Legal Documents

Privacy Policy &
Terms of Service

Effective date: March 27, 2026 · Last updated: March 27, 2026
Applies to: gaveki.com and all Gaveki applications
⚠️ Important notice: This document was prepared using established legal frameworks and current best practices. It is not a substitute for advice from a licensed attorney. If you have specific legal concerns, please consult a qualified lawyer in your jurisdiction.
The short version: Gaveki is a focus and productivity tool. We collect only what is necessary to make the app work. We do not sell your data, share it with advertisers, or use it for any purpose other than providing you the service. Your tasks, streak, and routines are yours.
Section 01

Who We Are

Gaveki ("we," "us," or "our") operates the website at gaveki.com and the Gaveki web application. Gaveki is a productivity and focus application designed for adults who experience attention and executive function challenges, including those with ADHD.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services. Please read this policy carefully. By using Gaveki, you agree to the practices described in this document.

For privacy-related questions, contact us at: privacy@gaveki.com

Section 02

Information We Collect

We collect information in the following categories:

Information you provide directly:

  • Account information: Email address, display name, and authentication credentials when you create an account or sign in via Google OAuth or magic link.
  • App content: Tasks you enter into the Brain Dump, routine items you create, workspace names, daily reflections, and CBT reframe notes. This content is stored to provide the core sync functionality.
  • Preferences and settings: Coach style preference (Direct or Supportive), timer duration preferences, focus shield site lists, energy levels, mood check-ins, and notification settings.
  • Core Group contacts: Names and contact information (email, phone) you voluntarily add to your Core Group sharing feature. This data is stored in your account and used only to facilitate message sharing at your explicit request.

Information collected automatically:

  • Usage data: Pages visited, features used, session duration, and interaction events, collected via PostHog analytics (see Section 5).
  • Technical data: Browser type, device type, operating system, IP address, and referring URL. This information is used for security monitoring and service improvement.
  • Streak and productivity metrics: Consecutive days of task completion, total tasks completed, total focus minutes, and similar aggregate productivity statistics.
About mood and energy data: Gaveki asks you to optionally share how you are feeling and your energy level. This data is treated with the same protections as any other personal data and is used solely to personalize your app experience. It is never shared with third parties or used for any analytical profiling beyond your own dashboard.
Section 03

How We Use Your Information

We use the information we collect for the following purposes:

  • Providing the service: Syncing your tasks, routines, and settings across devices; authenticating your identity; delivering calendar reminders and alarm notifications.
  • Personalizing your experience: Selecting coach messages appropriate to your tone preference; surfacing relevant ADHD tips based on usage patterns.
  • Communications: Sending magic link authentication emails; service-related notifications; feature announcements if you have opted in. We do not send unsolicited marketing emails.
  • Security and fraud prevention: Monitoring for unauthorized access, detecting abuse, and protecting the integrity of our systems.
  • Analytics and improvement: Understanding aggregate usage patterns to improve the product. All analytics are processed at the aggregate level; we do not build individual behavioral profiles for marketing.
  • Legal compliance: Meeting our obligations under applicable law.

We process your data on the following legal bases (applicable to GDPR jurisdictions):

  • Contract performance: Processing necessary to deliver the service you signed up for.
  • Legitimate interests: Security monitoring, fraud prevention, and aggregate analytics — balanced against your privacy interests.
  • Consent: Optional features such as mood check-ins, email marketing communications, and browser notifications.
  • Legal obligation: Where required by applicable law.
Section 04

Information We Do Not Collect

We explicitly do not collect or store:
  • Medical records, clinical diagnoses, or official health information
  • Payment card numbers or bank account details (handled entirely by Stripe — see Section 5)
  • Government identification numbers, Social Security numbers, or similar
  • Precise geolocation data
  • Biometric identifiers
  • Contents of voice recordings (voice input is processed locally by your browser's Web Speech API — audio is not sent to our servers)
  • Information about minors under 16 years of age

On ADHD and health data: Gaveki is a productivity application, not a medical device or healthcare provider. When users voluntarily describe their ADHD experience or enter information related to attention challenges, this is treated as general app content data — not as protected health information (PHI) under HIPAA. We are not a HIPAA-covered entity. However, we treat all sensitive user-provided content with the same high level of protection regardless of its nature.

