Privacy policy

Starter Finisher (https://www.starterfinisher.co.uk) is run by Mitch Cullum. Under UK data protection law (UK GDPR and the Data Protection Act 2018) that makes Mitch Cullum the “controller” of the personal data described here.

Mitch Cullum
privacy@starterfinisher.co.uk

Your account.

• Your name and email address.
• Your password, which we store only as a one-way hash. We can’t read it and can’t tell you what it is.
• When you signed up, when you last logged in, which plan you’re on, and your reminder settings.

What you create.

• Boards, tasks (titles, descriptions, due dates, priorities, reminder times, who they’re assigned to), subtasks, tags and comments.
• A board activity log (for example “Sam finished a task”) and any invite links you create.

Technical data. Your IP address is used briefly to count login and sign-up attempts so we can block abuse. Our hosting provider also keeps standard server logs.

What we don’t collect. No payment details (nothing is for sale yet), no location, no contacts, and no advertising or analytics trackers.

• To provide the service you signed up for (contract): your account, boards, sharing with other people, and reminders.
• To send you emails that are part of the service: the daily reminder of what’s overdue or due today (on by default), reminders for tasks where you set a time, and notifications when someone @mentions you in a comment. If a weekly recap is available on your plan it is sent too. You can switch reminders off in Settings, and the daily reminder has an unsubscribe link.
• To keep the service secure (legitimate interests): rate limiting and preventing spam or abuse.

We don’t sell your data, we don’t use it for advertising, and we don’t use your tasks or comments to train AI models.

• People on your boards. Everyone on a shared board can see its tasks, comments and activity, and your name next to what you do. If you @mention someone, they are emailed the comment and the task title.
• Service providers that process data for us, only to run the service: Vercel (hosting), Supabase (database) and Resend (email delivery).
• Authorities, if the law genuinely requires us to disclose something.

Some of these providers may process data outside the UK. Where they do, they rely on recognised safeguards such as the UK addendum to the standard contractual clauses.

• Your account and content are kept until you delete your account.
• When you delete your account, your profile and personal data are removed. Boards only you were on are deleted. Boards shared with others are handed to the member who has been on them longest, and tasks you created there stay on the board without your name. Your comments are deleted.
• Login and sign-up attempt counters are cleared within a day.
• Copies may remain in our providers’ backups for a limited time before being overwritten.

You can:

• Download your data and delete your account yourself, any time, from Settings.
• Ask us to correct anything that’s wrong, restrict or object to how we use your data, or ask for a copy in a portable format. Use the contact details above.
• Complain to the Information Commissioner’s Office (ico.org.uk) if you think we’ve handled your data badly. We’d appreciate the chance to put it right first.

We use very little, and none of it is for tracking:

• One cookie, sf_session, keeps you logged in. It’s essential to the service, lasts 30 days, and is removed when you log out.
• One browser storage entry remembers that you dismissed the welcome tip.

There are no analytics, advertising or third-party cookies, which is why you don’t see a cookie banner.

Connections are encrypted (HTTPS), passwords are hashed, access to every board is checked on the server, and login attempts are rate limited. No system is perfectly secure, so please use a strong, unique password.

Starter Finisher isn’t intended for anyone under 13, and we don’t knowingly collect their data.

If we make a meaningful change we’ll update the date at the top and, where it matters, tell you by email or in the app.

Questions or requests about your data:

Mitch Cullum
privacy@starterfinisher.co.uk