tokens are stored only as hashes. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.

Children

Fibotree is not directed at children under 13, or under the older age some countries set for agreeing to this alone (up to 16 in parts of the EU), and we do not knowingly collect their data. If you believe a child has given us data, email contact@fibotree.com and we will delete it.

Changes

If we change what we collect or why, we will update this page and its effective date before the change reaches the app, and say so in the app’s update notes.

Contact

Hieu Tran Duc, contact@fibotree.com.