Privacy Policy

Last updated: [DATE OF PUBLISHING]

Ondo is a time-blocking and focus app for Mac. It is made by Koji Studios, a sole proprietorship registered in Hong Kong (business registration no. 41703021), owned by Tsun Wang Ting. In this policy, "we" and "us" mean Koji Studios.

The short version: we collect what we need to sync your plans between your Macs and to know whether you have Pro. We don't sell your data, we don't show ads, and the app has no analytics or tracking.

What we collect

Your account

You sign in to Ondo with Google. When you do, Google tells us your email address, your name, your Google account ID, and your profile picture if you have one. We use them to create your account and show you which account you're signed in to.

Ondo asks Google for nothing more. It can't see your Gmail, Google Drive, Google Calendar or contacts.

What you put in Ondo

To sync between your Macs, we store:

• your folders (names, colours and order),
• your tasks (titles, notes, checklists, priority, estimates and whether they're done),
• your time blocks (when each task is scheduled).

Your Macs

For each Mac you sign in on, we store a random device ID, the Mac's name (for example "Sam's MacBook Air") and when it last synced. This is how Ondo shows which Macs are using your account and applies the free plan's one-Mac limit.

Purchases and trials

We store whether you have Pro and where it came from: a trial, the Mac App Store, or our website. For each purchase we keep the product, the transaction ID that Apple or Paddle gave us, and when it started or ended. We also record that your Google account has used its free trial, so the trial is one per person.

We never see your card or bank details. Apple handles App Store payments, and Paddle handles website payments (see below).

What we don't collect

• No analytics, advertising IDs or tracking inside the app.
• No crash reporting service.
• No access to your files, other apps, location, camera or microphone.

The Claude connection

Ondo can connect to Claude, Anthropic's AI assistant, on your Mac. That connection runs entirely on your Mac: Claude talks to Ondo through a local helper, and none of it passes through our servers.

When you ask Claude about your plans, Claude reads them from Ondo and sends them to Anthropic as part of your conversation. That's covered by Anthropic's privacy policy, not this one. If you don't turn the Claude connection on, nothing in Ondo goes to Claude.

Who processes your data for us

We use a small number of services to run Ondo:

Service	What it does	What it receives
Supabase	Hosts your account and synced data	Your account, your folders, tasks, time blocks, Mac names and Pro status. Stored in Mumbai, India (AWS ap-south-1).
Google	Sign-in	Google already has your account. It learns that you signed in to Ondo.
Paddle	Sells Pro on our website as merchant of record	Your payment details, email, country and any tax details you give at checkout. Paddle tells us the transaction ID, and your email and country.
Apple	Sells Pro in the Mac App Store	Apple handles the payment. It tells us the transaction ID, never your name, email or card.
Cloudflare	Hosts this website	Standard web request data, such as your IP address. Our site analytics set no cookies.
GitHub	Hosts the app downloads	Standard download request data, such as your IP address.

Paddle and Apple act as the sellers of record for their purchases, so their own privacy policies also apply to your payment.

When Ondo checks for updates (website version only), it asks our website for the latest version number and downloads updates from GitHub. That request includes your Mac's IP address and Ondo's version, as any web request does.

Some of these services are outside Hong Kong, so your data may be stored or processed in other countries. We only use providers that protect personal data to a standard comparable to Hong Kong law.

How we use your data

• To run your account and sync your plans between your Macs.
• To know whether you have Pro, and to stop the free trial being reused.
• To answer you when you contact support.
• To keep records our tax and accounting obligations require.

We don't sell or rent your data, and we don't use your plans for advertising or to train AI models.

How long we keep it

• Your plans and Mac list are kept while your account exists.
• Delete your account in Ondo under Settings › Account › Delete my account. That deletes your account and everything synced to it from our servers straight away. Other Macs signed in to the account keep their local copy until you sign out on them.
• Purchase and trial records are kept after you delete your account, linked only to your Google account ID. This lets a purchase follow you if you sign in again and keeps the trial one per person. Business records of purchases are kept for 7 years, as Hong Kong law requires.
• Support emails are kept while needed to help you, then deleted.

Your rights

You can ask us to:

• give you a copy of the personal data we hold about you,
• correct anything that's wrong,
• delete your data (or do it yourself with Delete my account).

Email support@useondo.com and we'll reply within 30 days. Depending on where you live (for example the EU, UK or California), you may have further rights, such as objecting to processing or complaining to your local data protection authority. In Hong Kong that's the Office of the Privacy Commissioner for Personal Data.

Children

Ondo isn't meant for children under 13, and we don't knowingly collect their data. If you think a child has signed up, email us and we'll delete the account.

Security

Your data is sent over encrypted connections and stored with Supabase, where each account can only read its own data. No system is perfectly secure, but we take reasonable steps to protect what you trust us with.

Changes

If we change this policy in a way that matters, we'll update the date above and say so on the website or in the app before the change takes effect.

Contact

Koji Studios
[BUSINESS ADDRESS, as on the business registration]
Hong Kong
support@useondo.com