Last Updated: August 27, 2025

BeeNest Digital ("we," "us," or "our") operates Timeboxing Planner, a cloud-based platform that allows users to create daily and weekly plans and use a Pomodoro timer to enhance productivity (the "Service"). This Privacy Policy explains how we collect, use, store, and protect your personal data when you use the Service. By using Timeboxing Planner, you agree to the practices described in this policy. If you have questions, please contact us at ilker@beenestdigital.com.

1. Data We Collect

We collect the following data to provide and improve the Service:

• Authentication Data: Email address and password (if you register directly) or Google account details (if you use Google sign-in).
• User-Generated Content: Daily and weekly plans you create using the Service.
• Payment Data: If you make voluntary contributions, payment details (e.g., card information) are collected and processed by our third-party payment processor, Stripe.
• Usage Data: Information about how you interact with the Service (e.g., timer usage, page views), which may be collected automatically via Google Analytics and Google Tag Manager.
• Cookies and Tracking: Our Service uses Google Fonts, Google Analytics, Google Tag Manager, and Google Search Console, which may set cookies or collect usage data (see Section 4).

2. How We Use Your Data

We use your data to:

• Provide the Service (e.g., store and display your plans, enable Pomodoro timer functionality).
• Authenticate your account and ensure secure access.
• Process voluntary contributions via Stripe.
• Analyze usage patterns via Google Analytics, Google Tag Manager, and Google Search Console to improve the Service.
• Respond to your inquiries or support requests.

3. Legal Basis for Processing (GDPR)

For users in the UK and EU, we process your data based on:

• Contract: To provide the Service as per our Terms and Conditions.
• Legitimate Interests: To improve the Service, analyze usage, and ensure functionality.
• Consent: For optional cookies (e.g., analytics cookies) or voluntary contributions.

4. Third-Party Services

We use the following third-party services, which may process your data:

• Firebase (Authentication and Database): Stores authentication data and your plans. Firebase is operated by Google (see https://firebase.google.com/terms).
• Google Fonts: Provides typography and may set cookies or collect usage data (see https://policies.google.com/privacy).
• Google Analytics and Google Tag Manager: Collect usage data (e.g., page views, session duration) to analyze and improve the Service (see https://policies.google.com/privacy).
• Google Search Console: Monitors website performance and may collect usage data (see https://policies.google.com/privacy).
• Stripe: Processes payment data for voluntary contributions (see https://stripe.com/privacy).

We do not control these third parties’ data practices and are not responsible for their policies. Please review their privacy policies for details.

5. Data Storage and Security

Storage: Your data is stored on Firebase’s secure servers. Payment data is processed by Stripe. As a beta service, we cannot guarantee permanent data retention, and data may be lost due to technical issues or service changes.

Security: We rely on Firebase’s and Stripe’s standard encryption and security measures to protect your data. However, no online service is completely secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your data only for as long as your account is active or as needed to provide the Service. If you delete your account or stop using the Service, your data may be deleted, though we cannot guarantee retention due to the Service’s beta status and reliance on Firebase’s free tier.

7. Your Data Protection Rights (GDPR)

If you are in the UK or EU, you have the following rights under GDPR:

• Access: Request a copy of your personal data.
• Rectification: Correct inaccurate data.
• Erasure: Request deletion of your data.
• Restriction: Limit how we process your data.
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests.

To exercise these rights, contact us at ilker@beenestdigital.com. We will respond within one month, as required by GDPR.

8. Cookies

The Service uses cookies via Google Fonts (for typography), Google Analytics, and Google Tag Manager (for analytics). These cookies may track usage (e.g., page views, session duration) to improve the Service. You can manage or disable cookies through your browser settings or opt out of analytics tracking via Google’s tools (see https://tools.google.com/dlpage/gaoptout). By using the Service, you consent to necessary cookies.

9. Children’s Privacy

The Service is not intended for users under 13 years old. We do not knowingly collect data from children under 13. If you believe we have such data, please contact us to request its deletion.

10. International Data Transfers

As we use Firebase, Google Analytics, Google Tag Manager, Google Search Console, and Stripe (all US-based), your data may be transferred outside the UK/EU. These providers comply with GDPR through Data Protection Agreements. We ensure appropriate safeguards are in place for such transfers.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the Service. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or your data, please contact us at ilker@beenestdigital.com.