Privacy Policy

Last updated October 4, 2026

This policy covers the Ordered Core app: the daily touchpoints, To-Do, Projects, My Wins, Lessons and Core Anchors. It explains what is kept, where it is kept, who can see it, and what your organization receives. The Ordered Core website has its own privacy policy.

1. Who is who

"You" are the person using the app. "Your organization" is the employer or other organization that bought your license. "We" are Ordered Core, which runs the app.

Your organization pays for your license. It does not get access to what you enter. That is the promise you see when you sign up, and the rest of this policy explains how it is kept.

2. What you enter, and where it is kept

Everything you write or choose in the app is your content: your reflections, your one thing for the day, your joy, your To-Do and project tasks, your wins, your goals, the anchors you complete, and what you write when you reflect on them.

Your content is saved on your phone, in the app's storage in your browser, and is protected by your phone's lock. If you clear your browser's data or lose your phone, anything saved only on the phone is gone, because we never had a copy.

Two features need a copy on our servers. Each copy is used only for that feature:

• Reminders. When you set a reminder on a task, we keep the task's title, date, time and reminder settings so we can send the reminder at the right moment, even when the app is closed.
• Your account. When your organization's plan includes accounts, your content is backed up to your account, so you can sign in on a new phone and keep it.

Some things never leave your phone: your Code Switch picture, and the "where is your head" number in the Midday Check-In, which is not recorded at all.

3. Information about you and your license

• To set up your license, we receive your name, your email address, and the organization your license belongs to.
• To report how many licenses are in use (see section 6), we record whether your license has been activated and the dates you opened the app. We record that you were active on a day, not what you did.
• If you allow notifications, your phone gives us a notification address that identifies your phone to the notification service, and nothing more.
• Like any website, our hosting provider receives ordinary technical information: IP address, browser and device type, and the pages requested.

4. Speaking instead of typing

The Say it button uses the speech recognition built into your browser. Depending on your phone, the recording may be processed by the company that makes your browser, such as Google for Chrome or Apple for Safari, under its own privacy policy. We never receive the recording. We receive only the words, which go into the task you are adding. If you would rather not use it, type instead.

5. Calendars

Add to calendar opens Google Calendar, Outlook, or your phone's calendar with that one task filled in. Your phone sends it straight to that calendar. We do not connect to your calendar account, read your calendar, or see what is on it. Once the event is in your calendar, Google, Microsoft or Apple handles it under its own privacy policy.

6. What your organization receives

Your organization sees aggregate reporting only:

• how many licenses it bought, how many have been activated, and how many were active in the last 30 days;
• results of the optional assessment, if your organization uses it, as group totals; and
• the most common themes in optional assessment answers, as counts, never as quotes.

Any group smaller than 11 people is not reported at all, so a small team cannot be singled out.

Your organization never receives:

• your name, or any way to tell which numbers are yours;
• your entries, reflections, goals, tasks, wins or anchors;
• which lessons you opened or which areas you looked at;
• any mood, risk score, or flag about you; or
• anything traceable to you, on request or otherwise.

7. The optional assessment

Your organization may offer a short assessment when you start and again after 60 days. It is optional, and skipping it changes nothing about your license. Your answers count only toward group totals, under the same rule of 11. Written answers are summarized into themes and are never shown as written.

8. What we do not do

• We do not sell, rent, or trade your information.
• We do not show ads or use advertising trackers.
• We do not read your content. Our staff access the systems that hold it only to keep the service running and secure, or when the law requires it.
• We do not use your content to train any artificial intelligence model.
• We do not give your content to your organization, for any reason.

9. Who else handles it

We use a small number of service providers to run the app. They may use your information only to provide their service to us:

• our hosting provider, which serves the app;
• Supabase, our database provider, which stores reminders and account information; and
• OneSignal, which delivers notifications. Each notification carries the reminder's text, so OneSignal handles that text in order to deliver it.

We disclose information to law enforcement or a regulator only when the law requires it and, where the law allows, we tell you first.

If we are ever involved in a merger, acquisition, financing, or sale of assets, your information may transfer as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

10. Notifications

You choose whether to allow notifications, and you can turn them off at any time in your phone's settings. Turning them off stops reminders. Nothing else changes.

11. Storage and security

Information on our servers is stored in the United States, encrypted in transit and at rest, and access to it is limited to staff with an operational need. No system is completely secure. If a breach affecting your personal information occurs, we will notify you without undue delay as required by law.

12. How long we keep it

• Content on your phone stays until you delete it or clear your browser's data.
• Reminder details are deleted when you delete the task or the reminder has finished.
• Account information and backed up content are kept while your license is active. When your license ends, because you leave or your organization's plan ends, we delete them within 30 days. You can ask for a copy before then.
• Aggregate reports contain nothing about you, so your organization may keep them.
• Records the law requires us to keep are kept for as long as it requires.

13. Your rights

You have the right to access the personal information we hold about you, correct it if it is wrong, request its deletion, receive a copy of it, and withdraw consent for anything optional. To exercise any of these, email Hello@OrderedCore.com. You do not need your organization's permission, and we do not tell your organization that you asked.

14. State privacy rights

If you live in California, Colorado, Connecticut, Virginia, Texas, or another state with a comprehensive privacy law, you have the rights described above, and additionally the right to know what categories of personal information we collect and why, which are set out in sections 2 and 3; the right to opt out of the sale or sharing of personal information and of targeted advertising, none of which we do; the right not to be discriminated against for exercising any privacy right; and the right to appeal a decision we make about your request, by replying to our response. Send any state privacy request to Hello@OrderedCore.com.

15. Age

The app is for working adults. We do not knowingly collect information from anyone under 18. If we learn that we have, we delete it promptly.

16. Changes to this policy

We may update this policy. The date at the top shows the latest version. We will tell you about any material change in the app before it takes effect.

17. Contact

For any privacy question or request, email Hello@OrderedCore.com.