← Back to Doubly

Privacy Policy

Last updated: September 15, 2026

This policy explains what data Doubly collects, why we collect it, who else gets it, and what you can do about it. We wrote it in plain language. If something is not clear, email us at amit@usedoubly.com.

1. Who We Are and What This Policy Covers

Doubly is run by Amit Rabani. He is the "controller" of your data. That means he decides why and how your data is used.

Contact: amit@usedoubly.com

This one policy covers all of Doubly:

  • The Doubly iPhone app.
  • The Doubly web app at app.usedoubly.com.
  • This website, usedoubly.com, including the free tools, the body-doubling room and the Android waitlist. The Android app is not out yet.
  • The Doubly WhatsApp bot.
  • Phone reminders: reminder calls and the daily update call.

The iPhone app, the web app, the WhatsApp bot and phone reminders all use the same Doubly account.

2. What We Collect and Why

The law asks us to name a "legal basis" for each way we use your data. We use these:

  • Contract: we need the data to run Doubly and the features you turn on.
  • Legitimate interests: we have a real reason, like fixing bugs, and we weighed it against your privacy. You can object at any time.
  • Consent: you said yes. You can take it back at any time.

2.1 Your account

  • Your first name, last name, display name and email address.
  • If you use Sign in with Apple, the name and email Apple shares with us. The email can be a private relay address from Apple.
  • If you use Google sign-in, your name and email from Google.
  • You can also start without an email. We still create an account with a user ID.
  • Answers you give during onboarding: what you tend to forget, the daily habits you pick and how many tasks make a good day for you. Some older accounts also have an answer about how you describe yourself.

Legal basis: Contract. We need this to create your account and set up the app for you.

2.2 What you put into Doubly

  • Tasks: titles, due dates, subtasks, notes, spaces and task settings.
  • Brain dumps you type or say.
  • Facts about your life. You can type them yourself. The AI also saves up to 3 short facts it finds in each brain dump and daily update call, without asking you first. You can see and remove them in Settings > What Doubly remembers.
  • Day plans, schedule blocks, habits and focus sessions.
  • Households: everyone in your household can see, change and delete every task in it, with its subtasks and place, even tasks marked private. They can also read the notes on those tasks. People you add to a single task can see and change that task.
  • The feed: posts, photos, comments, likes, follows, close friends and blocked users. Photos are uploaded to a public storage folder. Anyone who has a photo's web address can open it.
  • If you set a task to public or close friends, Doubly posts it to the feed. It also sends the task title to your close friends and, for a public task, to people who follow you.
  • Task sets you create are public. Any Doubly user can see them and add them, and Doubly posts each new set to the feed.
  • Chats with the in-app assistant. When the assistant fails, you can choose to send us a report. It holds the error, your message and your recent messages. It also holds the steps the assistant took, any note you add, your app version, platform and time zone.
  • Push notification tokens, so we can send reminders to your phone or browser.

Legal basis: Contract. We need this to run the features you use.

2.3 AI features

Many Doubly features use AI from OpenAI. To make them work, we send OpenAI some of the following, depending on the feature:

  • your name
  • task titles, subtasks and schedule blocks
  • a summary of your week
  • facts about your life that Doubly saved
  • the names of your spaces, habits and task sets
  • the names of people in your household and of your friends
  • your time zone and local time
  • your chat history with the assistant
  • brain dump text, with any mood tags you picked
  • messages you send to the WhatsApp bot, with your tasks (see section 3.3)
  • what you say during the daily update call, as text

Some in-app assistant and brain dump requests first go through n8n, a workflow tool we run on Render. n8n then sends them to OpenAI.

Legal basis: Contract. The AI is part of the features you choose to use.

2.4 Analytics and error tracking

We use PostHog to see how people use Doubly and to find bugs. PostHog gets:

  • Your user ID, and events about what you do in the app.
  • When you tap something in the iPhone app, the text on it. That text can be a task title.
  • Your first name, when you enter it during sign-up.
  • Your onboarding answers about what you tend to forget.
  • Your IP address and a rough location worked out from it, usually a city.
  • If you came from an ad, which ad campaign AppsFlyer matched your install to.
  • Purchase events, with the price.
  • App errors that were not handled, and error messages.
  • Events our servers send about you, such as a reminder being sent, trial and subscription changes, and WhatsApp use.
  • In the web app, only after you click Accept in its cookie banner (section 6): the pages you open (with the full web address), when you leave a page, how far you scroll and how long you stay on a page, the theme you pick, and page speed measurements. The web app does not record your screen and does not send your email. It does not send the text of what you click. It also does not send where you click or move your mouse, because that tracking (called heatmaps) is turned off in our PostHog settings. Surveys are turned off there too. After you click Accept, the web app keeps your PostHog ID in browser storage and in a cookie that is set for all of usedoubly.com. If you also click Accept on usedoubly.com, PostHog can link your visits there to your Doubly account (section 6).
  • Screen recordings of some iPhone app sessions. See section 4.

