Introduction
Znift is operated by Hexleap Private Limited, a company registered in India. This Privacy Policy explains how we collect, use, and protect your information when you use our task management service.
For questions about this policy, contact us at [email protected]. You can also learn more about Hexleap at hexleap.com (opens in new tab).
Information We Collect
Account Information
When you sign up, we collect your email address to create and manage your account.
Profile Information
You may optionally provide a username, bio, and avatar image to personalize your profile.
Task Data
We store the tasks you create, including text content, dates, priorities, time spent, and any additional details you add.
Google Calendar Data
If you connect Google Calendar, we store encrypted OAuth tokens to access your calendar. We only access events in the Znift-specific calendar we create.
Usage Analytics
We use PostHog to collect analytics about how you use Znift, including page views and feature usage. This helps us improve the service.
Cookies
We use essential cookies for authentication sessions and analytics cookies for PostHog. You can manage cookie preferences in your browser settings.
How We Use Your Information
- To provide and maintain the Znift service
- To improve and develop new features based on usage patterns
- To process payments when premium features become available
- To communicate service updates and respond to support requests
Google Calendar Integration
When you connect Google Calendar to Znift:
- We create a dedicated “Znift” calendar in your Google account
- We only read, create, update, and delete events within this Znift calendar
- Each event we create uses your task title as its name and your task details as its description, so that task content is transmitted to and stored by Google
- We do not access your other Google calendars or personal events
- OAuth tokens are encrypted before storage
- You can revoke access at any time through your Google account settings or Znift settings
Data Sharing
We do not sell your personal information. We share data only with:
- Convex: Our database and backend provider, which hosts and stores all of your task data
- Resend: Delivers our emails, including sign-in links and task reminders. Reminder subject lines include your task titles
- Browser push services: When you enable push notifications, the push service of your browser vendor (Google, Mozilla, or Apple) delivers them, and the notification includes your task title
- Google: For calendar integration when you connect your account
- PostHog: For analytics and product improvement
- Stripe: For payment processing when premium features launch
- Legal requirements: When required by law or to protect our rights
Data Storage & Security
Your data is stored on servers in the United States through Convex, our database provider. All data is encrypted in transit using TLS and encrypted at rest using 256-bit AES, including our databases, file storage, and search indexes. OAuth tokens for third-party integrations are separately encrypted before storage.
Znift is not end-to-end encrypted. We hold the encryption keys, which means our systems can read your task content in order to provide search, reminders, and calendar sync. Access to production data is limited to personnel who need it.
Your Rights
You have the right to:
- Access your data: Contact us to request a copy of your data
- Delete your account: Contact us to request deletion of your account and associated data
- Disconnect integrations: Remove Google Calendar access through your settings at any time
Children’s Privacy
Znift is intended for users aged 13 and older. We do not knowingly collect information from children under 13. If we learn we have collected data from a child under 13, we will delete it promptly.
Changes & Contact
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the service.
For questions or concerns about this policy, contact us at [email protected].