Section 05

Third-Party Services

Gaveki uses the following third-party services. We have selected each for their privacy practices and data security standards:

Service Purpose Data Shared
Supabase Database, authentication, and real-time sync Account information, tasks, routines, preferences. Stored on Supabase's infrastructure (SOC 2 Type 2 certified).
Google OAuth Optional sign-in method Name and email address returned by Google upon successful authentication. No other Google account data is accessed.
PostHog Product analytics Anonymized usage events, page views, and feature interactions. IP addresses are not stored. No cross-site tracking.
Mailchimp Email communications (opt-in only) Email address and first name for users who voluntarily subscribe to launch updates.
Stripe (coming soon) Payment processing for Pro subscriptions Payment information is collected and processed directly by Stripe. Gaveki never sees or stores your full card number.

We do not sell, rent, or trade your personal information to any third party for marketing purposes. We do not use advertising networks or behavioral advertising.

Third-party links: The Gaveki Learn tab and other areas may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies separately.
Section 06

Data Storage & Security

Your data is stored on Supabase infrastructure, which maintains SOC 2 Type 2 compliance and employs industry-standard encryption in transit (TLS 1.2+) and at rest (AES-256). Row Level Security (RLS) is enforced at the database level, meaning each user can only access their own data — even at the infrastructure level, your data is isolated from other users.

We implement the following security measures:

  • All data transmission encrypted via HTTPS/TLS
  • Authentication via passwordless magic links or OAuth — no passwords stored
  • Database-level Row Level Security policies enforced for every query
  • No third-party advertising SDKs or tracking pixels embedded in the app
  • Regular review of third-party service access and permissions

Despite our efforts, no security system is impenetrable. In the event of a data breach that affects your personal information, we will notify you and relevant authorities as required by applicable law within 72 hours of becoming aware of the breach.

Section 07

Data Retention

We retain your personal information for the following periods:

Data Type Retention Period
Account and authentication data Until account deletion, plus 30 days for recovery purposes
Tasks, routines, and app content Until account deletion
Usage analytics (PostHog) 12 months, then aggregated or deleted
Email subscription data (Mailchimp) Until unsubscribe request is processed
Billing records (Stripe) 7 years as required by tax law
Server logs 90 days

You may request deletion of your account and all associated data at any time by contacting privacy@gaveki.com. We will process deletion requests within 30 days.

Section 08

Your Rights

Depending on your location, you have the following rights regarding your personal data:

All users:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request that we correct inaccurate or incomplete data.
  • Deletion: Request deletion of your account and all associated data.
  • Portability: Request your data in a machine-readable format.
  • Opt-out of email communications: Unsubscribe from any marketing emails at any time.

California residents (CCPA/CPRA): You have the right to know what categories of personal information we collect, the right to opt out of any sale of personal information (we do not sell personal information), the right to non-discrimination for exercising your privacy rights, and the right to limit use of sensitive personal information.

EU/UK/EEA residents (GDPR): You have the right to object to processing, the right to restrict processing, and the right to lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at privacy@gaveki.com. We will respond within 30 days.

Section 09

Children's Privacy

Gaveki is not directed to children under the age of 16. We do not knowingly collect personal information from anyone under 16 years of age. If we become aware that we have collected personal information from a child under 16 without verifiable parental consent, we will take steps to delete that information as quickly as possible.

If you believe we may have collected information from or about a child under 16, please contact us immediately at privacy@gaveki.com.

Section 10

International Users

Gaveki is operated from the United States. If you access our service from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. These countries may have data protection laws that differ from those in your country.