Legal basis: Legitimate interests. We need this to improve Doubly and fix problems. You can object by emailing amit@usedoubly.com. In the web app, the legal basis is consent: PostHog only runs there after you click Accept. You can change your choice with "Cookie settings" in the web app (section 6).

2.5 Health-related answers (optional)

Some things you can tell Doubly may say something about your health:

  • Mood check-ins: a mood score from -5 to 5, feelings like "anxious", "overwhelmed" or "brain fog", and notes you write.
  • Mood tags you add to a brain dump. These go to OpenAI with the brain dump text.
  • Picking "medication" as something you tend to forget. This answer is also sent to PostHog.

These answers are optional. We use them to run the features where you give them, and the medication answer also appears in our analytics.

Legal basis: Consent, which you give by choosing to add these answers. To take it back, email amit@usedoubly.com and we will delete them.

2.6 Ad measurement

We measure which ads bring people to the iPhone app. See section 5 for what this involves.

Legal basis: Legitimate interests: we need to know which ads work. You can object by emailing amit@usedoubly.com. Apple's tracking prompt controls only two parts. Your phone shares Apple's advertising ID only if you choose "Allow". And if you choose "Ask App Not to Track", your purchase and trial events are not passed on to ad platforms.

2.7 Emails, messages and push notifications

  • Sign-in emails, such as a password reset, are sent by Supabase.
  • A reminder before your free trial ends is sent by email through Brevo.
  • Check-in emails. These are for accounts that are 1 to 5 days old, when Doubly cannot send push notifications. We may send up to 2 emails about your task list through Brevo. An email can say how many saved tasks you have. We are still testing these emails. For now they are not sent to you. They go to our own inbox, at Gmail, with your email address in the subject line.
  • If you connected WhatsApp, we may send you a WhatsApp message on your second day, or an update we send to everyone who connected.
  • Push notifications that are not task reminders. In your first days, you can get up to 2 nudges if you have created or finished only a few tasks. There is a daily reflection that asks how you feel, and a weekly planning reminder if you asked for one. There is a "Save my day" offer when you missed parts of your plan for the day. If an App Store renewal fails, we may send up to 3 push messages telling you the payment did not go through. And sometimes there is an offer, such as a free week. PostHog records which message you got.

Legal basis: Contract for sign-in and trial emails. Legitimate interests for the check-in emails, the WhatsApp messages and these push notifications. You can object at any time by emailing amit@usedoubly.com. You can turn off push notifications in the app's notification settings or in your iPhone's settings. Daily reflection, Save my day and Payment problem alerts also have their own switches in the app.

2.8 Support, feedback and deletion records

  • Messages you send from the Support screen: the subject, message, your email, app version, platform and language setting.
  • Feedback notes you write in the app, and feature ideas you send us.
  • When you delete your account: the reason you pick, any note you write, your email, whether you had a paid subscription, and your app version, platform and language. PostHog also gets an event with the reason and whether you had a paid subscription.
  • Reports about content in the feed, with a copy of the reported content. We save each report so we can review it.

Legal basis: Legitimate interests. We use these records to answer you, to keep the feed safe, and to handle disputes, for example about a purchase after an account was deleted.

2.9 Security

On this website, the Brain Dump and Task Splitter tools use your IP address to limit how many requests one visitor can send per minute. The IP address is only held in server memory for this. Our code does not log it or save it in a database. Our hosting provider, Vercel, keeps its own request logs.

Legal basis: Legitimate interests. We need this to stop abuse of the free tools.

2.10 The website

Analytics and ad cookies on usedoubly.com only run if you click Accept in the cookie banner. See section 6. The free tools, the body-doubling room and the Android waitlist are covered in sections 7, 8 and 9.

Legal basis: Consent for analytics and ad cookies. Contract for the tools and the room you choose to use.

2.11 What you have to give us

No law makes you give us data. To use the app, Doubly creates an account with a user ID. Everything else you give is optional. But a feature cannot work without the data it needs. For example, without a phone number you get no reminder calls, and without location access you get no place reminders.

3. Optional Features

3.1 Google Calendar (iPhone app)

You can connect Google Calendar in the iPhone app, under Settings > Account > Integrations > Google Calendar. The web app does not have this feature. When you connect, the app shows your upcoming events as a list, with all of them ticked. The events you keep ticked become tasks when you tap Import. Connecting also turns on two-way sync with a calendar called "Doubly". There is no separate step for sync.

What Google asks you to allow: Full access to Google Calendar. Google describes it as: "See, edit, share, and permanently delete all the calendars you can access using Google Calendar." Google also asks to share your basic profile and email address with Doubly.

Import: Your phone reads events on your main calendar, from the start of today up to 60 days ahead, at most 250 events. For each event it reads the title, start and end time, whether it is cancelled, and whether it is marked as free. It skips cancelled events, free events, events with no title, and events that match a task you already have on the same day. It shows you the rest. Only the events you keep ticked become tasks in your account, and only when you tap Import. The import runs on your phone.

