What we keep, why, and what we don't.

When you sign up we store your email address and an optional display name. When you create tasks, lists, tags, habits, Pomodoro sessions, attachments, or notes, we store them in our Supabase-hosted Postgres database and storage services. Account access controls protect this content. Content you share through Groups is accessible to the people you share it with; authorized integrations can access permitted records.

AI-assisted features can send relevant task text, notes, calendar context, queries or submitted images to Anthropic for processing. This includes parsing during task capture as well as requested briefings and reviews. Generated content and usage records may be stored in First Light. We do not promise zero retention by Anthropic; its API retention policy describes standard retention and exceptions.

Semantic search can send text to Voyage AI to generate embeddings. Google Calendar, Telegram, email delivery and authorized MCP clients process the information needed for the connected features you use. Paid checkout is handled by Lemon Squeezy. These services have their own privacy terms.

We don't sell your data. We don't serve advertising. We don't share your tasks with third parties for marketing. We use your task content for advertising.

Email supports account access, reminders, configured digests and product communications. Settings → Notifications controls reminder preferences. Where an unsubscribe option is provided, use it to stop that category of message. Account-access messages are separate from optional reminders and newsletters.

We set a session cookie via Supabase Auth so you stay signed in. We use localStorage to remember your language choice and the order of items in your sidebar. We use Vercel Analytics and Speed Insights to understand usage and performance, and record product interaction events. Google Analytics and Microsoft Clarity may also be loaded when configured; those services can collect additional usage information and use browser storage or cookies. This is not a tracking-free service.

Access. Settings → Your data → Download as JSON exports the supported account records, including tasks, lists, tags, habits, focus sessions and saved reviews. It is not an export of every stored record or attachment file. Contact us for additional access requests.

Erasure. Settings → Danger zone → Delete my account requests permanent account deletion and removal of linked records through the account deletion process. This cannot be reversed from the app; export first if you want a copy. Contact us about records held by connected providers or other data not covered by the app controls.

Correction. You can edit any task, list, tag, habit, note, or display name from the app at any time.

For other requests (questions, complaints, regulator inquiries), email info@firstlight.to.

First Light is not directed at children under 13.

If this policy changes materially we will notify you by email before the changes take effect.