Privacy Policy

1. Data Controller

Doubl
Neustiftgasse 1070, Vienna, Austria
Email: privacy@doubl.ai

2. Personal Data We Collect

We collect only the data necessary to operate and improve the Service.

2.1 Account Information

• Email address
• Password (securely hashed)
• Login timestamps and security logs
• Account preferences

2.2 Profile & Planning Data

• Name (optional)
• Time zone
• Working days and availability settings
• Focus preferences
• Task entries you create
• Must / Want / Can inputs
• Planning decisions and adjustments

2.3 Optional Check-In Data

If you choose to use energy or mood tracking features, we may process:

• Energy levels
• Fatigue levels
• Mood indicators
• Self-reported capacity
• Task feedback

This data is used solely to improve your planning experience. Doubl is not a medical or diagnostic tool.

2.4 Calendar Integration Data

If you connect external calendars (e.g. Google or Microsoft), we may process:

• Event title
• Start and end time
• Event source
• Calendar category

Doubl does not modify your original calendar events. We may create a separate "Doubl" calendar for generated plans.

2.5 Technical Data

• IP address
• Device type
• Browser type
• Error logs
• Usage analytics (if enabled)

3. How We Use Your Data

We process personal data to:

• Provide the Doubl planning service
• Generate adaptive daily plans
• Sync connected calendars
• Improve performance and reliability
• Prevent fraud and abuse
• Communicate service-related updates
• Provide customer support

We do not sell your personal data.

4. Legal Basis (GDPR)

If you are located in the EU/EEA, we process data under:

• Contractual necessity – to provide the Service
• Legitimate interests – to secure and improve the Service
• Consent – for optional features (e.g. mood tracking, marketing emails)
• Legal obligations – where required by law

Where mood or energy tracking may qualify as sensitive data, processing is based on explicit user consent. You may withdraw consent at any time.

5. AI and Automated Processing

Doubl uses algorithmic and AI-based systems to:

• Suggest task prioritization
• Evaluate Must / Want / Can scoring
• Recommend adjustments

Users retain full control and can override all suggestions. If external AI providers are used to generate suggestions, data is transmitted only as necessary and under strict contractual safeguards. We do not allow providers to use personal data for model training where such options are available.

6. Data Sharing

We may share data with:

• Hosting and infrastructure providers
• Authentication and database providers
• Email delivery services
• Analytics providers (if enabled)
• Calendar providers (when you connect them)

All third parties act under data processing agreements where required. We do not sell personal data.

7. International Transfers

If data is transferred outside the European Economic Area, we use appropriate safeguards such as:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions
• Additional security measures where necessary

8. Data Retention

We retain personal data:

• For the duration of your active account
• For up to 30 days after account deletion for recovery and compliance
• Logs are retained only as long as necessary for security

You may request deletion at any time.

9. Security

We implement appropriate technical and organizational measures, including:

• Encrypted data transmission (HTTPS)
• Encrypted storage of sensitive tokens
• Secure password hashing
• Access control and least-privilege policies
• Infrastructure monitoring

No system can guarantee absolute security, but we design Doubl with privacy and data minimization principles.

10. Your Rights (EU/EEA Users)

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion
• Restrict processing
• Object to processing
• Request data portability
• Withdraw consent

You may also file a complaint with your local data protection authority.

11. Cookies

We use:

• Essential cookies for authentication and security
• Optional analytics cookies (if enabled)

You can manage cookie preferences through your browser settings.

12. Children

Doubl is not intended for individuals under 16 years of age. We do not knowingly collect data from children.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the Service.