Privacy Policy

Tycana Privacy Policy — what we collect, how we use it, and how to delete it.

Privacy Policy

Effective date: February 22, 2026

Tycana is operated by Mark Hudson. We collect minimal data and don’t sell, share, or monetize your information.

Tycana is not intended for users under the age of 16.

What We Collect

When you use Tycana, we store:

  • Email address — for authentication and account communication
  • Tasks — titles, descriptions, due dates, effort and energy levels, project assignments, completion outcomes, and notes
  • Relationship data — links between tasks (blocking, related, follows up, spawned from)
  • Behavioral data — completion velocity, effort accuracy patterns, and other intelligence signals computed from your task data to power the service
  • Context notes — information you provide to help your AI assistant understand your situation
  • Calendar feed tokens — unique URLs for calendar subscriptions
  • Access tokens — bearer tokens and OAuth credentials for AI assistant connections
  • Technical data — IP addresses, access timestamps, and session information for security purposes

We store the data listed above to provide the service. Nothing more.

We do not collect passwords, analytics, location data, contacts, or use third-party tracking scripts. The dashboard uses a session cookie for authentication — no tracking cookies.

How We Use Your Data

Your data is used to provide the service:

  • Email is used for magic link authentication and account communication
  • Task data is used to compute intelligence signals (effort estimates, velocity trends, stale detection) that make the service smarter for you
  • Calendar feeds generate ICS data from your scheduled tasks

We analyze your tasks only to power the Tycana service. We don’t use your data for advertising, third-party profiling, or any purpose outside delivering the service to you.

AI Assistants

When you connect an AI assistant, it can read and modify your tasks using a token you generate. The connection is initiated and controlled by you. We do not send your data to AI providers — requests come from your assistant to our service, authenticated with your token.

When you connect Tycana through Claude (via Anthropic’s MCP protocol), Anthropic collects telemetry data including tool call parameters and responses. This is Anthropic’s data collection, governed by their privacy policy, not ours.

Calendar Feeds

Treat your calendar feed URL like a password — anyone with it can view your scheduled task titles, times, and projects. Feed URLs do not contain your email address. You can regenerate your feed URL at any time to revoke previous access.

Data Storage

  • Location: Cloud data is stored on servers in the United States (hosted on Render)
  • Encryption: All data is encrypted in transit (HTTPS/TLS) and at rest
  • Isolation: Each user’s data is isolated; you cannot access another user’s tasks

Data Retention

  • Your data is retained as long as your account is active
  • Account deletion: When you delete your account, all task data, tokens, preferences, and computed intelligence data are deleted immediately. A minimal account record (email address) is retained to prevent abuse
  • Subscription cancellation: If you cancel or pause your subscription, your data is retained for 30 days in case you resubscribe. We send a warning email 5 days before cleanup
  • Expired trials: If your trial expires, your data is retained for 30 days with a warning email before cleanup
  • Deleted data may persist in encrypted database backups for a limited period

Your Rights

You can:

  • Access your data at any time via your dashboard or AI assistant
  • Delete your account and all cloud data from Settings
  • Regenerate calendar feed URLs to revoke access

Third Parties

  • Render — hosting infrastructure
  • Resend — transactional email delivery (magic links only)
  • Cloudflare — website hosting and CDN
  • Polar — payment processing (we do not store payment details)

We do not share your task data with any third party.

Data Processing

For detailed information about how we process your data as a controller-processor relationship, including sub-processors, security measures, and your rights under GDPR and CCPA, see our Data Processing Agreement.

Changes

We may update this policy. Material changes will be communicated via the email on your account.

Contact

Privacy questions: privacy@tycana.com