Privacy Policy

1. What We Collect

We collect only what is necessary to provide the service:

• Your email address and account credentials
• Task data you create — titles, descriptions, deadlines, and subject groupings
• Chat messages you send to the AI assistant
• Routine data (recurring habits and completion history)
• Google Calendar OAuth tokens, if you choose to connect your calendar
• Anonymous usage analytics (page views, feature interactions) via PostHog

2. How We Use It

• To operate and deliver the Wrenchlist service
• To generate AI-powered task suggestions, summaries, and prioritization (via Anthropic Claude)
• To understand how the product is used so we can improve it (via PostHog analytics)
• To send transactional emails (account-related notifications) via Resend

We do not sell your data to third parties. We do not use your data for advertising.

3. Google Calendar

If you connect Google Calendar, we store an OAuth access token and refresh token to create calendar events on your behalf. These tokens are stored securely and are only used when you explicitly request to block time for a task. We request only the minimum scopes necessary to create and read calendar events. You can disconnect Google Calendar at any time from the Settings page, which immediately revokes and deletes your tokens.

4. AI Processing

Your task data and chat messages are sent to Anthropic's API to power AI features such as task organization, daily summaries, and prioritization suggestions. Anthropic processes this data solely to return a response — they do not use your data to train their models. See Anthropic's Privacy Policy for details.

5. What You Should & Shouldn't Put in Wrenchlist

Wrenchlist is designed to organize what you need to do — not to store confidential content. Your task titles and descriptions are sent to cloud services (Anthropic, Supabase) to power the app. While this data is encrypted and never sold, you should be thoughtful about what you enter.

Great for:

• General work tasks — “prep for Monday meeting,” “review Q2 budget,” “file expense report”
• Personal projects, household tasks, life admin
• Anything you'd write in a personal to-do list or text to a friend

Not appropriate for:

• Proprietary code, trade secrets, or internal project details covered by NDA
• Customer personal information (names, SSNs, financial records)
• Data subject to compliance requirements (HIPAA, SOC 2, etc.)
• Passwords, API keys, or credentials of any kind

The rule of thumb: “Prepare the board deck by Friday” is fine. The contents of the board deck are not. Use Wrenchlist to organize the what and when— keep sensitive details in your company's approved tools.

6. Data Storage

Your data is stored in Supabase, which runs on Amazon Web Services infrastructure. All data is encrypted in transit (TLS) and encrypted at rest. Wrenchlist is hosted on Vercel.

7. Third-Party Services

We work with the following sub-processors to deliver the service:

• Supabase — database and authentication
• Anthropic — AI language model (Claude)
• Google — optional Calendar integration
• PostHog — product analytics (anonymous)
• Vercel — application hosting
• Resend — transactional email

No data is sold or shared with any party beyond what is listed above.

8. Data Deletion

You can delete all your tasks and chat history directly from the Settings page. To permanently delete your account and all associated data, email wrenchlist.support@gmail.com and we will process your request within 30 days.

9. Cookies

We use session cookies strictly for authentication — to keep you signed in. We do not use advertising cookies or third-party tracking cookies. PostHog analytics uses a first-party cookie to distinguish anonymous sessions.

10. Contact

Questions about this policy? Email us at wrenchlist.support@gmail.com.