Privacy Policy

• Account: your email address, name, and profile picture, received from your chosen sign-in provider (Google or GitHub). We never see or store your provider password.
• Your tasks: the task you type in, any optional deadline or time estimate, the AI-generated steps, which steps you complete, and your focus-timer activity.
• Payment: if you upgrade to Pro, payment is handled entirely by PayPal. We receive only your subscription status — never your card or bank details.

Collected automatically:a sign-in session cookie (to keep you logged in) and basic technical data such as browser type and IP address. If you use Dopastep as a guest without signing in, your task stays in your browser's local storage and is not sent to our accounts database.

To break a task into steps, we send the task text you enter — plus any optional deadline or time estimate — to our AI provider, DeepSeek, which generates the steps and returns them to you.

Please note: DeepSeek operates servers located in the People's Republic of China. This means the task text you submit is transmitted to and processed on servers in China, outside the EU, UK, and US. We only send the task text needed to generate your breakdown — never your name, email, or payment details. If you would prefer not to have a piece of text processed this way, do not enter it as a task.

• Generate step-by-step breakdowns and run your focus timer.
• Save your tasks and progress so they sync across your devices.
• Track free-tier usage limits and manage your Pro subscription.
• Show you your own procrastination insights (completion rate, focus minutes, timing).
• Keep the service secure and prevent abuse.

We do not sell your personal data, and we do not use it to train AI models.

• Database: Supabase (PostgreSQL), encrypted at rest. Access is restricted so each account can only reach its own data.
• AI breakdown: DeepSeek (see Section 3 regarding data location in China).
• Sign-in: Google and GitHub via OAuth 2.0.
• Payments: PayPal (PCI-DSS compliant).

We share data with these providers only as needed to run the service, or when required by law.

Depending on where you live (including under the EU/UK GDPR and the CCPA), you may have the right to access, correct, export, or delete your personal data, and to withdraw consent. To exercise any of these, email wangchong19890518@gmail.com and we will respond within a reasonable time. You can delete individual tasks any time from "My tasks," and you can request full account deletion by contacting us.

We keep your account and task data for as long as your account is active. When you delete a task it is removed from our database; when you ask us to delete your account, we remove your associated data except where we must retain limited records to meet legal obligations.

Dopastep is not directed to children under 16, and we do not knowingly collect their personal information.

We may update this policy from time to time. Material changes will be posted here with an updated date above.

Questions about your privacy? Email wangchong19890518@gmail.com.