What we store
When you sign up we store your email address and an optional display name. When you create tasks, lists, tags, habits, Pomodoro sessions, attachments, or notes, we store them in our Supabase-hosted Postgres database — they belong to your account and are protected by row-level security so no other user can read them.
If you opt into AI features, the contents of your tasks (titles, due dates, project names, completion timestamps) are sent to Anthropic for the duration of a single request to generate your Daily Edition briefing, your Weekly Review, the natural-language quick-add parser, or the Eisenhower auto-classifier. Anthropic does not retain the content under their commercial terms; the generated text is stored on our database for caching.
What we don't do
We don't sell your data. We don't serve advertising. We don't share your tasks with third parties for marketing. We don't track you across the web — there is no Google Analytics or pixel running on the app.
We send transactional email from onboarding@resend.dev(or our verified domain when configured) only when you have set a reminder on a task and that reminder time has passed. Every email includes a one-click unsubscribe link, and Settings → Notifications lets you turn email reminders off entirely.
Cookies
We set a session cookie via Supabase Auth so you stay signed in. We use localStorage to remember your language choice and the order of items in your sidebar. We don't use any tracking or analytics cookies.
Your rights
Access. Settings → Your data → Download as JSON gives you a complete export of every row we store about you.
Erasure. Settings → Danger zone → Delete my account permanently removes your account and every record tied to it. This cannot be reversed; export first if you want a copy.
Correction. You can edit any task, list, tag, habit, note, or display name from the app at any time.
For other requests (questions, complaints, regulator inquiries), email us — the address is in your reminder emails.
Children
First Light is not directed at children under 13.
Changes
If this policy changes materially we will notify you by email before the changes take effect.
First Light is operated and hosted on enterprise-grade infrastructure. For questions about this Privacy Policy, contact support through the app or via your account settings.