Where we transfer data from the European Economic Area, United Kingdom, or Switzerland to countries not deemed adequate by the European Commission, we rely on Standard Contractual Clauses or other appropriate transfer mechanisms as approved under GDPR.

By using Gaveki and providing your information, you consent to this transfer, storage, and processing.

Section 11

No Sale of Data

We do not sell, rent, trade, or otherwise transfer your personal information to third parties for monetary or other valuable consideration. This applies to all users, including California residents under CCPA. We have no advertising partners, data brokers, or marketing networks that receive your data.

Gaveki's revenue model is based on direct user subscriptions (Pro tier), not advertising or data monetization. Your data is not our product.

Section 12

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by:

  • Updating the "Last updated" date at the top of this page
  • Displaying a notice within the Gaveki application
  • Sending an email notification to registered users for significant changes

Your continued use of Gaveki after the effective date of any changes constitutes your acceptance of the updated policy. If you do not agree to the updated policy, you must stop using the service and may request deletion of your account.

Section 13

Contact Us

For any privacy-related questions, requests, or concerns, please contact us:

  • Email: privacy@gaveki.com
  • Website: gaveki.com

We will respond to all legitimate privacy requests within 30 days.

Please read these Terms carefully. By accessing or using Gaveki, you agree to be bound by these Terms of Service. If you do not agree to these Terms, do not use the service.
Section 01

Acceptance of Terms

These Terms of Service ("Terms") constitute a legally binding agreement between you ("User," "you," or "your") and Gaveki ("Company," "we," "us," or "our") governing your access to and use of the Gaveki website located at gaveki.com and all associated applications, features, and services (collectively, the "Service").

By creating an account, clicking "I Agree," accessing the Service, or otherwise using Gaveki in any way, you acknowledge that you have read, understood, and agree to be bound by these Terms and our Privacy Policy, which is incorporated herein by reference.

If you are using the Service on behalf of an organization, you represent and warrant that you have the authority to bind that organization to these Terms.

Section 02

Description of Service

Gaveki is a web-based productivity and focus management application designed to assist adults in managing tasks, building routines, and maintaining focus. The Service includes features such as:

  • Brain Dump task capture and management
  • Focus Timer with coaching messages
  • Daily Routine tracking
  • Distraction Shield (browser extension for site blocking)
  • Streak tracking and milestone celebrations
  • Cross-device synchronization (registered users)
  • Calendar scheduling and reminders
  • CBT-inspired reframing tools
  • Voice input and coaching feedback
  • Core Group achievement sharing

We reserve the right to modify, suspend, or discontinue any aspect of the Service at any time, with or without notice. We will make reasonable efforts to notify users of significant changes.

Section 03

Eligibility

The Service is available only to individuals who are 16 years of age or older. By using Gaveki, you represent and warrant that:

  • You are at least 16 years of age
  • You have the legal capacity to enter into a binding agreement
  • Your use of the Service does not violate any applicable law or regulation
  • You are not located in a country subject to a U.S. government embargo or designated as a "terrorist supporting" country

If you are between 16 and 18 years of age, you represent that your parent or legal guardian has reviewed and agreed to these Terms on your behalf.

Section 04

Account Registration

You may use Gaveki without creating an account, with data stored locally on your device. To access cross-device sync and other cloud features, you must register an account.

When creating an account, you agree to:

  • Provide accurate, complete, and current information
  • Maintain the security of your account credentials
  • Promptly notify us at privacy@gaveki.com of any unauthorized use of your account
  • Accept responsibility for all activities that occur under your account

You may not create accounts for others without their explicit consent. You may not use another person's account. We reserve the right to refuse registration or cancel accounts at our discretion.

Section 05

Free and Pro Tiers

Free Tier: Gaveki offers a free tier with core functionality including Brain Dump, Focus Timer, Routines, Streak Tracking, and Distraction Shield. The free tier is provided "as is" with no guarantee of uptime or continued availability of any specific feature.

