In Order

Your information and choices

Privacy Policy

This policy explains how In Order accesses, uses, stores, shares, retains, and deletes information when you use the app or this website.

Effective date: 13 October 2026 · Last updated: 14 October 2026

1. Scope and who we are

This Privacy Policy applies to the In Order Android application and this public website. In this policy, “In Order,” “we,” “us,” and “our” refer to the developer and operator of the In Order app.

Privacy questions and requests can be sent to rohithjkumar10@gmail.com.

Local-first design: You can use ordinary task, progress, timer, and reminder features without signing in. Google Sign-In is optional and enables account-based synchronization and AI features.

2. Information the app handles

Information stored locally

Depending on the features you use, the app may store the following on your device:

  • Tasks, titles, points, schedules, dates, recurrence selections, icons, colours, and completion status.
  • Progress entries, scores, timer sessions, reminder preferences, and app settings.
  • Limited account-scoped AI conversation cache, unsent AI drafts, and pending-request recovery information.
  • Custom timer background images or videos, together with local poster and thumbnail files.
  • Generated or device-produced notification audio needed to play a selected reminder voice.

Google Sign-In information

If you choose Google Sign-In, Google and Supabase provide the app with an account identifier, email address, display name, profile image URL, and secure authentication information. We use this information to create your In Order account, display your account profile, synchronize supported information, and authorize account-based features.

In Order does not receive your Google password.

Cloud-synchronized information

When you are signed in, supported records may be synchronized through Supabase, including:

  • Your profile name and profile image URL.
  • Tasks, schedules, points, icons, colours, completion state, and reminder configuration.
  • Progress entries and related task references.
  • Daily reminder time and supported app preferences.
  • References and configuration needed for an AI-generated notification voice.

Custom images and videos

If you select an image or video as a timer background, the app copies it into private application storage on your device and may create a local thumbnail or video poster. The current synchronization implementation does not upload these custom timer background files to Supabase.

Notifications, alarms, and device restart

If you enable reminders, the app uses notification and scheduling features to deliver task reminders, timer status, timer completion alerts, and an optional daily reminder. Notification content may include a task title, points, timing information, and timer controls. Device-restart access is used to restore eligible schedules after a restart. This information is not used for advertising.

Website information

This website does not intentionally use cookies, advertising, analytics, tracking pixels, accounts, or browser storage. A hosting provider may still process basic request information such as IP address, date, time, requested page, and browser details for security and reliable delivery. The applicable hosting provider must be identified before public deployment if its practices require additional disclosure.

3. AI Assistant, voice input, and AI notification voice

AI features are optional, require a signed-in account, and are processed through authenticated Supabase backend functions. Depending on backend configuration, AI Assistant requests may be processed by Google Gemini or OpenAI. AI-generated notification voice requests are processed by Google Gemini.

AI Assistant information

When you choose to use the AI Assistant, the following may be processed as needed to answer your request:

  • Your message and relevant recent conversation context.
  • Relevant tasks, schedules, completion history, points, scores, and progress analytics.
  • Validated task proposals, proposed actions, and whether you confirm or reject them.
  • Reports you choose to submit about an AI response.
  • Request, model, usage-limit, timing, and sanitized error metadata used for reliability, safety, and abuse prevention.

AI-generated task changes are previews. The app requires you to review and confirm a proposal before existing task logic applies it. AI can be inaccurate, and you should review its output before relying on it.

Optional microphone voice input

If you choose voice input, microphone access begins only after you tap the microphone, review the voice-input disclosure, and grant Android permission. In Order uses the speech-recognition service available on your device to turn speech into editable text. Depending on your device, settings, language, and speech provider, recognition may use network or cloud processing.

In Order does not store the raw microphone audio in the app, its database, or Supabase storage. Recognized text is shown in the message composer so you can review, edit, or discard it. It is not sent to the In Order AI backend until you tap Send. After you send it, the transcript is handled like any other AI Assistant message and may be processed by Google Gemini or OpenAI and retained as part of the AI conversation as described below.

AI-generated notification voice

When you request an AI notification voice, the reminder text, selected voice, selected tone, task/request identifiers, and necessary account information are sent through the backend for generation. The generated audio and related metadata may be stored in private Supabase storage and account-owned database records so that the notification can be played and restored.

Device voice fallback

Android text-to-speech may be used as a device-based fallback for a spoken reminder. Device text-to-speech is separate from cloud AI voice generation and is handled by the speech service available on your device.

Timetable-image import

Timetable-image import exists as a separately controlled, default-off capability and is not presented as a standard first-release feature. When disabled, In Order does not send a timetable image for AI analysis. This policy and the in-app disclosure will be updated before that capability is enabled for ordinary users.