The Doubly calendar: When you connect, our server reads your list of calendars once. If you have no calendar called "Doubly", it creates one. If you already have a calendar with that name, Doubly uses that one. After that, our server only reads the Doubly calendar.

What Doubly writes to Google: About every 10 minutes, and right after you change a space's calendar setting in the app, Doubly adds, changes and deletes events in the Doubly calendar. It does this for tasks you chose to put on your calendar, one by one or for a whole space. Each event holds the task title (with a check mark once it is done), and its start and end time. It also holds a link that opens the task in Doubly, and Doubly's own ID for the task. And it holds a hidden check value built from the task title, time, time zone and length. Doubly deletes an event when the task is taken off the calendar, when it is done before its start time, or when the task is gone. Doubly only adds, changes or deletes events in the Doubly calendar.

What Doubly reads back from Google: Google tells our server when the Doubly calendar changes. Our server then reads the changes, including deleted events. The first read goes back 30 days. If you rename an event that belongs to a task, the task title changes. If you move or resize it, the task's time and length change, and the move is saved in the task's history. If you delete the event, the task is taken off your calendar.

What we store: Your Google account ID and email, which calendar Doubly uses, sync status and errors, and the link between each task and its event. That link includes a check value built from the task title, time, time zone and length. Imported events are saved as tasks marked as coming from Google Calendar.

AI: Raw data from Google is not sent to AI. But imported events become normal tasks. Their titles and dates can be sent to OpenAI like any other task. For example, they are used for daily suggestions of tasks to prepare, and in the chat planner.

Disconnecting: When you tap Disconnect Google in the app, Doubly stops listening for changes. It asks Google to remove Doubly's access, and deletes the connection and the task-event links. It does not delete the Doubly calendar or its events from Google. You can delete that calendar yourself in Google Calendar. Tasks you imported stay in your account until you delete them. You can also remove Doubly's access at myaccount.google.com/permissions.

Deleting your account: This deletes the connection records in Doubly. It does not remove Doubly's access at Google, so please remove it at the link above.

Legal basis: Contract. You choose to connect Google Calendar.

3.2 Calendar on your iPhone

The iPhone app can also put your tasks in your phone's own calendar. You turn this on in Settings > Account > Integrations > Calendar, or with "Add a block" on a task. It only runs while Google Calendar is not connected.

What your iPhone asks you to allow: Full access to your calendars.

The Doubly calendar: The app reads the list of calendars on your phone. If there is no "Doubly" calendar that it can change, it creates one in your default calendar account. That is often iCloud, but it can also be Google, Exchange or another account. The company behind that account then stores the calendar and can sync it to your other devices.

What Doubly writes: The app adds, changes and deletes events in the Doubly calendar for tasks that are set to be on the calendar. These can include tasks in your household's spaces, not only your own. Each event holds the task title (with a check mark once it is done), and its start and end time. It also holds a note with a link that opens the task in Doubly. The app does this each time your tasks change and each time you open the app.

What Doubly reads: The app checks that it does not make the same event twice. For this, it reads events in the Doubly calendar from one day before to one day after a task's time. It does not read events in your other calendars.

What we store: Your phone keeps the link between each task and its event. PostHog gets events about the sync, such as a block being added, with the task ID.

Stopping: In the Calendar sync screen, tap "Stop syncing my calendar". You can keep the events Doubly made, or remove them all. You can also turn off calendar access for Doubly in your iPhone's settings.

Legal basis: Contract. You choose to turn this on.

3.3 WhatsApp

  • You connect WhatsApp from the app by sending a one-time link code to the Doubly bot.
  • We store your WhatsApp number, your time zone and language, and the link code.
  • We store the messages you send to the bot and the bot's replies, with what the bot understood you wanted. We also keep the IDs of messages we already handled, so none is handled twice.
  • Messages travel through Meta's WhatsApp Business Platform. Meta also sends us your WhatsApp profile name. We do not store or use it.
  • Each message you send goes to OpenAI, so the bot can understand you and create or update tasks. With it go your recent chat with the bot, your open tasks and today's tasks, today's schedule blocks, and your time zone. The names of your spaces, habits and task sets go too. So do the names of people in your household and of your friends.
  • Parts of your messages, and task titles, can appear in our server logs. These logs are kept for 7 days.
  • If you send a feature idea through WhatsApp, we keep its text and your WhatsApp number in our feedback list.
  • You can disconnect WhatsApp in the app.

Legal basis: Contract. You choose to connect WhatsApp.

3.4 Phone reminders and the daily update call

Reminder calls: If you add a phone number for reminder calls, Doubly can call you about a task. We send Twilio, our phone provider, your phone number, your first name, the task title and when it is due. Twilio places the call and reads the message in an Amazon Polly voice. You get at most one reminder call per day.

