Privacy Policy

Account information. When you register, we collect your name, email address, and password (stored as a salted hash, never in plain text). You may add a profile photo. If two-factor authentication is enabled, we store your TOTP secret and recovery codes (also hashed). If you sign in through a third-party provider, we receive the basic profile details that provider shares, such as your name, email, and profile photo.

Content you create. Workspaces, projects, tasks, comments, labels, and any files you attach to them are stored so the Service can display them to you and the teammates you share them with. This can include content you author (task descriptions, comments) and files you upload (e.g., screenshots, documents) or link from a connected account such as Google Drive or Dropbox.

Team and usage data. We keep a record of actions taken on tasks (status changes, assignments, comments) so your team has an activity history, and workspace membership and invite information (including email addresses you invite).

Support requests. If you contact us or submit a support ticket, we collect your message and any information you choose to include.

Device and notification data. If you enable push notifications on the mobile app, we store a device push token (issued by Apple/Google via Expo) so we can deliver notifications to your device. This token is tied to your account, not to your identity as a person.

Technical data.Like most web services, our servers and infrastructure providers automatically log standard request information (such as IP address, timestamps, and error logs) for security and reliability. We don’t use this data for advertising, and we don’t use analytics, advertising, or crash-reporting SDKs in the mobile app.

The mobile app requests the following device permissions:

• Notifications — to deliver task assignments, mentions, comments, and workspace invites as push notifications. You can decline or later disable this in your device settings.
• Photo library / files — only when you choose to attach a file, set a profile photo, or add a task cover image. We only access the specific file you select.

The app does not access your contacts, location, camera roll metadata, microphone, or call/SMS data, and does not request any permission it doesn’t need to perform an action you initiate.

• Provide, operate, and maintain the Service.
• Authenticate you and keep your account and workspaces secure.
• Send transactional emails and push notifications (e.g., task assignments, mentions, workspace invites, password resets).
• Respond to support requests.
• Detect, investigate, and prevent abuse, fraud, or security incidents.
• Comply with legal obligations.

We do not sell your personal information, and we do not use it for advertising.

We share information only in the following circumstances:

• With your team and workspace. Content you create inside a workspace (tasks, comments, attachments, your name, and profile photo) is visible to other members of that workspace according to its permission settings.
• Service providers. We use infrastructure and hosting providers to run the Service, and an email delivery provider to send invites and notification emails, under obligations to protect your data.
• Third-party integrations you choose to use. If you attach a file from Google Drive or Dropbox, the file itself stays in your account with that provider — we only store a reference/link to it, subject to that provider’s own privacy policy.
• Legal reasons. If required to comply with a legal obligation, or to protect the rights, safety, or property of Encore Flow, our users, or others.
• Business transfers. If Encore Flow is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that deal, subject to this policy.

We use Expo’s push notification service to deliver notifications to the mobile app. Sending a notification shares the device push token and the notification content (e.g., “You were assigned a task”) with Expo/Apple/Google solely to route the message to your device. You can disable notifications at any time in your device’s system settings.

We retain account and workspace data for as long as your account is active, so the Service can keep functioning for you and your team. If you delete a task, comment, or attachment, it is removed from active use; some records (such as activity history relevant to other members’ content) may be retained as part of the workspace. If you request account deletion, we delete or anonymize your personal information within a reasonable period, except where we must retain it to comply with legal obligations, resolve disputes, or enforce our agreements.

We use industry-standard measures to protect your information, including password hashing, hashed refresh/reset tokens, and access controls scoped to workspace membership and roles. No method of transmission or storage is 100% secure, so we can’t guarantee absolute security.

• Access and update. You can view and update your name, profile photo, and account settings from within the app.
• Delete your account. Email contact@codemarine.into request deletion of your account and associated personal data. We’ll process the request within a reasonable time, subject to the retention exceptions described above.
• Notifications and permissions. You can disable push notifications or revoke photo/file access at any time in your device settings.
• Access, correction, or portability requests. Depending on where you live, you may have additional rights over your personal information (such as under the GDPR or CCPA/CPRA). Contact us at contact@codemarine.in to make a request.

The Service is not directed to children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us at contact@codemarine.in and we will delete it.

We may process and store your information on servers located in countries other than your own. Where required, we rely on appropriate safeguards to protect information transferred internationally.

We may update this policy from time to time. If we make material changes, we’ll update the effective date above and, where appropriate, notify you in the app or by email.

Questions about this policy or your data? Email us at contact@codemarine.in.