Privacy policy
Fibotree is a planning app: goals, tasks, routines and sprints, alone or with a team. This policy explains what we collect when you use the Fibotree app for iOS and Android, the fibotree command-line tool and this website, why, who else handles it, and how to remove it.
“We” means Hieu Tran Duc, who makes and runs Fibotree. Contact: contact@fibotree.com.
In short
- We keep your account and the plans you make so the app can work, on your phone and on our servers.
- The app sends usage statistics and crash reports to Google so we can see what is used and fix what breaks. Both are on by default and you can turn each off in Settings, under Privacy. Usage statistics never include what you write.
- No ads, no advertising ID, no tracking across other companies’ apps, and we do not sell your data.
- You can delete your account in the app. It is locked at once and erased 30 days later.
What we collect
Your account
- Your name and email address, and which way you sign in (Apple, Google or email and password).
- Your Firebase user ID, a random identifier Google Firebase gives your account.
- If you used Cando as a guest, your guest account and its data carried over to Fibotree with the same user ID.
What you put in Fibotree
- Workspaces and their names and settings, including the time zone, which the app takes from your phone.
- Goals, key results, tasks, checklists, routines, sprints, reflections and comments.
- Chat messages in shared workspaces.
- A history of changes in each workspace (Activity), which records who changed what and when.
People in a shared workspace see your name and everything you add there. In a personal workspace, only you do.
On your phone
The app keeps a copy of your workspaces in a database on your phone, so it works offline. That copy is removed when you sign out. Your appearance, language and privacy choices stay on the phone and are never sent to us.
Notifications
If you allow notifications, the app sends us a push token for your phone. A notification can contain a task’s title or the start of a chat message, which passes through the push services listed below on its way to your phone. The token is deleted when you sign out or delete your account.
The command-line tool
When you approve a sign-in for the fibotree tool, we keep a token for that computer. We store only a scrambled form (a SHA-256 hash), never the token itself. fibotree logout revokes it, and deleting your account revokes them all.
Usage statistics (Google Analytics)
When “Share usage statistics” is on:
- Which screens you open, as the screen’s pattern, for example
workspaces/[workspaceId]/stories/[storyRef]. Never the real IDs. - These actions only: signing in, signing up, making a goal, making a task, planning a sprint, and adding a note or a score to a reflection. Each says only whether it happened in a personal or a shared workspace, or how you signed in.
- What Google Analytics collects by itself: an ID for this install of the app (the app instance ID), when the app was first opened, sessions, app version, device model, operating system and language, and your country or region worked out from your IP address.
Usage statistics are not linked to your account: we never give Google Analytics your user ID, name or email. They never include titles, names, messages or anything else you write.
Crash reports (Firebase Crashlytics)
When “Send crash reports” is on and the app crashes or hits an error it cannot handle, it sends a report: what the code was doing (a stack trace), device model, operating system, app version, free memory and disk space, and an ID for this install. While you are signed in, the report also carries your Firebase user ID, so that when you ask us about a problem we can find your crash.
Server logs
Our servers keep short-lived technical logs of requests, which include IP addresses, to keep the service running and secure. Cloudflare Workers Logs keep them for at most 7 days.
This website
fibotree.com sets no cookies and asks for nothing. Cloudflare Web Analytics counts visits without cookies and without identifying you: the page, where you came from, your browser and device type, and your country worked out from your IP address. Cloudflare, which serves the site, handles your IP address to deliver its pages and protect it from attacks.
What we do not collect or do
- No advertising, and no advertising ID (IDFA or Android advertising ID). The app does not ask to track you.
- No contacts, photos, location from your phone’s GPS, microphone or health data.
- We do not sell or rent personal data, and we do not use it to build advertising profiles.
Why we use it
| Purpose | Data | Legal basis (EU and UK) |
|---|---|---|
| Running your account and your plans, syncing your devices, sharing with your team | Account, what you put in Fibotree, push and CLI tokens | Our contract with you |
| Fixing crashes | Crash reports | Our legitimate interest in a working app; you can turn it off |
| Learning which parts of the app are used | Usage statistics | Our legitimate interest in improving the app; you can turn it off |
| Keeping the service secure | Server logs | Our legitimate interest in security |
| Notifications | Push token | Your permission, which you can withdraw in your phone’s settings |
Who else handles your data
We use these services to run Fibotree. Each handles data only to provide its service to us.
| Service | What it does | Data it handles |
|---|---|---|
| Google Firebase Authentication | Sign-in and account security; sends verification and password reset emails | Account details |
| Google Analytics for Firebase | Usage statistics | Usage statistics |
| Firebase Crashlytics | Crash reports | Crash reports, Firebase user ID |
| Cloudflare (Workers, D1, Web Analytics) | Hosts our API, database and this website; counts website visits | Everything stored on our servers, server logs, website visits |
| Expo push service, Apple Push Notification service, Firebase Cloud Messaging | Delivers notifications | Push token, notification text |
| Sign in with Apple, Google Sign-In | Signing in, if you choose them | What you agree to share with us when you sign in |
These services may process data outside your country, including in the United States. They protect it with safeguards such as the EU Standard Contractual Clauses, and Google and Cloudflare also take part in the EU-US Data Privacy Framework.
We will disclose data if the law requires it.
How long we keep it
- Your account and plans: until you delete your account or a workspace.
- Deleting your account: it is locked at once: you are signed out, your CLI and push tokens stop, and the app refuses the account. 30 days later we erase it: your Firebase sign-in, every workspace where you are the only person, and your account. A guest account is erased within the hour. Until then you can sign in again and keep it.
- Shared workspaces after you leave: your tasks, comments, messages and Activity there stay for the team, shown as “Deleted member”, not your name. If you were the only owner, the person who joined earliest becomes owner.
- Deleted items: when something is deleted, we keep a record of its ID, without its content, for 90 days so other devices learn it is gone.
- Crash reports: 90 days. Deleting your account does not erase crash reports already sent.
- Usage statistics: for the retention period set in Google Analytics, at most 14 months.
- Backups: Cloudflare D1 keeps a point-in-time history of our database for up to 30 days, so deleted data leaves the backups within 30 days.
- Cando: Fibotree uses the same sign-in as Cando, so deleting your Fibotree account also ends your sign-in to the old Cando app. We keep a scrambled form (SHA-256) of a deleted account’s user ID so a later move of Cando data never brings the account back.
Your choices and rights
- Usage statistics and crash reports: turn either off in Settings, under Privacy. Turning off usage statistics also resets the app’s analytics ID; turning off crash reports also drops reports not yet sent. The choice is kept on that phone.
- Notifications: turn them off in your phone’s settings.
- Your name: change it in Settings.
- Delete your account: in Settings, Delete account. If you can no longer open the app, email contact@fibotree.com from the address on the account; this page explains what happens.
- Other requests: depending on where you live, you may have the right to see, correct, move or delete your data, to object to or limit how we use it, and to complain to your data protection authority. Email contact@fibotree.com and we will answer within 30 days.
Security
Data travels encrypted (HTTPS). Every request is checked against your membership of the workspace. Command-line tokens are stored only as hashes. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.
Children
Fibotree is not directed at children under 13, or under the older age some countries set for agreeing to this alone (up to 16 in parts of the EU), and we do not knowingly collect their data. If you believe a child has given us data, email contact@fibotree.com and we will delete it.
Changes
If we change what we collect or why, we will update this page and its effective date before the change reaches the app, and say so in the app’s update notes.
Contact
Hieu Tran Duc, contact@fibotree.com.