Privacy policy
Dropit · last updated: October 9, 2026
Dropit helps you turn a goal into a project, with an AI that keeps the context of each project. To do that, we process personal data. This page explains which data, why, who receives it, and how to delete it all.
1. Who is responsible
Dropit is published by Rado Harimalala.
Questions about your data: [email protected].
2. The data we process
| Data | Details |
|---|---|
| Account | Your email address and password, or the ID provided by Google or Apple if you sign in with them. Your password is never readable: it is handled and protected by our authentication provider. |
| Personalization profile | Optional: you can skip the welcome questionnaire and edit it later in “My profile.” It may include your first name, age range, gender, occupation, the people who matter in your day-to-day (partner, kids, family who depend on you…), your pace of life, the time you have, your projects and their deadlines, your interests, what keeps you moving, what throws you off track, how you like to start a project, how you prefer to see your tasks, what you want from Dropit, the tone you picked for the AI, and free text. Gender includes “I'd rather not say.” Answers from an older version of the questionnaire (personal situation, kids…) can be cleared in “My profile.” |
| Your content | Your projects, categories, tasks, notes, Drop Zone items, and the cover photo picked for each project (its URL and its author's name). |
| Conversations with the AI | Your messages and the replies are sent to the AI for processing. Dropit doesn't keep them after you close the app, unless you save a reply as a note. |
| Technical data | A sign-in token kept in your device's local storage, and per-account request counters to prevent abuse. Your IP address is seen by our host to route and secure requests. |
What we don't use: no cookies, no analytics, no ad trackers. We never sell your data.
3. Why, and on what legal basis
- Running your account and projects (creating, saving and syncing your projects): providing the service you asked for.
- Personalizing the AI's tone and advice with your profile: your consent, given by answering the questionnaire. You withdraw it by editing your profile or deleting your account.
- Protecting the service from abuse (rate limiting): our legitimate interest in keeping Dropit available and safe.
4. Who receives your data
| Provider | Role | What it receives |
|---|---|---|
| Supabase | Authentication and database | Your account, your profile and all your content |
| Cloudflare | Hosting for the site and server functions | The app's requests, including your IP address |
| Anthropic | AI that generates projects, suggestions and answers | The text of your request, the context of the project involved and your personalization profile, on each call. Sent by our server, never directly from your device. |
| Pexels | Cover photos | A subject keyword in English, inferred from the project title. Never your identity or the text of your projects. |
| Google, Apple | Sign-in, if you choose it | What the sign-in service shares with us (email address, ID) |
These providers process data on our behalf. Each is bound by its own terms, available on its website.
The database (Supabase) is hosted in Germany, in the European Union. Cloudflare processes requests on its global network, and Anthropic processes the text sent to the AI on servers located, among other places, outside the European Union. Transfers to Anthropic are covered by the European Commission's Standard Contractual Clauses, included in Anthropic's Data Processing Addendum.
5. How long we keep it
As long as your account exists. When you delete it, your account, projects, notes and profile are erased immediately and permanently (see Delete my account). No automatic database backups are kept at this time, so a deleted account no longer exists at Supabase. Anthropic and Cloudflare may keep some data (text sent to the AI, technical logs) for the period set by their own terms.
6. Your rights
- Access and correction: you can edit your projects and profile anytime in the app.
- Deletion: “Delete my account,” in the app.
- Portability, objection, restriction, withdrawal of consent: email us at the contact address above; we reply within one month.
- Complaints: you can contact the CNIL, the French data protection authority (cnil.fr), if you believe your rights aren't being respected.
7. Your content may be sensitive
Dropit doesn't ask for health information. But your projects and notes are free text, and some questionnaire choices (“Improve my health,” for example) may reveal it. Everything you write is sent to the providers in the table above to run the service. Don't enter anything you don't want to share with them.
8. Minimum age
Dropit is for people 16 and older. It is not intended for children.
9. Changes
If this policy changes, the date at the top of this page changes.