Privacy Policy

Last updated: January 17, 2026

Ekumene ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application and services.

Information We Collect

Account Information

When you create an account, we collect your email address and authentication credentials through our authentication provider (Clerk).

Payment Information

Payment information is processed by Stripe and is not stored on our servers. We receive only limited information from Stripe, such as the last four digits of your card, card type, and billing address, to display in your account and for fraud prevention. For details on how Stripe handles your data, please see Stripe's Privacy Policy.

Connected Services Data

When you connect third-party services to Ekumene, we access and store data from those services to provide our core functionality:

• Google Calendar: We access your calendar events (titles, times, attendees, recurrence patterns) to understand your commitments and available capacity. We request read-only access to your calendar data.
• Todoist: We access your tasks (titles, due dates, projects, labels, priorities) to classify and prioritize your work. We sync task completions back to Todoist, so we request read and write access to your task data.

Usage Data

We collect information about how you interact with Ekumene, including features used, actions taken, and preferences set. This helps us improve the product.

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve Ekumene's core functionality
• Classify your tasks into priority tiers using our AI-powered Priority Engine
• Generate daily triage recommendations and capacity assessments
• Process payments and manage your subscription
• Send you service-related communications (e.g., trial reminders, payment confirmations, account notifications)
• Respond to your inquiries and provide customer support
• Analyze usage patterns to improve our product

AI Processing

Ekumene uses artificial intelligence to analyze your tasks and calendar events for prioritization purposes. Your task titles, descriptions, and calendar event details are processed by these AI services:

• Anthropic (Claude): Powers our conversational AI and priority analysis. Your data is processed per Anthropic's Privacy Policy.
• OpenAI: Generates semantic embeddings for search and memory features. Your data is processed per OpenAI's Privacy Policy.

We do not use your data to train AI models. Both services process data under their API terms, which prohibit using API data for model training.

When you connect Google Calendar, event titles, times, and descriptions may be processed by our AI providers solely to provide Ekumene's prioritization and planning features. This usage complies with the Google API Services User Data Policy, including Limited Use requirements.

Data Sharing

We do not sell your personal information. We share data only with:

• Service providers: Third-party services that help us operate Ekumene (hosting, authentication, payment processing, AI services)
• Legal requirements: When required by law or to protect our rights

Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit and at rest. OAuth tokens for connected services are stored encrypted.

Data Retention

We retain your data for as long as your account is active. Conversation messages are automatically cleaned up based on your subscription tier:

• Starter: Messages older than 45 days are automatically deleted
• Pro: Messages older than 365 days are automatically deleted

You can mark specific conversations as "keep forever" to exempt them from automatic cleanup.

If you disconnect a service (Todoist or Google Calendar), we revoke the OAuth connection and stop syncing. Previously synced data (tasks, events) remains in Ekumene until you delete it or your account. To remove all imported data, delete your account.

If you delete your account, we delete all associated data from our database immediately, except: (a) where retention is required by law, and (b) anonymized audit records (with no personally identifiable information) may be retained for legal compliance and fraud prevention. Analytics data in third-party services (PostHog, Sentry) is retained per their respective data retention policies and cannot be individually deleted.

Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Disconnect any connected service at any time
• Export your data in a portable format

International Users

European Economic Area and United Kingdom

If you are located in the EEA or UK, you may have additional rights under the General Data Protection Regulation (GDPR), including:

• The right to access, rectify, or erase your personal data
• The right to restrict or object to processing
• The right to data portability
• The right to withdraw consent at any time
• The right to lodge a complaint with a supervisory authority

Our legal basis for processing your data is (a) your consent, (b) performance of a contract with you, or (c) our legitimate interests in operating and improving the Service. To exercise your rights, contact us at privacy@ekumene.ai.

California Residents

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including:

• The right to know what personal information we collect and how it is used
• The right to request deletion of your personal information
• The right to opt out of the sale of personal information (we do not sell your data)
• The right to non-discrimination for exercising your privacy rights

To exercise your CCPA rights, contact us at privacy@ekumene.ai.

Children's Privacy

Ekumene is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us at privacy@ekumene.ai, and we will promptly delete it.

Third-Party Services

Ekumene integrates with third-party services (Google Calendar, Todoist) that have their own privacy policies. We encourage you to review their policies. Our access to your data on these platforms is governed by the permissions you grant during the OAuth connection process.

Chrome Extension

Our Chrome extension ("Ekumene - Quick Capture") enables you to capture tasks from any webpage. The extension:

• Accesses the current tab title and URL when you trigger task capture
• Captures selected text when you right-click and choose "Add to Ekumene"
• Stores an authentication token locally in Chrome's browser-managed storage
• Communicates only with api.ekumene.ai and app.ekumene.ai
• Contains no analytics, tracking, or third-party scripts

Google API Limited Use Disclosure

The use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at privacy@ekumene.ai.