Privacy
What we store, and what we never do
You're putting client work in here. You deserve to know exactly what happens to it, in language you don't need a lawyer to read. Last updated 9 August 2026.
The short version
- We don't sell your data. There is no advertising in TinyHub and no ad tracking.
- We don't use Google Analytics or any third-party analytics. Usage stats are first-party and you can switch them off entirely in your profile.
- We honour your browser's Do Not Track setting without you asking.
- You can export everything in a workspace at any time, on any plan.
- Private tasks, notes and calendar events are private from your teammates too — including from workspace admins, and including in the export.
What we store
Your account: name, email address, password (hashed — we never see it), language, timezone and your notification preferences.
Your work: the workspaces, projects, tasks, notes, calendar events and time entries you create. This is your content. We process it to run the product and for no other purpose.
Usage events: coarse product analytics — that a page was opened, that a task was created — used to work out which parts of TinyHub actually help. First-party only, stored in our own database. You can turn this off inProfile → Privacy, and if your browser sends a Do Not Track header we skip it without being asked. Turning it off never affects your notifications or anything else.
Operational logs: ordinary server logs needed to keep the service up and debug faults.
Who else touches it
We keep this list short on purpose, and we'd rather name them than write "trusted partners".
- Our hosting provider — runs the servers and the database.
- An email delivery provider — sends password resets, invitations and digest emails. It sees the recipient address and the message.
- Progressier — delivers web push notifications, if you switch them on. Notification titles pass through it. If you never enable push, it never sees anything.
- An error-tracking service — receives crash reports so we can fix faults.
- Polar — will handle payments if and when TinyHub starts charging. Card details go to them and never touch our servers. Nothing is charged today.
That's the whole list. No data brokers, no advertising networks, no analytics vendors.
Where it lives
TinyHub is built and hosted in Europe, and your data stays in the EU.
Privacy inside a shared workspace
This one matters if you work with clients. When you share a workspace, your teammates see the shared board — but anything you mark private stays yours. Private tasks are visible only to the person they're assigned to; private notes and private calendar events only to whoever wrote them. That rule holds everywhere, including for workspace owners and admins, and including in the downloadable export. Your own logged time is private to you, and only a workspace owner or admin can see the team's totals.
Taking your data with you
Every workspace has an export in its settings: tasks, projects, notes, calendar and time, as a single file, on any plan including Free. You don't have to ask us and you don't have to be a paying customer. If you want your account deleted, email us and we'll remove it along with the workspaces you alone own.
Your rights
Under the GDPR you can ask for a copy of your data, correct it, delete it, or object to how we process it. Email m@f77.se and a person will deal with it. If you're not satisfied you can complain to your national data protection authority — in Sweden, Integritetsskyddsmyndigheten (IMY).
Cookies
TinyHub sets a session cookie so you stay signed in. That's what it's for; it isn't used to track you across other sites. There are no advertising or third-party tracking cookies.
Changes
If this policy changes in a way that affects you, we'll tell you — not quietly update a date at the top.
Who we are
TinyHub is operated by Fabrik77 AB (org. nr 559411-8449, VAT SE559411844901), a Swedish company with its registered office in Luleå. Postal address: Kungsgatan 20, 972 34 Luleå.
Fabrik77 AB is the data controller for your account and workspace data.
Data protection contact: m@f77.se