Privacy policy
Last updated: October 6, 2026
In short
- gtdoer uses your data only to make the app work.
- No analytics, no ads, no profiling. We don’t sell or share your data.
- Your content is stored in the European Union. Your Google account details are processed in the United States.
- In Settings, you can download a copy of all your data and delete your account at any time.
01Who is responsible
The data controller is Daniel Catalán, owner of gtdoer.
For any privacy matter, write to danicatalan00@gmail.com.
02What data we process
| Data | Details |
|---|---|
| Your Google account | Name, email address, profile photo and account ID. Google provides them when you sign in with Google. The account creation date and last sign-in date are also stored. |
| Your content | The items, projects, steps, notes and dates you write in the app. |
| Your settings | Language, theme, accent color, how often to review Someday, and whether you’ve seen the intro tour. |
| Connection data | Google processes your IP address and browser details to serve the app and protect sign-in. gtdoer doesn’t store or use this data. |
gtdoer doesn’t ask for any other data. It doesn’t collect your location, your contacts or data about how you use the app.
gtdoer doesn’t read or analyze your content. The owner only accesses your content if you ask for help with a problem or if the law requires it.
03What we use it for
Only to provide the service:
- To identify you and keep you signed in.
- To store your content and sync it across your devices.
- To apply your settings.
- To reply if you write to us.
gtdoer doesn’t make automated decisions about you or build profiles.
04Legal basis
The legal basis is the performance of a contract (Article 6(1)(b) of the General Data Protection Regulation, GDPR). When you create your account, you ask for the gtdoer service. Your data is necessary to provide it. Without a Google account, the app can’t work.
05Where it’s stored and who processes it
gtdoer runs on Firebase, a Google service. Google acts as a data processor under its data processing and security terms. Google can’t use your data for its own purposes.
| Service | What it stores | Where |
|---|---|---|
| Cloud Firestore | Your content and settings | European Union (eur3 location) |
| Firebase Authentication | Your account details | United States |
| Firebase Hosting | The app (stores none of your data) | Google’s global network |
gtdoer doesn’t share your data with anyone else.
06Transfers outside the European Union
Firebase Authentication only runs in data centers in the United States, so your Google account details are processed there. This transfer is covered by Google’s certification under the EU-U.S. Data Privacy Framework (European Commission adequacy decision of July 10, 2023) and by the European Commission’s standard contractual clauses.
Your content and settings don’t leave the European Union.
07How long we keep it
- We keep your data while you have an account.
- When you delete an item or a project, it’s deleted from the server.
- When you finish a project, it stays in Finished for 7 days so you can see it or reopen it. After that, it’s deleted from the server the next time you open the app.
- When you delete your account, the app immediately deletes your content, your settings and your account. Deletion is permanent. gtdoer keeps no backups of its own. Google deletes its internal copies within the periods set in its data processing terms.
- If you write to us, we keep your message as long as needed to reply.
08Your rights
You have the right to access, rectify, erase and port your data, and to restrict or object to its processing. You can exercise several of them directly in the app:
- Copy of your data (access and portability): Settings › Account & data › Export my data. You download a JSON file with your account, your settings and all your content.
- Erasure: Settings › Account & data › Delete account.
- Rectification: edit your content in the app. Your name, email and photo are changed in your Google account.
For any other right, write to the contact email. We reply within one month at most.
If you think we don’t handle your data properly, you can file a complaint with the Spanish Data Protection Agency (AEPD) or the data protection authority of your country.
09Storage on your device
gtdoer stores your session, a copy of your data so it works offline, your language and your theme in your browser. This is technical storage the app needs to work. gtdoer doesn’t use analytics or advertising cookies, so it doesn’t show a cookie banner.
If you use a shared device, clear the site data in your browser settings after you sign out.
10Security
- All communication is encrypted (HTTPS).
- The database security rules only let each account read and write its own data.
- You sign in with Google. gtdoer stores no passwords.
11Minimum age
gtdoer is for people aged 14 or older. If you’re under 14, don’t use gtdoer.
12Changes to this policy
If this policy changes, the date above changes too. If the change is significant, for example adding payments or a new provider, we’ll let you know in the app before it applies.