Pro Tier (coming soon): Premium features including cross-device sync, advanced analytics, and additional features will be offered on a paid subscription basis. When available:

  • Subscription fees will be clearly disclosed before purchase
  • Billing will recur automatically unless cancelled
  • Refund terms will be disclosed at the time of purchase
  • Cancellation will be available at any time through account settings
  • Payment processing is handled by Stripe; Gaveki does not store payment card information

We reserve the right to change pricing with reasonable advance notice. Existing subscribers will be notified at least 30 days before any price increase.

Section 06

Acceptable Use

You agree to use Gaveki only for lawful purposes and in accordance with these Terms. You agree not to:

  • Use the Service in any way that violates any applicable federal, state, local, or international law or regulation
  • Transmit any material that is defamatory, obscene, indecent, abusive, offensive, harassing, violent, hateful, inflammatory, or otherwise objectionable
  • Attempt to gain unauthorized access to any part of the Service, its related systems, or networks
  • Use any robot, spider, scraper, or other automated means to access the Service
  • Introduce any viruses, Trojan horses, worms, or other malicious or harmful material
  • Impersonate or attempt to impersonate Gaveki, a Gaveki employee, or any other person
  • Reverse engineer, decompile, or disassemble any software component of the Service
  • Remove, alter, or obscure any copyright, trademark, or other proprietary notices
  • Use the Service for any commercial purpose without our express written consent
  • Collect or harvest any personally identifiable information from the Service
  • Use the Service in a manner that could damage, disable, overburden, or impair the Service

Violation of these provisions may result in immediate termination of your account and may expose you to civil or criminal liability.

Section 07

Intellectual Property

The Service and its original content, features, functionality, design, logos, trademarks, and underlying technology are and will remain the exclusive property of Gaveki and its licensors. Our trademarks and trade dress may not be used in connection with any product or service without the prior written consent of Gaveki.

Nothing in these Terms grants you any right, title, or interest in or to the Service or its intellectual property, except for the limited license to use the Service as described herein.

The ADHD educational content in the Learn tab is curated from public research and cited appropriately. It is provided for informational purposes only and does not constitute medical advice.

Section 08

User Content

You retain full ownership of all content you create within Gaveki, including tasks, routine items, reflections, and CBT notes ("User Content").

By using the Service, you grant Gaveki a limited, non-exclusive, royalty-free license to store, process, and transmit your User Content solely for the purpose of providing and improving the Service. We will not use your User Content for any other purpose.

You represent and warrant that:

  • You own or have the necessary rights to your User Content
  • Your User Content does not violate these Terms or any applicable law
  • Your User Content does not infringe the intellectual property or privacy rights of any third party

We reserve the right to remove User Content that violates these Terms, without liability to you.

Section 09

Medical Disclaimer

IMPORTANT — Please read carefully.

Gaveki is a productivity and focus management tool, not a medical device, clinical service, or healthcare provider. Nothing in the Service constitutes medical advice, diagnosis, treatment, or a doctor-patient relationship.

The ADHD-related educational content, CBT reframing tools, and coaching messages provided in Gaveki are based on publicly available research and are intended for general informational and motivational purposes only. They are not a substitute for professional medical advice, diagnosis, or treatment.

Always seek the advice of a qualified healthcare provider with any questions you may have regarding ADHD, mental health, medication, or any other medical condition. Never disregard professional medical advice or delay seeking it because of something you have read or experienced within Gaveki.

If you are experiencing a mental health emergency, please contact emergency services (911) or a crisis line such as the 988 Suicide & Crisis Lifeline immediately.

Gaveki is not responsible for any decisions you make based on information provided within the Service. You assume full responsibility for your use of the Service and any outcomes that result.

Section 10

Disclaimers of Warranties

THE SERVICE IS PROVIDED ON AN "AS IS" AND "AS AVAILABLE" BASIS, WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, OR COURSE OF PERFORMANCE.

