Cedar is an app for habits, todos, focus, notes and countdowns, on Android, iPhone, Mac and the web. It’s made by AshterNext, run by Maalik Bagwala in India (“we”, “us”). This policy covers the Cedar app and this website. Our terms of use cover the rules for using them.
In short
- We collect your Google name, email address and picture, and what you add to Cedar. We need these so the app works and syncs across your devices.
- Your data is stored with Supabase in the EU (Ireland). Countdown photos stay on your device.
- We don’t sell your data. Cedar has no ads, no analytics, no tracking tools and no AI features.
- Locked notes are stored like your other notes. The lock is on your device: it keeps them closed until you unlock them there.
- If you connect an AI assistant such as Claude or ChatGPT, it can read your Cedar data and add to it, under that company’s privacy policy. Nothing reaches an assistant unless you connect one.
- You can delete your account at any time in the app: Profile → Delete account. You can also ask us by email.
1. Who we are
Cedar is made and run by AshterNext (Maalik Bagwala), Nashik, Maharashtra, India. We decide how and why your data in Cedar is used, and we’re responsible for it. You can reach us at malik@ashternext.com.
2. What we collect
Your account
- Cedar only lets you sign in with Google. When you do, Google gives us your name, email address and profile picture.
- We store a user ID for your account and Google’s ID for your Google account.
- You can change the name Cedar uses in the app.
- Cedar never sees your Google password.
What you add to Cedar
- Habits: name, colour, icon, schedule, day plans, reminder time and description. For each day: whether it was done, relapsed or passed without a mark, the plan items you ticked and any note you wrote.
- Todos and tags: title, note, due date and time, reminder, repeat, tags and when you finished it. For tags: name, colour and whether it’s pinned.
- Focus: each finished session’s length, start and end time and the todo it was for, and your focus settings (session lengths and how breaks start).
- Notes: title, text, section (Journal, Ideas or Personal), and whether it’s pinned or locked. A locked note is stored on our servers like any other note; see section 3.
- Countdowns: name, date and time, when you started it, its colour, icon and backdrop, and whether it shows on Today. Not the photo, if you pick one.
Records created as you use the app
- Sync records: when each item was created, last changed and deleted, so your devices agree.
- Sign-in records: our sign-in provider keeps security records, such as when you signed in, your IP address and the type of device or browser you used.
- AI assistants you connect: which assistant you allowed, and when, so it can stay connected until you remove it.
What we don’t collect
Cedar doesn’t ask for your location, contacts, SMS, call history, camera or microphone. It doesn’t read your files, except a photo you pick for a countdown, which stays on your device. It doesn’t use an advertising ID, and it has no ads, analytics or crash-reporting tools.
3. What stays on your device
- Offline copy. Cedar keeps a copy of your data in its private storage, so it works without a connection. Signing out erases it. On the web, the copy lasts only while the page is open. On Android, Cedar leaves its data out of backups.
- Locked notes. Opening a locked note asks for Face ID, a fingerprint, Touch ID or your device’s passcode, through your device. Cedar only hears yes or no; it never sees your face, fingerprint or passcode. The lock works on your device: locked notes are stored on our servers like other notes, and an assistant you connect sees their titles only.
- Countdown photos. When you pick a photo for a countdown, Cedar gets only that photo and keeps it on that device. It’s never uploaded, so each device has its own.
- The running timer and reminders. The focus timer that’s running, and the reminders for your todos and habits, are kept and scheduled on your device.
- Lock and privacy settings, such as blurring Cedar in the app switcher, stay on each device.
You can turn off notifications, or Cedar’s access to Face ID or your photos, at any time in your device’s settings. The rest of Cedar keeps working.
4. How we use your data
- To run Cedar: store and sync your data, and work out streaks, today’s progress and focus totals.
- To let an AI assistant you connect use your Cedar, while it’s connected (see section 5).
- To keep Cedar secure, prevent abuse and fix problems.
- To reply when you contact us.
We don’t sell or rent your data. We don’t use it for advertising, we don’t send marketing emails, and we don’t feed it to AI models.
