Privacy Policy

Flit is a personal task app operated from the United Kingdom under the Sorted Group brand ("we", "us"). This policy explains what information Flit handles and why, in plain English, in line with UK GDPR.

What we collect

• Your email address and a password — to create and secure your account. Passwords are stored only in securely hashed form; we can never read them.
• Your task content — boards, lists, tasks, subtasks, notes and due dates you create. This is your data; we store it solely so the app can sync it across your devices.

That's it. Flit has no advertising, no analytics trackers, and no tracking cookies. The app stores a few preferences (like your colour theme) on your own device only.

What stays on your device

• Reminders are scheduled on your device using local notifications — your due dates are not sent to any notification server.
• Face ID / Touch ID is handled entirely by your device. Biometric data never reaches us — Apple's system simply tells the app "verified" or "not verified".

The Apple Calendar feed (optional)

If you choose to subscribe to the calendar feed, Flit publishes a calendar file containing the titles and dates of your due-dated tasks at a private web address. That address contains a long random secret, so it cannot be guessed — but it is not password-protected, so anyone you share the link with can see those task titles. Treat it like a password. You can create a new link at any time in the app (⋯ menu → Calendar feed → "Create a new link"), which immediately stops the old one working. The feed only exists if you open that panel; deleting your account removes it.

Where your data lives

Your account and task data are stored with our infrastructure providers, acting as data processors: Supabase (database and authentication) and Resend (delivery of account emails such as password resets, processed in the EU). We do not sell or share your data with anyone else, ever.

Why we're allowed to process it

Processing is necessary to provide the service you sign up for (UK GDPR Article 6(1)(b) — performance of a contract).

How long we keep it

Until you delete it. Deleting a task, list or board removes it from our database. Deleting your account (in the app: ⋯ menu → "Delete account…") permanently removes your account and all your data. You can export a full copy of your data at any time (⋯ menu → Backup).

Your rights

Under UK GDPR you can ask to access, correct, export or erase your data — most of which you can do directly in the app. You can also complain to the UK Information Commissioner's Office (ico.org.uk) if you believe we've mishandled your data.

Children

Flit is not directed at children under 13, and we do not knowingly collect their data.

Changes

If this policy changes materially, we'll note it on this page with a new effective date.

Contact

Questions or requests: hello@flit.day