Gaveki does not warrant that:

  • The Service will be uninterrupted, error-free, or secure
  • Any errors or defects in the Service will be corrected
  • The Service or any server that makes it available is free of viruses or other harmful components
  • The results of using the Service will meet your requirements or expectations
  • Data stored in the Service will not be lost or corrupted

Some jurisdictions do not allow the exclusion of implied warranties, so the above exclusions may not apply to you.

Section 11

Limitation of Liability

TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL GAVEKI, ITS OFFICERS, DIRECTORS, EMPLOYEES, AGENTS, SUPPLIERS, OR LICENSORS BE LIABLE FOR:

  • Any indirect, incidental, special, consequential, or punitive damages
  • Loss of profits, revenue, data, goodwill, or other intangible losses
  • Damages arising from your inability to access or use the Service
  • Damages arising from any unauthorized access to or alteration of your data
  • Damages arising from any third-party conduct on the Service
  • Damages arising from any content obtained from the Service

IN ALL CASES, GAVEKI'S TOTAL LIABILITY TO YOU FOR ANY CLAIMS ARISING FROM OR RELATED TO THE SERVICE SHALL NOT EXCEED THE GREATER OF: (A) THE AMOUNT YOU PAID TO GAVEKI IN THE 12 MONTHS PRECEDING THE CLAIM, OR (B) ONE HUNDRED DOLLARS ($100 USD).

Some jurisdictions do not allow the limitation of liability for certain damages, so some of these limitations may not apply to you.

Section 12

Indemnification

You agree to defend, indemnify, and hold harmless Gaveki and its officers, directors, employees, contractors, agents, licensors, suppliers, successors, and assigns from and against any claims, liabilities, damages, judgments, awards, losses, costs, expenses, or fees (including reasonable attorneys' fees) arising out of or relating to:

  • Your violation of these Terms
  • Your User Content
  • Your use of the Service in a manner not authorized by these Terms
  • Your violation of any applicable law or the rights of any third party
Section 13

Termination

By you: You may terminate your account at any time by contacting us at privacy@gaveki.com. Upon termination, your right to use the Service ceases immediately. We will delete your account data within 30 days of your request, except where retention is required by law.

By us: We may suspend or terminate your account immediately, without prior notice or liability, for any reason, including if you breach these Terms. We may also discontinue the Service in whole or part at any time.

Upon termination, all provisions of these Terms that by their nature should survive will survive, including intellectual property provisions, warranty disclaimers, indemnity, and limitations of liability.

Section 14

Governing Law & Dispute Resolution

These Terms shall be governed by and construed in accordance with the laws of the United States, without regard to conflict of law principles.

Informal Resolution: Before filing any formal legal claim, you agree to first contact us at legal@gaveki.com and attempt to resolve the dispute informally. We will attempt to resolve the dispute within 30 days.

Binding Arbitration: If informal resolution fails, any dispute, claim, or controversy arising out of or relating to these Terms or the Service shall be resolved by binding arbitration under the rules of the American Arbitration Association (AAA), rather than in court. You waive any right to a jury trial and agree that arbitration shall be conducted on an individual basis — not as a class action.

Exception: Either party may seek injunctive or other equitable relief in a court of competent jurisdiction to prevent the actual or threatened infringement of intellectual property rights.

Note for EU/UK users: If you are located in the European Union or United Kingdom, nothing in these Terms affects your statutory rights, including the right to bring claims before your local courts or consumer protection authorities.

Section 15

Changes to Terms

We reserve the right to modify these Terms at any time. When we make material changes, we will:

  • Update the "Last updated" date at the top of this page
  • Display a prominent notice within the Gaveki application
  • Send email notification to registered users for significant changes

Your continued use of the Service after the effective date of any changes constitutes your binding acceptance of the new Terms. If you do not agree to the modified Terms, you must stop using the Service.

Section 16

Contact

For legal questions or concerns regarding these Terms:

  • Email: legal@gaveki.com
  • Privacy inquiries: privacy@gaveki.com
  • Website: gaveki.com
Questions about these documents?

We're committed to transparency. If anything here is unclear, reach out and we'll explain it in plain language.

Contact Us →