Privacy Policy.

1. Who we are

Reassign is operated by Pogled Naprej d.o.o., Italijanska ulica 8, 1000 Ljubljana, Slovenia (registration no. 3654982000, VAT ID SI92786499). We are the data controller for the personal data described here. For anything about your privacy, email hello@reassign.ai.

2. What we collect

The short version: your day stays yours. We don't sell your data, we don't share it for advertising, and no one outside Reassign ever sees it, apart from the few providers that run the service for you (named below), and any AI assistant you choose to connect yourself and can disconnect at any time. That's the whole list. Here's what we collect and why:

• Your email address, so we can send your sign-in code and reach you about your account.
• The day plans you create: your events (their title, time, and any notes you add), your areas and activity types, plus the timezone you set so your day shows in the right hours. We store these only to save your day and sync it across your devices.
• Calendar and task data, only from the services you connect. If you connect Google Calendar or Microsoft (Outlook) Calendar, the list of your calendars and the events (their title, time, description, and whether they repeat) from the calendars you choose to show. If you connect Todoist, the tasks and projects you choose to bring in (their title, due time, notes, and which project they sit in). It all lands as blocks on your dial so your real commitments live in one place. Reassign only ever sees the calendars, projects, and tasks you pick; the rest stay invisible to it. See Connecting your calendars and tasks for the full picture.
• Cycle start dates, only if you opt in to the Cycle rhythm feature in the energy layer. This is health data, so it gets its own rules: see Cycle data.
• Basic technical and usage data: the kind a web app needs to load, sync, and stay secure (for example, device and browser type and approximate region).
• What you capture with the browser extension, if you install it: the address and title of a page you choose to save, and any text you had selected. Only ever on your say-so, never in the background. See The browser extension.
• Billing details for Pro, handled by Stripe. We receive a record that you paid and your plan status; we never see or store your full card number.

And we never use your day plans to train AI models. The providers below only ever touch your data to run Reassign for you, each bound by contract to protect it and use it for nothing else. It never leaves that circle without your say-so.

Plan as a guest and you stay anonymous to us: guest days live in your browser until you sign in to save them.

3. Cycle data, if you opt in

The energy layer has an optional Cycle rhythm feature. It's off by default, and it stays off until you switch it on yourself, with a separate, explicit consent inside the app. Never opt in, and no cycle data about you exists anywhere in Reassign.

• What we store. The cycle start dates you log (with a time of day, if you set one) and your cycle settings: your typical length, and whether your cycles come naturally. That's the whole list. We never ask your gender, and we never infer it.
• What it's for. One thing: shaping your personal energy curve. The feature starts from a small, research-hedged dip around menstruation, and from there it learns only from your own logs and mood labels.
• Where it never goes. Cycle data lives in its own store, apart from your other data, and it stays there. It's excluded from analytics and session replays, from every email we send, from AI processing, and from anything a connected AI assistant can read over MCP. Even an assistant you've granted full access can't see it.
• Deleting it. Turn the feature off and delete all your cycle data in one tap, right in the app: no email, no waiting. Deleting your account removes it too.

We process this data on the basis of your explicit consent (Article 9(2)(a) GDPR). Withdraw it at any time by turning the feature off. A standalone Consumer Health Data Privacy Policy covers this data for US state health-privacy laws.

4. How we use it, and on what basis

We use your data only to run and improve Reassign:

• to provide the service: sign you in, store and sync your days, and run the features you use (this is necessary to perform our contract with you);
• if you connect a calendar or task app, to show your events and tasks on the dial and write your edits back, and (unless you turn it off) to sort each imported item into the right area for you (necessary to provide the feature you asked for);
• to take payment and manage your subscription (also to perform our contract);
• to keep the service secure and working, and to understand how it's used so we can improve it (our legitimate interests);
• to contact you about your account or important changes. We don't send marketing email without your consent.

We don't sell your data, we don't use your day plans for advertising, and we never use them to train AI models. These are standing commitments: if Reassign is ever sold or merged, they move with your data and bind the new owner too.

5. Who helps us run Reassign

A few trusted providers process data on our behalf, under contracts that require them to protect it:

• InstantDB: stores your day plans and syncs them in real time across your sessions.
• Stripe: processes payments. Your card details go directly to Stripe; we never handle them on this site.
• Resend: delivers your sign-in codes and account email.
• Vercel: hosting and infrastructure that serves the site and app.
• Anthropic: to file each imported event under the right area, Reassign asks Anthropic's AI to read its title, time, description, and recurrence (nothing else). It's used only for that, never to train Anthropic's models, and you can switch the sorting off and keep plain two-way auto sync.
• PostHog: product analytics in the app (not on this site) that help us see how it's working and fix what breaks; more on this under cookies and analytics.

