Privacy

Account data

When you create an account, AWS Cognito stores your email address and password credentials (or your Google account link if you sign in with Google). We also store a profile with your screen name and optional avatar image. Screen names appear to people you share checklists with. We use your email for sign-in, password reset, and sharing-related notices you trigger in the product.

Lists, templates, and checklists you create are stored so the product can show them to you and to people you share them with. We do not sell this content.

Access requests

When sign-up is invite-only, the request form stores the email address you enter, an optional note, your IP address, and your browser's user agent. We use the IP address and user agent to spot automated abuse. The IP address and user agent are deleted when a request is approved. Pending and denied requests are deleted automatically 90 days after the last request.

Feedback and support messages

When you use the contact form, bug report, feature request, broken-link reporter, or thumbs controls, we create a tracked incident. Email is optional on every channel — leave it only if you want a reply. Name is optional and only collected on the contact form.

Unless you choose to omit technical context, each report's context envelope includes these fields (from the client builder):

• version — Context schema version (always 1)
• appId — Application id (checklist)
• appVersion — App version / deploy stamp
• surfaceId — Which form / tool surface
• route — Current page path (tokens redacted)
• occurredAt — Timestamp when the report was built
• timezone — Timezone
• locale — Locale
• viewport — Viewport size
• deviceClass — Device class (mobile / tablet / desktop)
• browser — Browser (family + major version)
• os — Operating system
• prefersColorScheme — Color scheme preference
• sessionRef — Ephemeral browser-session id (not a login id)
• payload — Optional allowlisted facts only — counts, kind, model id, cache-hit, HTTP status, or error name/message/truncated stack. Never list names, item text, notes, other members' emails, share tokens, or invite tokens

Share-link paths are redacted before they leave your browser (for example /s/[token]), so a capability token is not stored with the incident.

AI assistant

The in-app AI assistant is available to administrators today. When you use it, your messages, and the lists, templates, and checklists it reads to answer you, are processed by Anthropic Claude models, either through Amazon Bedrock (AWS) or directly through Anthropic's API, depending on the model an administrator has selected.

Anthropic's commercial terms state that it may not train models on content sent through its API, and its published retention policy says API inputs and outputs are automatically deleted from its systems within 30 days, except where longer retention is needed to enforce its usage policy or to comply with the law. Amazon Bedrock processes the same models inside AWS under AWS's own terms.

Separately, the "Create with AI" feature that drafts a list sends the purpose you type to the same models, through the same two routes, to generate the list's items.

Conversation text is kept for 30 days. Card numbers, SSN-like numbers, and password-like strings are removed before storage. On sites where an administrator has switched conversation storage to metadata-only, only usage details are kept — never the text of the conversation.

You can delete a conversation at any time from the assistant's history panel. Usage counts and thumbs-up/down ratings on assistant replies are kept in aggregate, not tied to conversation text.

Retention

• Incident records: 24 months
• contactEmail / contactName: 12 months after the incident closes (fields are purged; the row may remain)
• Large context blobs: 12 months
• Rate-limit IP hashes: up to 72 hours
• AI assistant conversations: 30 days (or usage details only, in metadata-only mode)

Account data (Cognito credentials and your profile) is kept while your account exists. Deleting your account removes the profile and associated app data we control; Cognito deletion follows the same request path below.

Third-party scripts

Feedback forms may load Cloudflare Turnstile to reduce automated spam. That script runs in your browser when you open a form and sends a challenge token with the submission. See Cloudflare's own privacy documentation for how Turnstile processes data.

Incidents are stored in a shared feedback service operated alongside this site. Owner notification and optional auto-reply email are sent via Amazon SES from noreply@neattick.com.

The AI assistant sends your messages and the CheckList content it reads to Anthropic Claude models, through Amazon Bedrock or directly through Anthropic's API, to generate its replies. List generation sends the purpose text you type to the same providers.

Deletion requests

To request deletion of feedback you submitted (or of your account and profile), use the contact form and include your ticket reference if you have one, or the email on the account. We will confirm when the deletion is done.

Changes

If this policy changes in a material way, we will update this page. Continued use of the site after a change means you have seen the updated terms.