Daily update call: If you set up the daily update call, Twilio calls your number at your scheduled time. It checks whether a person or a voicemail answered. The call greets you by first name, in a Google voice, and does not read out your tasks. Twilio turns what you say into text. The call is not recorded as audio.

What happens to what you say: We save the text, and how the call was answered. OpenAI checks the text and turns it into tasks, and the text is saved as a brain dump. If the call cannot use what you said, the first 160 characters of the text go into our server logs.

Legal basis: Contract. You choose to add a phone number and set up these calls.

3.5 Place reminders and location (iPhone app)

You can add a place to a task, and Doubly reminds you when you get there. This is optional.

What we save: For each task with a place: its exact coordinates, the reminder distance (100 to 2,000 meters) and a name. The name can be a street address. It is saved on the task, so people who can see the task, like your household or people you share it with, can see the place. A repeating task copies its place to the next one.

Picking a place: If you tap "Use my current location", the place we save is where your phone is at that moment, accurate to about 100 meters. It is uploaded when you tap Save. If you search for an address, the text you typed becomes the name. With approximate location turned on, you cannot use your current location.

Apple and Google maps: To find an address, or to name your current location, the app uses your phone's built-in map service: Apple on iPhone, Google on Android. Your current coordinates go to that service right after you tap "Use my current location", even if you never tap Save. Addresses you type go there too.

Background location: To notice when you arrive, Doubly uses your location in the background, even when the app is closed or not in use. Your phone does this check. Your live location is not sent to our servers, and Doubly does not track or keep a record of where you go. The app reads your phone's last known position (at most 10 minutes old) at a few moments: when you open the app, when you save a place, and when the app updates your reminders. It uses that position to work out distances on your phone, and does not save it.

On your phone: Your phone keeps a copy of each task's title and place, and a log of when each reminder last went off. These are cleared when you sign out.

AI and analytics: We do not send your saved places to OpenAI. PostHog gets events like "place reminder set", with the reminder distance but no coordinates or place names. Like every PostHog event, these also carry a rough location from your IP address. But a place name shown on screen can appear in a session recording (section 4). It can also appear in the text PostHog gets when you tap it.

Your controls: You can remove a place from a task, and you can turn off location access for Doubly in your phone's settings. Deleting a task does not delete its place. The task is only marked as deleted, and the place stays with it until you delete your account. Email us if you want it removed sooner.

Legal basis: Contract. You choose to add a place to a task.

3.6 Voice input

When you speak to Doubly, your microphone audio is streamed live to our relay server on Google Cloud, together with your sign-in token. The relay passes the audio to Google Cloud Speech-to-Text and sends back only the text. We do not store the audio.

Legal basis: Contract. You choose to speak to Doubly.

4. Session Recording

To find usability problems, the iPhone app uses PostHog to record the screen on a small share of sessions: about 15% of app launches. A device that was recorded is not recorded again for 7 days. Recordings hide text you type into input fields, and images. Other things on screen, like task titles, can be visible in a recording. Recordings also include the app's technical messages (console logs). They also include details of each request the app sends over the internet: the web address, how long it took, whether it worked, and its size. Our legal basis is legitimate interests. To object, email amit@usedoubly.com with the subject "Data Request".

5. Ad Measurement

We use AppsFlyer to learn which ads, for example on Meta or Reddit, bring people to the iPhone app, and whether they then start a trial or subscribe. The app also shows Apple's tracking prompt, but most of this does not depend on your answer.

This part runs whatever you answer:

  • AppsFlyer starts right after the app asks the tracking question. It gets your Doubly user ID, app install and open data, a sign-up event, and a rough location based on your IP address. It also gets a device ID that is the same only across apps from the same maker (IDFV).
  • PostHog gets which ad campaign AppsFlyer matched your install to (section 2.4).
  • RevenueCat, which handles subscription status, sends AppsFlyer your purchase and trial events, including the price. It sends them with your device IDs and your AppsFlyer ID.
  • AppsFlyer links this data to the ad you clicked. It can then report the result to the ad platform, such as Meta or Reddit. For example: "someone who clicked this ad installed the app".

What your answer changes:

  • If you choose "Allow", your phone also shares Apple's advertising ID (IDFA).
  • If you choose "Ask App Not to Track", or your phone blocks tracking, we turn on a block in RevenueCat. Then RevenueCat does not pass your purchase and trial events on to ad platforms.
  • If the app gets no answer, for example because the prompt could not be shown, your purchase and trial events are still passed on.
  • You can change your choice at any time in your iPhone's settings.

6. Website Cookies and Similar Technologies

When you first visit usedoubly.com, a banner asks you to Accept or Reject. Until you click Accept, Google Tag Manager and the Reddit Pixel do not load, and PostHog does not start and sends nothing. If you click Accept, they start right away.

