Privacy policy
Who handles your data
The data controller is Riccardo Pennisi, partita IVA 06056040873, based at Via Pio La Torre 28, 95032 Belpasso (CT), Italy.
For anything concerning your data you can write to hello@sbrigalo.app. I answer personally: Sbrigalo is made by one person, there's no legal department behind it.
In one line
Sbrigalo collects the bare minimum it needs to work, uses no cookies of any kind, has no trackers, shows no advertising and sells nothing to anyone. What follows is the precise list of what it keeps and why.
1. What we collect, and why
When you sign up
- Email — needed to let you in, to confirm the address is yours, and to send you your password again if you forget it.
- Name — only to say hello and to show the people you connect with who you are. You can put whatever you like.
- Password — we don't keep it. The database holds only a fingerprint computed with scrypt, with a random salt that is different for each person: the password cannot be recovered from that fingerprint.
- Your chosen language.
When you use the app
- The things to do that you write: title, notes, checklists, duration, deadlines, category. They are yours and they stay yours.
- The photos you attach to things to do, to rewards or to things you hand over.
- The times you get up and go to bed, your fixed commitments, your days off or holidays. They're needed to suggest things when you actually have time.
- If you work shifts, your shift rotation.
- When you open the app (only the day, not the hour) and how many things you close. This is needed to work out when you actually get things done, and to stop suggesting them at times when you never would.
- Your things: if you write them yourself — the dog's name, the car's number plate, a child's name. Only what you decide to write.
If you connect with someone
Who you are connected with, and what you have handed over to each other or put on your shared board. The person you connect with sees your name, what you hand over to them, and what you put on your shared board. They don't see the rest of your things.
If you turn on notifications
A technical address for your phone provided by the browser, and two encryption keys. It is not your phone number and it does not identify you outside the app. It is deleted when you turn notifications off.
If you turn on the weather
Your approximate location, rounded to two decimal places — a square roughly one kilometre across. We don't know what street you live on. It's only needed to ask whether it will rain tomorrow, so we don't suggest trimming the hedges in the pouring rain.
If you pay
Payments are handled by Stripe: you enter your card details on Stripe's own payment page and they go straight to Stripe, never touching our servers. We never see your card number, in full or in part.
What stays with us is only what's needed to activate your plan and for accounting obligations: which top-up you bought, how much you paid, when, and the transaction identifier Stripe gives us. Top-ups don't renew by themselves: no recurring charges — you pay only when you decide to.
What we do NOT collect
There is no cookie, of any kind. There is no third-party analytics tool, no pixel, no advertising tracker, no ad network. We neither buy nor sell lists of people. We don't know what other sites you visit, and we don't want to know.
The app uses the browser's local storage (localStorage) to
keep you signed in, remember your language and the tips you've already
read. That data stays on your phone and is never sent anywhere; it is
deleted when you sign out of the app or clear the site's data. That's why
there is no cookie banner: there would be nothing to
accept.
2. Why we're allowed to (the legal bases)
| What | Why it's permitted |
|---|---|
| Email, password, your tasks, your connections | Needed to provide the service you asked for (art. 6.1.b GDPR — contract) |
| Verification code and password recovery | Contract, and our interest in protecting your account |
| Technical logs of errors and emails sent | Legitimate interest in keeping the service running (art. 6.1.f) |
| Notifications | Your consent. You turn them on, and off whenever you like |
| Location for the weather | Your consent. You give it with a button, and you can take it back |
| Purchase data and top-up receipts | Contract (art. 6.1.b) and legal obligation (art. 6.1.c) |
You can withdraw your consent whenever you like, and withdrawing it doesn't lose you anything you've already done: the app keeps working without notifications and without the weather.
3. The language model — read this
When you write a thing to do, the app first tries to understand it by itself, on your phone, from the words. If after that first pass something remains unclear — how long it takes, which category it belongs in — then the text of that single thing to do is sent to an external provider, Anthropic (United States), which replies with a suggested duration and category.
The message that goes out contains three things and nothing more: the text you wrote, the names of your categories, and today's date. It contains neither your name, nor your email, nor your location, nor even a number that identifies you.