6. Connecting your calendars and tasks

Connect a calendar or task app and Reassign brings your existing events and tasks onto the dial and keeps them in step with the service they came from, both ways. This only ever happens because you authorised it on that provider's own consent screen, and you can disconnect whenever you like.

Google Calendar. With your permission, we use two Google Calendar permissions:

• See the list of your calendars (calendar.calendarlist.readonly), so you can choose which ones to show on the dial.
• See and change events on the calendars you choose (calendar.events), so your events can appear on the dial, and the edits you make there can flow back to Google.

Microsoft (Outlook) Calendar. With your permission, we use:

• Read and write your calendar events (Calendars.ReadWrite), so your Outlook events can appear on the dial and the edits you make there can flow back to Microsoft.
• Stay connected and confirm who you are (offline_access, openid, profile, email), so the connection keeps working and we can tell which account it belongs to.

You can revoke Reassign's access to your Microsoft account at any time from account.live.com/consent/Manage (personal accounts) or myapps.microsoft.com (work or school accounts), as well as by disconnecting inside Reassign.

Todoist. With your permission, we read and change the tasks and projects you choose (data:read_write), so your Todoist tasks can appear on the dial as blocks and the edits you make there can flow back to Todoist.

How we use it. We read the events and tasks from the sources you connect (their title, time, description, project, and whether they repeat) and show them on your dial in the colour you set. Move, resize, or edit one of those blocks and we write that change back to the service it came from. We read and write only the calendars, projects, and tasks you connect, your connection to each service is kept encrypted on our side and never handed to your browser, and disconnecting one simply removes its items from your dial; nothing is changed or deleted in the original service.

AI sorting (optional). Unless you turn it off, an imported item's title, time, description, and recurrence are sent to Anthropic's API (routed through Vercel's AI gateway) so it can be filed under the right area for you. It's used only to provide that feature, it's never used to train any AI model, and you can switch it off in your settings and keep plain two-way auto sync.

The policies we hold ourselves to. Whatever you connect, we use the data only to provide and improve the features you can see, we never sell it, we never use it for advertising, and we never use it to train AI models, ours or anyone else's. In each provider's own terms:

• Reassign's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
• Our use of Microsoft data follows the Microsoft APIs Terms of Use.
• Our use of Todoist data follows Doist's Terms of Service.

7. Connecting an AI provider over MCP

If you connect an AI assistant (an LLM, via an MCP client, such as ChatGPT from OpenAI or Claude from Anthropic) to your day, data is shared only because you authorised it on a consent screen, and only within the scope you granted: view your events and schedule (events:read), change them (events:write), or both. Within that scope it sees your events (their title, time, and any notes), plus the areas, activity types, and timezone they rely on, and (only if you've connected a calendar) the name of the calendar an event sits on. Nothing beyond what you granted. The assistant, and the company behind it (such as OpenAI or Anthropic), then handles what you send under its own privacy policy rather than this one, worth a quick look before you connect.

We keep a small record of the connection itself: the app's name, the access you granted, and when you authorised it and last used it. You can revoke a connection at any time from Settings → MCP, and access stops straight away. A connected assistant can also pass along feedback for you, which we handle as described below.

8. The browser extension

The Reassign extension for Chrome puts your day on every new tab and lets you send a page, a link, or a piece of text you've selected straight to your plan. It reaches your day the way any other connected client does: through an OAuth grant you authorise on Reassign's own consent screen, within the scope described in section 7. Remove the extension, or revoke it from Settings → MCP, and its access stops.

What it keeps on your device.

• Your connection to Reassign: the access and refresh tokens from that grant, when they expire, and which Reassign server they belong to. They sit in the browser's extension storage on that device and survive a restart, until you sign out or remove the extension.
• Your new-tab preference: which view the new tab opens on. This one goes in Chrome's synced extension storage, so with Chrome sync switched on it travels through Google to your other signed-in Chrome installs, under Google's terms rather than ours. It's a single setting. Your day is never stored there.
• Whatever a capture is holding at that moment: the title and address of the page you're about to save, and the undo behind a notification. This lives in session storage, clears when you close the browser, and a capture you leave untouched expires in a minute.

What it reads from your browser, and when. The extension has no standing access to your browsing. It can read a page's address and title only at the moment you ask it to: a right-click, the keyboard shortcut, or a click on its toolbar icon. Right-click a link instead and it reads that link's address. If you had text selected, that selection travels with the capture and becomes the block's name, which is the point of selecting it. It doesn't read pages you haven't captured, and it never collects your browsing history. What you type after the reassign keyword in the address bar is parsed on your device as you type; only the entry you actually commit is sent anywhere.

What it sends, and to whom. Only Reassign. Two kinds of request leave the extension, both to reassign.app: the sign-in exchange above, and the calls that read your schedule and add to it. What travels in those is what you chose to save: a title, any notes, the source address, a time, and a duration. The extension contacts no one else. It loads no third-party code, carries no advertising, and does no tracking of any kind.