After you click Accept:

  • PostHog gets the pages you open (with the full web address), when you leave a page, and how far you scroll. It gets clicks on App Store buttons, and when you open the Android waitlist form. It also gets other clicks, clicks that did nothing, many fast clicks in one place, and form submits. With these it gets the text and labels of what you clicked. That text can be something you typed, if it shows on what you click. For example, a task in the Eisenhower Matrix. When you change a form field, PostHog gets a note that it changed, but not what you typed. The one exception is the email you give the Android waitlist (section 9). PostHog also gets error reports from the page (the error message and where in the code it happened) and page speed measurements. It can also store your IP address and a rough location worked out from it. Data goes through events.usedoubly.com, a PostHog service that runs on Cloudflare, to PostHog's US cloud.
  • Google Tag Manager loads other tags. Today it loads only the Meta Pixel, which records a page view on every page. What Tag Manager loads can change without an update to this website.
  • The Reddit Pixel records a page visit when a page first loads. It records a "Lead" when you click an App Store button, or another button picked in Reddit's ad settings. It records a "SignUp" when you join the Android waitlist. Reddit's ad settings can change without an update to this website. Reddit's automatic matching is turned on. It scans the page, including text typed into form fields, for email addresses and phone numbers. It scrambles them with a one-way code (SHA-256 hashing) and sends them to Reddit.

Legal basis: consent for analytics and ad cookies. The items marked "always" below are needed for the site or a tool to work, so they do not need consent.

Cookies and browser storage on usedoubly.com
Name or keyProviderPurposeLifetimeWhen set
NEXT_LOCALE (cookie)DoublyRemembers the language you picked.1 yearAlways, when you pick a language
doubly_cookie_consent (browser storage)DoublyRemembers whether you clicked Accept or Reject.Until you clear your browser dataAlways, when you click Accept or Reject
doubly:visual-timer:v1, doubly:hyperfocus-timer:v1, doubly:pomodoro:v1, doubly:brown-noise:v1, pick-one-input-v1, eisenhower-matrix-v1 (browser storage)DoublyRemember tool settings, and the list or tasks you typed into Pick One or the Eisenhower Matrix.Until you clear your browser dataAlways, when you open that tool's page
doubly:room:name, doubly:room:avatar (browser storage)DoublyRemember the name and emoji you use in a body-doubling room.Until you clear your browser dataAlways, when you join a room
doubly-intro-seen (session storage)DoublyShows the homepage intro only once per visit.Until you close the tabAlways, on the homepage, unless your device is set to reduce motion
doubly_web_visitor_id (browser storage)Doubly, for PostHogA random visitor ID for analytics.Until you clear your browser dataOnly after Accept
ph_<project>_posthog (cookie)PostHogYour analytics IDs and session ID. It also holds the first web address you opened, with any campaign tags or ad click IDs in it, and the site that sent you. It is set for all of usedoubly.com, so the web app at app.usedoubly.com can read it too. See below for what that means.1 year, renewed when it is updatedOnly after Accept on this website. The web app at app.usedoubly.com also sets it after you click Accept there. Older versions of the web app set it without asking (see below).
ph_<project>_posthog (browser storage)PostHogAnalytics IDs, the site you first came from, campaign tags in the link, and feature settings.Until you clear your browser dataOnly after Accept
ph_<project>_posthog, ph_<project>_window_id, ph_<project>_primary_window_exists (session storage)PostHogWhere this visit came from, and which browser tab is which.Until you close the tabOnly after Accept
dmn_chk_<id> (cookie)PostHogA test to find which domain to set its cookie on.3 secondsOnly after Accept
__ph_opt_in_out_<project> (browser storage)PostHogRemembers that you turned PostHog off, or back on.Until you clear your browser dataWhen you click Reject after you had accepted, and again if you accept later
Google Tag ManagerGoogleLoads the Meta Pixel. It sets no cookies of its own. Google keeps normal request logs and deletes them within 14 days.No cookieOnly after Accept
_fbp (cookie)Meta, loaded by Google Tag ManagerA browser ID, to measure visits from Meta ads.90 daysOnly after Accept
_fbc (cookie)Meta, loaded by Google Tag ManagerRemembers the Meta ad click that brought you here.90 daysOnly after Accept, and only if the link has a Meta click ID
_rdt_uuid (cookie)RedditA visitor ID, to measure visits from Reddit ads.90 days, renewed on each visitOnly after Accept
_rdt_cid (cookie)RedditRemembers the Reddit ad click that brought you here.90 days, renewed on each visitOnly after Accept, and only if the link has a Reddit click ID
_rdt_em, _rdt_pn (cookies)RedditHashed email addresses and phone numbers the pixel found on the page.90 days, renewed on each visitOnly after Accept, when it finds one

Meta may also save some data in your browser storage. PostHog may add a few more keys in special cases, for example for surveys.

