Privacy policy.

Public website

The website is hosted on Cloudflare. When you visit, Cloudflare processes technical request information such as your IP address, browser details and requested pages to deliver and protect the site. We do not run our own advertising trackers or analytics scripts on this site, and the public page does not ask you to create an account.

The home page checks our inthispanel service for a published site message. If one is shown and you dismiss it, your browser stores that message’s revision locally so it will not appear again unless we update it. The check does not send your demo content or access your connected accounts.

The footer loads a service-status badge from UptimeRobot. Your browser contacts UptimeRobot to display it. Following the status, music-credit or phone-companion links takes you to those services, which have their own privacy practices.

Browser demo

The interactive demo starts with sample tasks, events, notes, feeds, GitHub activity, service status and PC readings. These are illustrative; the demo does not read your device or connect to those accounts. Your edits stay in that tab’s memory and disappear when you reset or reload it. They are not sent to the Windows app or the phone companion. The sample music file is served from this website; the demo does not connect to your Spotify account.

Windows app and connected services

Tasks, local events, notes and preferences are stored on your PC. If you connect Google Calendar or Spotify, the app communicates with those services to provide the features you choose. Google remains the source for connected calendar data; Spotify handles music playback. Their account and service terms apply. Access credentials used by the Windows app are protected for your Windows user.

Optional widgets can request information from their relevant services, such as feeds, weather, GitHub and service-status providers. Those requests may reveal technical information, including your IP address, to the provider. The Windows app does not include advertising or product-usage analytics.

Google Calendar

If you choose to connect Google Calendar, Google asks for permission to read your calendar list and to view, create, edit and delete calendar events. inthispanel uses this access to show the calendars you select, keep a local copy of their events for the Windows planner, and send event changes you make back to Google. It does not manage Google Tasks or send guest invitations or email updates. Your calendar names, event details and sync state are cached in the app’s database on your PC. Your connected Google account is shown in Settings, while Google access credentials are saved separately using Windows user encryption.

If you pair a phone, the Windows app can also send a read-only snapshot of selected local and Google events to our private companion service for your phone’s agenda. That snapshot contains event titles, times, locations, masked calendar labels and colours. It excludes your Google account email, event descriptions, Google event identifiers and Google credentials. The service, paired phone and backups can retain copies as described below. Disconnecting Google removes its credentials and cached Google calendars and events from the PC after pending edits are resolved; you can also revoke access in your Google Account. A disconnected or offline phone may still hold an earlier snapshot.

We use Google Calendar data only for these calendar features. We do not sell it, use it for advertising or analytics, or use it to train generalized AI models. Calendar data goes to Google for sync and, only if you pair a phone, to our private companion service and your authenticated phone as described above.

Private phone companion

If you choose to pair a phone, tasks and notes are synchronised through a private inthispanel service. A limited calendar snapshot is shared for the phone’s read-only view. The phone also keeps records and unsent edits in its browser storage. The service holds synced data and device/session records so pairing and recovery work. Data travels over HTTPS; it is not end-to-end encrypted.

Event reminders are optional. If enabled, a push subscription is held for the paired device and a generic notification is sent through Apple without an event title or location. Revoking a device stops future access, but it cannot remove copies already stored on an offline device. Server backups and recovery copies can retain earlier data for a limited period. Contact us if you need help removing service-held data.

Contact, retention and rights

If you email us, we use your address and message to reply and handle your request. We keep correspondence only as long as needed for that purpose or a legal obligation. Local app data remains on your devices until you remove it; connected-service data follows the relevant provider’s settings. Technical website records and private-service backups follow the hosting and recovery retention cycles.

We process technical website data to operate and secure the service, correspondence to respond to you, and optional connected or paired data to provide the features you activate. Depending on the processing and your location, you may have rights to access, correct, erase, restrict, object to, or receive a copy of your personal data. Email [email protected] to make a request. You may also complain to the Irish Data Protection Commission.