Privacy Policy

This policy explains how Hourblue (“we”, “us”) handles information when you use the Dewit mobile app and website. Dewit is a product operated by Hourblue.

Information we collect

• Account information: your name, email address, authentication provider identifier, and account settings.
• Content you create: goals, tasks, notes, schedules, focus sessions, and planning preferences.
• Calendar information: if you choose to connect Google Calendar, we access the calendars and events needed to show and manage them in Dewit. Connection tokens are stored securely.
• Subscription information: subscription status and identifiers supplied by the app stores or our subscription provider. We do not receive your full payment-card details.
• Technical information: basic device, app-version, request, diagnostic, and security information needed to operate and protect the service.
• App usage analytics: we use PostHog to understand how the app is used and to turn features on and off. The app sends PostHog events such as when it is installed, updated, opened, or closed, and which feature variations you see, together with your Dewit account ID and basic device and app information. We do not send your name or email address to PostHog.

Focus and app blocking

When you start a focus session, Dewit can block the other apps on your device until the session ends. On Android this needs two permissions that you switch on in your device settings: Usage access, so Dewit can tell which app is open, and Display over other apps, so it can show the focus screen over an app you did not allow. Dewit uses them only while a focus session runs. The list of apps on your device, the apps you choose to allow, and the apps you open during a session stay on your device and are not sent to us. On iOS, blocking uses Apple’s Screen Time features: the apps you choose are kept by Apple on your device in a form Dewit cannot read. We store your focus sessions themselves (such as length, start time, and outcome) with your account.

How we use information

We use information to provide and sync Dewit, authenticate accounts, generate plans you request, connect calendars, process subscriptions, send account and security emails, provide support, prevent abuse, understand how Dewit is used, and improve reliability.

Google user data

Dewit’s use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. We use Google Calendar data only to provide user-facing calendar features that you request. We do not use it for advertising or sell it.

When we share information

We do not sell personal information. We share only what is necessary with service providers that help us operate Dewit, such as cloud hosting, authentication, email delivery, calendar integrations, AI processing when you request a plan, subscription management, product analytics and feature flags (PostHog), and app distribution. We may also disclose information when legally required or needed to protect users and the service.

Storage, security, and retention

We use reasonable technical and organisational safeguards, including encrypted transport, encryption at rest for our database, and access controls. We retain account information while your account is active and as needed for legal, security, and operational obligations. No online service can guarantee absolute security.

Your choices and rights

You can disconnect Google Calendar in Dewit’s settings and revoke access in your Google Account. Device permissions can be changed in iOS or Android settings. You can delete your account directly in the app (Profile → Settings → Delete account), or request access, correction, or deletion by contacting us. Depending on where you live, additional privacy rights may apply.

Children

Dewit is not directed to children under 13, and we do not knowingly collect data.

Changes

We may update this policy as Dewit changes. We will publish the updated date here and provide additional notice when appropriate.