Changing your choice: click "Cookie settings" in the footer of our pages. If you had accepted and now click Reject, PostHog stops sending data and saves a note that it is turned off. We delete the cookies these tools set on our site and the browser storage PostHog saved, and the page reloads without them. PostHog's session storage stays until you close the tab. Any browser storage Meta saved stays until you clear your browser data. Cookies that Google, Meta or Reddit keep on their own websites stay until they expire or you clear them.

The web app at app.usedoubly.com

After you sign in to the web app, a banner asks you to Accept or Reject. It shows until you pick one. Until you click Accept, PostHog does not start in the web app. It sends nothing and saves no PostHog cookie or browser storage. If you click Accept, PostHog starts right away. Section 2.4 lists what it gets.

Older versions of the web app started PostHog without asking. If you used the web app before the banner was added, PostHog may still have its cookie and browser storage in your browser, with your Doubly user ID. Clicking Reject deletes them.

Your choice in the web app is separate from your choice on usedoubly.com. They are two different websites, and each one saves its own choice. The choice is saved in your browser, not in your Doubly account. So you may see the banner on both websites. Accept or Reject on one does not change your choice on the other. The choice also applies to anyone else who signs in to the web app in the same browser. Signing out does not change it.

If you click Accept on both websites: they share one PostHog cookie, so PostHog can link your visits to usedoubly.com to your Doubly account. Then what you do on usedoubly.com, including what you click and the email you give the Android waitlist, can be saved under your Doubly user ID. And the first page you opened on usedoubly.com, with its campaign tags and ad click IDs, and the site that sent you there, can be added to your Doubly analytics profile.

Legal basis: consent. The items marked "always" below keep you signed in and remember your settings and your cookie choice, so they do not need consent.

Cookies and browser storage in the web app at app.usedoubly.com
Name or keyProviderPurposeLifetimeWhen set
doubly_cookie_consent (browser storage)DoublyRemembers whether you clicked Accept or Reject in the web app.Until you clear your browser dataAlways, when you click Accept or Reject
sb-<project>-auth-token (cookie, can be split into parts ending in .0, .1 and so on)Doubly, using SupabaseKeeps you signed in.400 days, renewed while you use the app. Deleted when you sign outAlways, when you sign in
sb-<project>-auth-token-code-verifier (cookie)Doubly, using SupabaseA one-time secret that makes sure Google sign-in finishes in your browser.Until Google sign-in finishes, at most 400 daysAlways, when you sign in with Google
doubly-locale (cookie)DoublyRemembers the language you picked.1 yearAlways, when you pick a language
doubly.webTheme (browser storage)DoublyRemembers the theme you picked.Until you clear your browser dataAlways, when you pick a theme
doubly.web.week.v1 (browser storage)DoublyRemembers how you set up the Week view.Until you clear your browser dataAlways, when you change the Week view
doubly.web.storageGeneration (browser storage)DoublyNotes that the web app already deleted data that an older version left in your browser, so it does not do it again.Until you clear your browser dataAlways, the first time you open the web app
ph_<project>_posthog (cookie)PostHogYour analytics IDs and session ID, and whether PostHog has your Doubly user ID. It also holds the first web address you opened, with any campaign tags or ad click IDs in it, and the site that sent you. It is set for all of usedoubly.com, so usedoubly.com can read it too. See above for what that means.1 year, renewed when it is updated. Deleted when you click RejectAfter Accept in the web app. Older versions set it without asking
ph_<project>_posthog (browser storage)PostHogAnalytics IDs, the site you first came from, campaign tags in the link, and feature settings.Until you clear your browser data or click RejectAfter Accept in the web app. Older versions set it without asking
ph_<project>_posthog, ph_<project>_window_id, ph_<project>_primary_window_exists (session storage)PostHogWhere this visit came from, and which browser tab is which.Until you close the tab or click RejectOnly after Accept in the web app
dmn_chk_<id> (cookie)PostHogA test to find which domain to set its cookie on.3 secondsOnly after Accept in the web app
__ph_opt_in_out_<project> (browser storage)PostHogStops PostHog from sending data while the page reloads after a Reject.Deleted once the page has reloadedWhen you click Reject after you had accepted in the web app

PostHog may add a few more keys in special cases. The web app may also save a few more keys that its features need, for example progress points that are still waiting to be saved to your account. These are always set and do not need consent.

Changing your choice in the web app: click "Cookie settings" in the web app's side menu. On a narrow screen, it is the cookie icon in the top bar. If you had accepted and now click Reject, PostHog stops sending data. If the web app is also open in another tab, that tab can still send one last event saying you left the page. We delete the PostHog cookies and browser storage in the table above, including the cookie set for all of usedoubly.com. Then the page reloads without PostHog. While your choice in the web app is Reject, the web app deletes these again each time you open it, even a PostHog cookie that usedoubly.com set.

7. The Free Tools

Task Splitter: The task you type (2 to 200 characters) goes to OpenAI, with today's date and a fixed instruction, to create the steps. We add no user ID or IP address. OpenAI's API policy says it does not use this data to train its models, and keeps logs for abuse monitoring for 30 days.

