Privacy Policy
This privacy policy explains what OpenOak handles across the shared OpenOak account layer and the OpenOak apps. The goal is simple: collect as little as practical, keep the service usable, and make the processing clear.
OpenOak Account
When you create an OpenOak account, we process the information needed to let you sign in, secure the account, recover access, and connect your account to OpenOak apps.
- Email address - used for sign-in, account recovery, and service messages.
- Authentication data - session, security, and access records needed to keep your account working.
- Technical logs - basic request and security logs used to deliver the service and prevent abuse.
We do not sell personal data, use it for advertising profiles, or add tracking to this website. The OpenOak website itself does not use cookies, analytics, fingerprinting, ads, or tracking scripts. OpenOak apps may use strictly necessary session cookies or similar storage to keep you signed in.
OpenTodo
OpenTodo stores the tasks, lists, settings, and related metadata you create in the app so they can sync across devices and remain attached to your OpenOak account.
OpenOutline
OpenOutline is planned to store outlines, notes, drafts, settings, and related metadata you create in the app. This section will be updated before OpenOutline becomes publicly available.
OpenKanban
OpenKanban is planned to store boards, columns, cards, workflow settings, and related metadata you create in the app. This section will be updated before OpenKanban becomes publicly available.
Future apps
Future OpenOak apps may have app-specific privacy details. Those details apply when you use that app, not merely because you created an OpenOak account.
How we use data
- To authenticate you and keep your account secure.
- To store and sync the content you create in OpenOak apps.
- To operate, debug, protect, and improve the service.
- To comply with legal obligations where they apply.
Infrastructure providers
OpenOak uses third-party infrastructure providers to host the website, run app services, store data, authenticate users, and protect the service. Those providers may process data only as needed to provide their services to OpenOak.
Legal basis
Where Dutch or EU privacy law applies, processing is based on the need to provide the service you request, legitimate interests in running and securing the service, compliance with legal obligations, or consent where consent is required.
Retention and deletion
Account and app data is kept while your account is active or while needed to provide the relevant service. Where supported, you can delete your account or app data from app settings. Some technical logs may be kept for a limited period for security, debugging, and abuse prevention.
Your rights
If you are in the EU or EEA, you may have rights to access, correct, delete, restrict, object to processing, receive a portable copy of your data, and lodge a complaint with your local supervisory authority.