The new tab is the Reassign app. Not a copy of it, not a cut-down view: the extension embeds the real app, so everything in this policy applies inside that tab exactly as it does at reassign.app, your session included. One difference is deliberate. The new tab is never session-recorded, because opening a tab isn't a decision to be watched. Error reports still reach us from it, so we can fix what breaks on the surface you see most.

9. Feedback and bug reports

When you send feedback or report a bug, we keep your message and a little context so we can reproduce and fix things: the type (a bug, an idea, or something else), the page or source it came from, and your browser, or, if you asked a connected AI assistant to send it for you, that assistant's name. If you're signed in, we link it to your account so we can follow up; if you're not, we keep only the reply-to email you choose to give us. We use this to diagnose problems and make Reassign better, and we delete it when you delete your account.

10. Cookies and analytics

We keep this light. The app uses the storage it needs to sign you in, remember your session, and (as a guest) keep your day in your browser. To see how the app is holding up and fix what breaks, we also use PostHog for product analytics: a handful of usage events, error reports, and anonymised replays of how people move through the screens, with anything you type and your day's contents hidden automatically, so we see the path, not your day. It stays first-party, and none of it is sold, used for advertising, or used to follow you across other sites. One surface is carved out of the replays entirely: the browser extension's new tab is never session-recorded, as section 8 describes.

On this marketing site we measure visits with Vercel's privacy-friendly, cookieless analytics, which doesn't follow you across other sites. We don't load the Meta (Facebook) pixel or any advertising cookies here. If you reach us by clicking one of our ads, the ad network's click identifier may be carried through to the app so we can measure whether the ad worked. That measurement happens in the app, under the choices you make there.

11. How we protect your data

We treat your data, and especially sensitive data like your connected calendar and task items, with care, and we protect it with industry-standard safeguards:

• Encrypted in transit. Everything between your device and Reassign, and between Reassign and the providers above, travels over TLS (HTTPS). Your data is never sent in the clear.
• Encrypted at rest. Your day plans and account data are stored on infrastructure that encrypts data at rest.
• Connection tokens kept sealed. The credentials that link Reassign to a calendar or task app (and to any AI provider you connect over MCP) are stored encrypted on our servers, never exposed to your browser, and used only to run the features you asked for. Disconnect at any time and the access is revoked.
• Least-privilege access. We request only the permissions a feature needs, and read or write only the calendars, projects, and tasks you choose. Access to production systems is limited to the few people who need it to operate Reassign, protected by strong authentication.
• Sign-in without passwords. We email you a 6-digit sign-in code, so there's no password for you to reuse or for us to leak. You can also add a passkey and sign in with Touch ID, Face ID, or a security key: the key itself never leaves your device, and we only ever store its public half.
• Analytics that don't see your day. Our product analytics automatically mask anything you type and your day's contents, so the people improving Reassign see the path through the app, not what's on your dial.

No system can promise perfect security, but we work to protect your data and we keep these measures under review. If we ever discover a breach affecting your personal data, we'll notify you and the relevant authorities as the GDPR requires.

12. How long we keep it

We keep your data for as long as you want it. It stays while your account is active, and you're always in charge of clearing it: delete a single plan, or wipe everything in one go from Settings → general, and we remove it from our servers, really remove it, not just hide it, keeping only what we must for legal reasons, such as billing records we're required to retain for tax and accounting.

Any feedback you've sent, and the records of AI providers you've connected, live alongside your account and go when it does.

13. Your rights

Under the GDPR you can:

• access the personal data we hold about you;
• correct data that's wrong or out of date;
• delete your data (“the right to be forgotten”);
• export your data in a portable form;
• object to or restrict certain processing, and withdraw consent where we relied on it.

You can delete all your data yourself, any time, from Settings → general, no need to ask. To exercise the others, email hello@reassign.ai. You also have the right to complain to your local data-protection authority; in Slovenia that's the Information Commissioner (Informacijski pooblaščenec).

14. International transfers

Some of our providers operate outside the European Economic Area. When data is transferred abroad, we rely on safeguards recognised under the GDPR (such as the European Commission's standard contractual clauses) to keep it protected.

15. Children

Reassign isn't directed at children. We don't knowingly collect data from anyone under the age of digital consent in their country. If you believe a child has given us data, contact us and we'll remove it.

16. Changes to this policy

We may update this policy as Reassign evolves. When we make a material change, we'll update the date above and, where it matters, let you know in the app or by email.

17. Contact

Email hello@reassign.ai, or write to Pogled Naprej d.o.o., Italijanska ulica 8, 1000 Ljubljana, Slovenia.

See also the Terms of Service.