Brain Dump: The text you type (3 to 4,000 characters) goes to our server. Our server sends it, with a fixed instruction, to the web address of Flowise, an AI workflow service that we ran on Render. That service is not running now. Render receives the request but has no service to pass it to. So no AI turns your text into a list, and the tool shows an error. We add no user ID or IP address.

Other tools: The timers, brown noise, Pick One and the Eisenhower Matrix keep their settings and your lists in your browser. See the table in section 6. If you clicked Accept, PostHog can get the text of a task or list item you click (section 6).

Legal basis: contract. You use the tool to get a result.

8. The Body-Doubling Room

  • The room cannot connect people right now, because the service it uses for this is turned off. So no one else can join you. The room does not send your name, goal, reflection, video or sound to anyone.
  • When you join, the room asks to use your camera. If you turn on your microphone, it asks for that too. The room is not recorded.
  • The name you type (up to 24 characters) and your emoji are saved in your browser for next time.
  • If we turn the room back on, we will update this section first.

Legal basis: contract. You choose to join a room.

9. The Android Waitlist

If you join the Android waitlist, we use your email to tell you when Doubly comes to Android.

  • Your email goes to PostHog, as part of the sign-up event. PostHog only starts after you click Accept, so the form only works after that. If you have not clicked Accept, the form shows an error.
  • The Reddit Pixel records a "SignUp". Reddit's automatic matching can also send a hashed copy of the email you typed. See section 6.
  • Your email stays in PostHog until you ask us to remove it, or until PostHog deletes old data under our account's settings.

Legal basis: consent. You ask to join the list.

10. Who Receives Data

These companies process data for us or receive it from Doubly.

Companies that receive data from Doubly
ProviderWhat they do and what they getWhere
SupabaseOur database, sign-in, file storage, sign-in emails and server functions. Holds your account data.United States (North Virginia)
VercelHosts usedoubly.com and app.usedoubly.com. Gets your requests and IP address.Website server code runs in Washington, D.C., United States. Pages are served from Vercel's worldwide network.
OpenAIAI features (section 2.3), the Task Splitter, and imported calendar tasks.See their privacy policy
RenderHosts n8n (some in-app assistant and brain dump requests). It also receives the website's Brain Dump requests, but no service runs there for them now (section 7).See their privacy policy
Google CloudOur voice relay and Speech-to-Text. Gets your voice audio.Voice relay: United States (us-central1). Speech-to-Text: Google's global service, so the country is not fixed.
GoogleGoogle sign-in, Google Calendar (if you connect it), and address lookup on Android. Gmail holds our inbox for the test check-in emails (section 2.7). Google also stores the Doubly calendar on your iPhone if your default calendar account is a Google account (section 3.2).See their privacy policy
AppleSign in with Apple, App Store payments, address lookup on iPhone, and push notifications. iCloud Calendar stores the Doubly calendar on your iPhone if your default calendar account is iCloud (section 3.2). Live Activity updates (the live card on your lock screen) carry the task title and space name.See their privacy policy
ExpoSends push notifications. Gets the text of each push and the task ID. The text can include a task or habit name. It can also include the name of a person who nudged you or added a task. The app also checks Expo for app updates.See their privacy policy
Browser push servicesDeliver web app notifications. Our message to them carries no content. The web app then loads the content itself.Chosen by your browser
TwilioPhone calls. Gets your phone number, first name, task title and due time for reminder calls, and turns your speech into text in the daily call. Voices come from Amazon Polly and Google through Twilio.See their privacy policy
Meta (WhatsApp)Delivers WhatsApp messages. Gets your number and messages with the bot.See their privacy policy
PostHogAnalytics, error tracking and session recordings (sections 2.4, 4 and 6), and waitlist emails.United States (Virginia)
CloudflareRuns the PostHog service at events.usedoubly.com. Passes website analytics.See their privacy policy
AppsFlyerAd measurement for the iPhone app (section 5).See their privacy policy
RevenueCatSubscription status. Gets your user ID, purchases, device identifiers and your AppsFlyer ID.See their privacy policy
Meta and Reddit (ads)Website pixels after you click Accept (section 6). Ad results from AppsFlyer (section 5).See their privacy policy
BrevoSends the trial reminder email and the check-in emails (section 2.7). Gets your email address and the text of the email.See their privacy policy
SVG Repo (svgrepo.com)The avatar pictures load from svgrepo.com whenever an avatar is shown, on your phone or on someone else's. So SVG Repo sees the IP address of whoever is looking at it.See their privacy policy

11. International Transfers

Some of these providers store or process your data in the United States. For example, our database and PostHog are in the United States. When we transfer data from the EU to the United States, we rely on Standard Contractual Clauses. These are contract terms for sending data out of the EU, approved by the European Commission. Or, where the provider is certified, we rely on the EU-U.S. Data Privacy Framework. This is a program that lets certified US companies receive data from the EU.

