Privacy Policy

We collect only what we need to run the service:

• Account information — your email address, a display name you choose, and your password. Passwords are handled by our authentication provider (Supabase) and are never stored by us in readable form.
• Your settings — timezone, working hours, focus/off-time blocks, notification preferences, and similar configuration.
• Your content — the tasks, reminders, notes, sub-steps, due dates, and focus-session labels you enter. This is text you write, so it can contain whatever you choose to put in it.
• Technical data — a session cookie to keep you signed in, and basic operational logs (for example, delivery status of reminder emails and error records) needed to run and secure the service.

ADHD Buddy is designed for people managing ADHD. Signing up, and the things you write in your tasks and notes, may reveal information about your health, mental state, or daily functioning. In some regions (for example, under the EU/UK GDPR) this is treated as a special category of personal data.

We process this information solely to provide the features you ask for, and where the law requires it, we rely on your explicit consent, which you give by creating an account and using the service. You can withdraw consent at any time by deleting your account or contacting us (see Section 8). Please avoid entering more sensitive detail than you need to get value from the app.

• To provide the core service — store your commitments, prioritize them, and generate plans, breakdowns, and check-ins.
• To secure the service, prevent abuse, and rate-limit requests.
• To diagnose problems and keep the app running.

We do not sell your personal information, and we do not use it for advertising or run third-party advertising or analytics trackers.

Core features (planning, breaking tasks into steps, and Addie's chat and check-ins) are powered by a third-party AI provider, Anthropic (the Claude API). To generate your results, we send the relevant content — such as task and step titles, your stated goal for a session, due dates, and scheduling preferences — to Anthropic for processing.

Anthropic processes this content to return results to you and, under our commercial agreement with them, does not use it to train its models. We send only what's needed for the feature you're using. If you would rather not have your content processed by an AI provider, please don't use the AI features.

We share data only with the service providers that operate ADHD Buddy on our behalf, under contracts that limit their use of it to providing their service to us:

• Supabase — database, authentication, and storage of your account and content.
• Anthropic — AI processing of your content, as described in Section 4.
• Vercel — application hosting and delivery.

We may also disclose information if required by law, to enforce our terms, or to protect the rights and safety of our users or the public.

We send only essential account and service emails — for example, confirming your email address when you sign up or helping you reset your password. We do not currently send marketing or reminder emails.

We use a single essential cookie to keep you signed in. We do not use advertising cookies, third-party analytics, or cross-site tracking. Because our only cookie is strictly necessary to provide the service, no separate consent banner is required for it.

Depending on where you live (for example, under the GDPR or the California CCPA/CPRA), you may have the right to:

• Access the personal information we hold about you, and receive a copy of it.
• Correct inaccurate information.
• Delete your account and associated data.
• Withdraw consent or object to certain processing.
• Not be discriminated against for exercising these rights.

To exercise any of these, email us at privacy@adhdbuddy.org. We will verify your request and respond within the time required by applicable law.

We keep your information for as long as your account is active. When you delete your account, we delete or anonymize your personal information, except where we must retain limited records to comply with legal obligations, resolve disputes, or enforce our agreements.

We and our providers may store and process your information in the United States and other countries, which may have different data-protection laws than yours. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for these transfers.

We protect your data with measures including encryption in transit and per-user access controls that isolate each account's data. No method of transmission or storage is perfectly secure, but we work to safeguard your information and to respond promptly to any incident.

ADHD Buddy is not directed to children. You must be at least 16 years old (or the age of digital consent in your country, if higher) to use it. If you believe a child has provided us personal information, contact us and we will delete it.

We may update this policy from time to time. When we make material changes, we'll update the “Last updated” date above and, where appropriate, notify you. Your continued use of the service after a change means you accept the updated policy.

Questions or requests about this policy or your data? Reach us at: