← Back to Restivity

Privacy Policy

Last updated: 2026-04-30

1. Introduction

Restivity ("we", "our", "us") is a productivity application that helps you manage tasks, projects, and time. This Privacy Policy explains how we collect, use, and protect your information when you use our service at restivity.app.

2. Information We Collect

We collect the following types of information:

  • Account information: When you sign up, we collect your email address, display name, and profile photo (if provided via Google sign-in).
  • App data: Tasks, projects, work sessions, and settings you create within the application.
  • Google Calendar data:If you connect your Google account, we access your calendar events to display them alongside your tasks. We can also create or delete calendar events you explicitly ask us to manage from a task using the "Add to Calendar" button. We never modify events you did not create through Restivity.
  • Usage data: Basic analytics to improve the service (page views, feature usage) via Vercel Analytics.

3. How We Use Your Information

  • To provide and maintain the Restivity service
  • To authenticate your identity and secure your account
  • To display your Google Calendar events within the app (with your permission)
  • To improve the application based on usage patterns

4. Data Storage and Security

Your data is stored securely using Supabase (PostgreSQL) with row-level security policies. All data is transmitted over HTTPS. We do not sell, rent, or share your personal data with third parties.

5. Third-Party Services

We use the following third-party services:

  • Supabase: Authentication and database hosting (EU region)
  • Vercel: Application hosting and analytics
  • Google: OAuth sign-in and Calendar integration (optional)
  • Sentry: Error tracking. Receives exception stack traces and breadcrumbs strictly when an error occurs. OAuth secrets and request bodies are scrubbed before transmission.
  • BetterStack: Operational diagnostics (EU region — Frankfurt). Receives anonymous OAuth event metadata (event name, OAuth client identifier, error code) for service-quality monitoring. No user identifiers, IP addresses, or request bodies are transmitted.
  • Third-party agents (Dynamic Client Registration, RFC 7591): When you authorize a third-party AI tool (e.g. Claude.ai, ChatGPT, Cursor) to connect to your Restivity account through its native Custom Connector / MCP UI, the tool registers itself with Restivity at the moment you paste the connector URL. The tool becomes a sub-processor for as long as you keep it connected and receives ONLY the data covered by the OAuth scopes you explicitly authorize on the consent screen (e.g. `tasks:read`). Vendor-supplied metadata (display name, logo, terms-of-service URL, privacy-policy URL) is stored to render the consent screen and to audit-trail any abuse incidents. You can revoke the integration at any time via Settings → Integrations or via your account permissions on the third-party side.

6. Google User Data

Restivity's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Data Accessed

When you sign in with Google or connect your Google account, Restivity accesses:

  • Basic profile information: Your name, email address, and profile photo, used solely to create and display your Restivity account.
  • Google Calendar events:If you grant calendar access, we retrieve your calendar events to display them alongside your tasks within the app, and we can create or delete events you explicitly ask us to create from a task (the "Add to Calendar" timeboxing button). We request the calendar.events scope, meaning we can read, create, and delete events on your calendar. We never create, edit, or delete events you did not ask us to manage from inside Restivity.

Data Usage

Google user data is used exclusively to:

  • Authenticate your identity and maintain your session
  • Display your name and profile photo within the Restivity interface
  • Show your Google Calendar events in the Restivity calendar view

Data Storage and Sharing

  • Google Calendar event data is fetched in real-time and is not permanently stored in our database.
  • Your Google profile information (name, email, photo URL) is stored in your Restivity user profile.
  • We do not sell, share, or transfer your Google user data to any third party.
  • We do not use your Google user data for advertising or profiling purposes.

Revoking Access

You can disconnect your Google account from Restivity at any time through your account settings. You can also revoke Restivity's access directly from your Google Account Permissions.

7. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and associated data
  • Disconnect third-party integrations (e.g., Google Calendar) at any time

8. Cookies

We use essential cookies for authentication and session management. We do not use third-party tracking cookies.

9. Changes to This Policy

We may update this policy from time to time. We will notify users of significant changes via the application.

10. Contact

If you have questions about this privacy policy, contact us at privacy@restivity.app.