12. How Long We Keep Data

  • Your account data: as long as you have an account.
  • Deleted tasks: a deleted task is only marked as deleted. It stays in our database, with any place saved on it, until you delete your account.
  • Records of which notifications we sent: some are deleted after 60 days. Records of sent task reminders, nudges about shared tasks and trial reminder emails stay until you delete your account.
  • Supabase server logs: 7 days.
  • Database backups: we make one a day and keep each for 7 days. Data you delete can stay in a backup until it is replaced.
  • Requests to OpenAI: up to 30 days at OpenAI. This covers every AI feature, including the in-app assistant, the planner, brain dumps, WhatsApp, the daily update call and the Task Splitter.
  • n8n on Render: a record of each request it handled, for about 14 days.
  • Check-in emails in our Gmail inbox (section 2.7): until we delete them. Email us and we will delete yours.
  • PostHog, AppsFlyer, RevenueCat, Twilio, Meta (WhatsApp), Brevo and Vercel: each keeps data under its own rules and our account settings there. Email us and we will ask them to delete your data.
  • Cookies and browser storage on usedoubly.com and in the web app: see the tables in section 6.

When you delete your account

You can delete your account in the iPhone app's settings. This deletes your account and most data linked to it. That includes your profile, tasks you created, habits, mood check-ins, brain dumps, facts about your life, plans, focus sessions, daily call records, call schedules, your WhatsApp connection and messages, your Google Calendar connection, push tokens, feed posts, comments, likes and follows, failure reports, and your household membership.

Some data stays after you delete your account:

  • Why you deleted your account: the reason, any note, your email, whether you had a paid subscription, and your app version, platform and language. We save this just before the deletion, so we can learn why people leave and handle later disputes.
  • Support messages: with your email, so we can still reply to you.
  • Feature ideas you sent: the text, and your WhatsApp number if you sent it there. They are no longer linked to your account.
  • Reports about your content: with the copy of the reported content, as a safety record.
  • Your activity on other people's things: notes you wrote on their tasks stay, no longer linked to you. Tasks other people assigned to you stay in their accounts.
  • A household with no other members, and its spaces. The household name can include your first name, like "Alex's Family".
  • Photos you posted to the feed.
  • Data at other services: deleting your account does not delete data held by PostHog, AppsFlyer or RevenueCat. It also does not remove Doubly's access at Google (see section 3.1). If you used Sign in with Apple, Doubly also stays in the list of apps that use your Apple Account. You can remove it in your Apple Account settings on your iPhone.

There is no fixed time limit for the records we keep from this list. We keep them only while we still need them for the reason given, and you can ask us to delete them.

Email amit@usedoubly.com with the subject "Data Request" and we will remove the household, your photos, and your data at PostHog, AppsFlyer and RevenueCat.

13. Your Rights

If you are in the EU, or the law where you live gives you these rights, you can:

  • Access your data and get a copy.
  • Correct data that is wrong.
  • Delete your data.
  • Restrict how we use your data.
  • Move your data: get it in a common format to give to another service (portability).
  • Object to uses based on legitimate interests, including analytics, session recording and ad measurement.
  • Withdraw consent at any time: for Apple's tracking prompt (section 5) in your iPhone's settings, for website cookies with "Cookie settings" in the footer of our pages, for web app cookies with "Cookie settings" in the web app (section 6), and for health-related answers by email.
  • Complain to a data protection authority in the EU country where you live, where you work, or where you think the problem happened.

To use these rights, email amit@usedoubly.com with the subject "Data Request". We answer within one month. You can also delete your account yourself in the iPhone app's settings, using Delete Account.

14. Automated Decisions

Doubly makes no automated decisions about you that have legal effects or similarly significant effects. The AI suggests and creates tasks for you. We also check automatically whether you already had a free trial, so each person gets one.

15. Children

Doubly is for people 13 and older, as our Terms of Use say. In many EU countries you must be 14, 15 or 16 to give consent yourself, for example to website cookies. If you are younger than that age where you live, a parent must agree first. If you think a child under 13 uses Doubly, email amit@usedoubly.com.

16. Subscriptions and Billing

  • Apple handles payment through the App Store. We do not get your card details.
  • RevenueCat receives your purchase and subscription status, linked to your user ID.
  • To give each person one free trial, we save a standard form of your email address with the trial record.
  • If a renewal fails, we keep a record of when it failed and whether it was fixed.
  • For renewals and cancelling, see our Terms of Use.

Legal basis: Contract for payments and your subscription. Legitimate interests for the free trial check: we need it so each person gets only one free trial.

17. Changes to This Policy

When we change this policy, we update it on this page and change the "Last updated" date at the top. If a change is important, or changes how we use data from Google, we will tell you in the app or by email first. Before we use Google data in a new way, we will ask you again. Questions? Email amit@usedoubly.com.