5. Who can see your data
You
Your data is private to your account. Cedar has no sharing: nobody else using Cedar can see it.
Service providers
These companies process data for us, to provide their services to us:
- Supabase: our database, sign-in and server functions, in the EU (Ireland).
- Google: Google sign-in.
- Vercel: hosting for this website.
AI assistants you connect
If you connect Cedar to an AI assistant such as Claude or ChatGPT, it can read your habits, todos, notes, countdowns and focus sessions, and add todos, notes and countdowns, tick off todos and mark habits for you. It can do this only after you allow it on our consent page, and only while you stay connected. It acts as you and sees only your own data. Locked notes show their title only, never their text, and countdown photos never leave your device.
What it reads goes to that assistant’s company under its own privacy policy, not ours. You can remove it in the assistant at any time. See Use Cedar from Claude and ChatGPT.
Legal reasons
We may disclose data if the law requires it, or if it’s needed to protect someone’s safety or our legal rights.
If Cedar changes hands
If Cedar is ever sold or transferred, your data may move to the new owner. We’ll tell you before that happens.
We don’t sell your data or share it with advertisers or data brokers.
6. Where it’s stored and how it’s protected
- Your data is stored with Supabase, on cloud servers in the EU (Ireland, eu-west-1). Google handles sign-in, and may process your sign-in outside India or outside your country.
- Data is encrypted in transit (HTTPS) between the app, our server and these providers. Our hosting provider also encrypts stored data.
- Notes, locked or not, aren’t end-to-end encrypted: like the rest of your data, they’re protected by encryption in transit and at rest and by the access rules below.
- Access rules in our database let each account reach only its own data.
- No system is perfectly secure. If you think you’ve found a problem, please email us.
7. How long we keep it
- While you have an account, we keep your data so Cedar can show it to you.
- Things you delete in the app. A deleted habit, todo, note or countdown disappears from the app at once. On our servers it’s marked as deleted and kept out of sight, so your other devices can catch up with the deletion. It’s erased for good after 90 days, or sooner if you delete your account. If you want something erased sooner, email us.
- When you delete your account, your data is erased from our live database straight away. See Delete your account for exactly what’s deleted. Our hosting provider keeps backups for a limited period of up to 30 days. After that, your deleted data is gone from them too.
- Sign-in and security records are kept for a limited period.
- Emails you send us are kept for as long as we need them to deal with your request.
8. Your rights and choices
You can:
- see and correct your data in the app;
- ask for a copy of your data. Email us and we’ll send it in a common format, such as JSON or CSV;
- delete specific data, or your whole account, in the app or by email;
- withdraw your consent. Stop using a feature, turn off a permission in your device’s settings, disconnect an assistant, sign out or delete your account. This doesn’t affect what we did before;
- ask questions or complain about how we handle your data.
If you’re in India, you can also nominate someone to use these rights for you if you die or can’t act yourself.
To make a request, email malik@ashternext.com from the Google email address you use with Cedar. We’ll reply within 30 days. If you write from another address, we may need to check that the account is yours first.
If you’re not happy with our reply, you can complain to the data protection authority where you live. In India, that’s the Data Protection Board of India.
9. Children
Cedar is for adults. You must be 18 or older to use it. We don’t knowingly collect data from anyone under 18. If we learn that we have, we’ll delete it. If you think a child is using Cedar, please email us.
10. This website
This website is a few static pages hosted on Vercel. It doesn’t use cookies or analytics, and its fonts are served from this site, so your browser doesn’t connect to anyone else to show it. The one exception is the page where you allow an AI assistant: it runs a script that signs you in through Supabase and keeps that sign-in in your browser’s storage. Vercel may log basic request details, such as your IP address, to deliver and protect the site.
11. Changes to this policy
We’ll update this policy when Cedar changes. The date at the top shows when it last changed. If a change affects how we use your data, we’ll tell you in the app or by email before it takes effect.
12. Contact us
- Developer
- AshterNext (Maalik Bagwala)
- Address
- Nashik, Maharashtra, India
- GSTIN
- 27CSGPB6938L1ZB
- malik@ashternext.com