AI limitations: AI output is not professional medical, legal, financial, or emergency advice. Do not use In Order as an emergency service or as the sole basis for a high-impact decision.

4. How we use information

We use information only as reasonably necessary to:

  • Provide task planning, timers, reminders, progress tracking, and app settings.
  • Authenticate users and maintain secure sessions.
  • Synchronize supported information and restore it for signed-in users.
  • Convert speech to editable text when you request voice input.
  • Generate requested AI responses, task proposals, and notification voices.
  • Maintain AI conversation continuity and recover interrupted requests.
  • Enforce usage limits, detect misuse, maintain safety, and troubleshoot failures.
  • Process account deletion, privacy, and support requests.
  • Comply with applicable legal obligations.

5. Service providers and disclosure

Information may be processed by the following providers when their services are used:

  • Google: Google Sign-In, Google Gemini AI and voice processing, Android services, and Google Play distribution.
  • OpenAI: AI Assistant response generation when OpenAI is selected by the backend configuration.
  • Supabase: authentication, database synchronization, private file storage, and backend functions.
  • Your device or speech provider: speech recognition for optional microphone input and Android text-to-speech for device-produced reminder audio. The provider may process speech under its own privacy terms.
  • Website host: delivery and security of this public website after deployment.

Providers process information under their own terms and privacy policies. Data may be processed in countries other than your own. We do not sell personal information. The current app does not include third-party advertising or behavioural advertising SDKs, and the current website does not include analytics or advertising scripts.

We may disclose information when required by law, to protect users or the service, or in connection with a lawful business transfer subject to appropriate safeguards.

6. Security

In Order uses authenticated requests, encrypted network transport, account-owned database records, Supabase Row Level Security, restricted backend functions, and private storage controls designed to limit access. Local files are stored inside application-managed storage where supported by the operating system.

No method of storage or transmission is completely secure. We cannot guarantee absolute security, but we work to use reasonable safeguards appropriate to the information and features involved.

7. Data retention and deletion

  • Local app information: remains on the device until removed through the app, cleared through device settings, or removed when the app is uninstalled, subject to device backup behaviour.
  • Core synchronized information: remains while your account is active and as needed for synchronization. Deletion markers may temporarily remain to prevent deleted tasks or progress records from returning during synchronization.
  • Voice input: In Order does not retain raw microphone audio. Recognized text that you do not send is not added to the cloud AI conversation. Transcript text that you send is retained under the AI-conversation rule below.
  • AI conversations: submitted messages, including submitted voice-input transcripts, use a rolling retention period of up to 90 days based on recent conversation activity.
  • AI-generated voice: generated audio and its account-owned record may remain while needed for the selected reminder or until it is removed or the account is deleted.
  • Account deletion: deletes the Supabase authentication account and associated cloud records, including account-linked AI records and generated AI voice files. Account-scoped local task, progress, synchronization, and AI cache records are also cleared after successful deletion.
  • Device-only media: custom timer images and videos are separate local files and may remain on the device until app storage is cleared, the media is removed or replaced through the app where supported, or the app is uninstalled.

If limited information must be retained for security, fraud prevention, dispute resolution, or legal compliance, it will be retained only for the applicable purpose and period.

See Delete your In Order account for both in-app and external request options.

8. Your choices and rights

Depending on your location and use of the app, you may:

  • Use ordinary local features without signing in.
  • Choose whether to enable reminders and system permissions.
  • Choose whether to use the AI Assistant, microphone voice input, or AI notification voice.
  • Deny or revoke microphone permission in Android settings; other app features remain available, although voice input will stop working.
  • Review AI task proposals before confirming them.
  • Sign out while continuing to use local app features.
  • Delete your account and associated cloud information.
  • Ask about, correct, or request deletion of information by contacting us.
  • Withdraw permission through Android settings, understanding that the related feature may stop working.

9. Children’s privacy

In Order is a general productivity application and is not directed to children who cannot lawfully consent to the processing described in this policy. We do not knowingly collect personal information from a child in violation of applicable law. A parent or guardian who believes a child has provided personal information should contact us so that we can investigate and, where appropriate, delete it.

10. Changes to this policy

We may update this policy when the app, providers, or legal requirements change. The updated version will show a new “Last updated” date. If a material change affects how Google user data or other personal information is used, we will provide appropriate notice and obtain additional consent where required before using it for the new purpose.

11. Contact

For privacy questions, data requests, or concerns about this policy, email rohithjkumar10@gmail.com.