Privacy Policy

Who is responsible

The data controller is Alessandro Marchesin, an individual developer operating Nexto. Contact for anything in this policy: alessandromarchesin@gmail.com. This policy is written with the EU/UK GDPR and the Swiss Federal Act on Data Protection in mind.

Data we collect

• Account data: your email address, name and profile picture from the sign-in provider you choose (Google or Apple), or the email you sign in with.
• Content you create: tasks, projects, milestones, schedules, working hours, settings and the calendar events Nexto schedules for you.
• Google Calendar data (optional): only if you connect it. We read your calendars and events to schedule around them, create events for scheduled tasks, and store the OAuth tokens needed to keep them in sync.
• Quick Capture (optional): if you turn it on, a personal capture link (also used by the Siri Shortcut and QR page) lets you add tasks to your account without signing in. Anyone who has the link can add tasks to your account, so keep it private; you can regenerate it any time in Profile → Quick Capture, which invalidates the old link.
• Website usage and diagnostics (web only): product analytics events (such as “task completed”, with details like priority or duration, never the task title or description), your account ID, email and name so events can be tied to your account, IP address, device and browser information, and error reports. For a sample of sessions (10%, and sessions with errors) we keep a session replay for debugging. Replays mask all text and typed input and block images and media, so task and project names are not recorded. Analytics also masks the text of clicked elements.
• iOS app: the iOS app does not include analytics or session replays. It processes only the data above that is needed to run the app. Task reminders are scheduled as notifications on your device.
• Updates list (optional): your email address, if you sign up for updates.

Why we process it and on what legal basis

• Running the app (account, tasks, scheduling, reminders): necessary to provide the service you asked for (contract).
• Google Calendar sync: your consent, given when you connect it and withdrawn any time by disconnecting in Profile.
• Updates list: your consent; unsubscribe by emailing us.
• Error monitoring, security and abuse prevention: our legitimate interest in keeping Nexto working and secure.
• Product analytics: our legitimate interest in understanding which features are used so we can improve them. You can object at any time by emailing us, and we will stop and delete your analytics data.

We do not sell your data, use it for advertising, or track you across other companies' apps and websites.

Google user data

If you connect Google Calendar we request two permissions: calendar.events (view, create and edit events on your calendars) and calendar.calendarlist.readonly (list the calendars you can choose from). Nexto's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Calendar data is used only to provide the scheduling features you see in the app. It is not used for advertising and not used to train AI models. Humans do not read your Google Calendar data unless you give us your consent, it is necessary for security purposes such as investigating abuse, or the law requires it.

No AI processing of your content

Natural-language task entry (for example “call mum tomorrow 30m”) is handled by rules in the app and on our server. Your tasks and calendar data are not sent to any AI or large-language-model provider.

Who processes data for us

• Supabase: database and sign-in; your data is stored in the EU (Frankfurt).
• Vercel: hosting of the website and API. The API runs in the EU (Frankfurt); Vercel's global network may route requests through servers outside the EU, including the United States.
• Google: sign-in and, if connected, Google Calendar.
• Apple: Sign in with Apple, if you use it.
• PostHog: product analytics (web only).
• Sentry: error monitoring and session replays (web only); stored in the EU (Germany).
• Telegram: we receive a notification message, containing the email address, when someone joins the updates list. We do not use a third-party email-marketing service.

Transfers outside the EU, UK and Switzerland

Some providers above (Vercel, Google, Apple, PostHog, Telegram) may process data outside the EU, UK and Switzerland, including in the United States. Where that happens we rely on the safeguards the law accepts, such as the EU–US Data Privacy Framework (for certified providers) and the European Commission's Standard Contractual Clauses.

How long we keep data

• Account and content: until you delete your account.
• Analytics events: up to 12 months.
• Error reports and session replays: up to 90 days.
• Backups: after you delete your account, copies in encrypted database backups are overwritten within 30 days.
• Updates list: until you unsubscribe.

You can delete your account at any time from Profile → Account → Delete account, on the web or in the iOS app. This permanently deletes your account and all your content and revokes Nexto's access to your Google Calendar. To have analytics or error data about you deleted sooner, email us.

Your rights

Depending on where you live, you can ask us for access to, correction, export or deletion of your personal data, restrict or object to its processing, and withdraw consent at any time. Email us and we will respond within 30 days. You also have the right to complain to your data protection authority: in the EU, the authority of your country of residence; in the UK, the ICO; in Switzerland, the FDPIC.

Children

Nexto is not directed at children under 16, and we do not knowingly collect their data. If you believe a child has given us data, email us and we will delete it.

Changes

We will update this page when our practices change and revise the date above. For significant changes we will tell you in the app or by email.

Contact

alessandromarchesin@gmail.com · Support