Anthropic states that texts sent through its developer interface are not used to train its models without explicit permission, and are kept only for a limited period.
If you don't like it, you can avoid it entirely: correct the labels under the field by hand as you write — category, duration, time of day, date. If nothing uncertain remains, the model is not called and your text never leaves.
4. Where the data lives, and who touches it
Sbrigalo relies on a few providers, each for one thing only:
| Who | What they do | What they receive | Where |
|---|---|---|---|
| Netlify | Runs the app and hosts the database and the photos | All the app's data | United States (Ohio) |
| Resend | Sends the service emails | Your address, the code or the temporary password | Ireland (sending) |
| Anthropic | Understands unclear tasks | Only the text of that task (see above) | United States |
| Apple / Google / Mozilla | Deliver the notifications to your phone | The content of the notification, encrypted | Depending on your browser |
| Stripe | Processes payments | The card details you enter at checkout. We only receive the outcome and an identifier | Ireland / United States |
| Open-Meteo | Says whether it will rain | Your location rounded to ~1 km and a date. None of your data | Germany |
Transfers outside the European Union. Netlify and Anthropic are US companies. Transfers take place on the basis of the European Commission's standard contractual clauses contained in the providers' respective data processing agreements.
5. A child's profile
Sbrigalo lets a parent create a reduced page for a child, with their chores and their rewards. This part is created by the parent, and the responsibility for that data lies with the parent.
Of the child, the database holds only three things: the first name the parent writes, the age, and a four-digit PIN. No email, no password, no account. The child fills in no text field: they can only say "done" on a chore and redeem a reward.
The page opens with a secret link plus the PIN: the link alone is not enough.
Sbrigalo is not designed to be used directly by children under 14 with their own account: signing up requires an email and you must be at least 14. The child profile is an exception governed by the parent.
6. Who can see your things
Nobody reads what you write. There is no function, anywhere in the app, that lets whoever administers it see the titles of your tasks, your notes, your photos or your boards. It's a choice written into the code: the admin panel shows only numbers — how many tasks you've created, how many you've closed, how many days you've opened the app — and the names of the people you're connected with, because without those you can't tell who is connected to whom.
In all honesty, the uncomfortable part must be said too: whoever administers the service, as with any service, has technical access to the database and could reset an account's password. No written promise makes that impossible; what we can say is that we don't do it, that there is no tool in the app to do it conveniently, and that the person administering it is one.
7. How long we keep the data
- Your account and your things: for as long as you keep the account. There is no automatic deletion.
- Verification codes: valid for 15 minutes.
- Temporary recovery passwords: valid for one hour.
- Technical logs (how many emails went out, how many calls to the model, which errors): 30 days, then they delete themselves. There is no personal data inside: it holds the type of email, not the address; the error message, not the content of the request.
- Guest access links expire after three days.
8. Your rights
You can ask, at any time and free of charge:
- to know what data we hold about you;
- to correct it, if it's wrong;
- to delete your account and everything it contains;
- to receive it in a file, to take it elsewhere;
- to object to a certain processing, or to restrict it;
- to withdraw your consent to notifications and location, without losing anything.
Write to hello@sbrigalo.app and I'll answer within 30 days, as the law requires — realistically within a couple of days, given how many of us there are.
If you think something is wrong, you can turn to the Garante per la protezione dei dati personali, the Italian data protection authority (garanteprivacy.it), or to the authority of your own country.
9. How the data is protected
- Everything travels encrypted (HTTPS), always.
- Passwords are stored as an scrypt fingerprint with a random salt.
- Your session is held by a signed token that expires after 90 days.
- Verification codes are not stored: the database holds only their fingerprint.
- Each person's data is kept separate: every request to the server checks who owns the thing being asked for.
No system is impenetrable, and I won't promise you that ours is. If something happened that put your data at risk, we would tell you, and we would tell the Garante within 72 hours, as required.
10. If something changes
If this policy changes substantially we'll tell you inside the app, not with a line hidden at the bottom of a page. The date at the top always says when the latest version was written.
Sbrigalo · Riccardo Pennisi · P.IVA 06056040873 · Via Pio La Torre 28, 95032 Belpasso (CT)