YallaDo

Privacy Policy

YallaDo · Last updated October 14, 2026

YallaDo is a task-management service for individuals and teams. It is available as a website and as an app for iOS and Android. This policy explains what information we collect, why, who it is shared with, and the choices you have. It applies to the website and to both apps.

Who we are

YallaDo is operated by Hassan Sayed (the developer). Questions or requests: hassansayed2002@hotmail.com.

Information we collect

  • Account information: your name and e-mail address, and your profile picture if you sign in with Google or Apple and one is provided. If you sign in by e-mail we send a one-time code; no password is stored.
  • Your content: workspaces, sections, tasks, descriptions, due dates, assignments, comments and @mentions you create, and the e-mail addresses you type when inviting people.
  • Safety data: the people you block, and the comments you report (the comment text is kept with the report so it can be reviewed).
  • Notification settings and history: which events notify you in the app or by e-mail, and the notifications generated for you.
  • Notification token: a device token, registered through Firebase Cloud Messaging, so push notifications can reach your phone. It is removed when you sign out.
  • Technical data: basic information needed to run and troubleshoot the service (for example IP address for rate limiting and error logs).

Website analytics

On the website only (not in the apps) we use Vercel Web Analytics, which is cookieless and counts page views without identifying you, and Google Analytics 4, which is loaded only after you accept the consent banner. If you decline, Google Analytics is not loaded. The apps contain no analytics or advertising SDKs.

How we use information

  • To provide the service: sign you in, store and show your boards, and let teammates collaborate.
  • To send notifications you asked for (in the app, by e-mail, or as push notifications) and one-time login codes.
  • To keep the service safe: prevent abuse, review reported content, and troubleshoot problems.

We do not sell your information and we do not show ads.

Who can see your content

Your personal board is visible only to you. A team workspace is visible only to the people who were invited to it. Nothing is public. Comments show your name and profile picture to other members of the same workspace.

Service providers

  • Vercel: hosting of the website and API.
  • Neon: PostgreSQL database.
  • Firebase Cloud Messaging and Apple Push Notification service: delivery of push notifications.
  • Google and Apple: sign-in if you choose those options.
  • An e-mail provider (SMTP): login codes and optional notification e-mails.
  • Google Analytics (website, with consent) and Vercel Web Analytics (website).

Reporting and blocking

You can report any comment written by someone else, and block its author so you no longer see their comments (unblock any time in Settings). Reports are reviewed by the developer and acted on promptly, normally within 24 hours. Workspace owners can also remove members and delete tasks and comments.

Your choices and deleting your data

  • Edit your name in Settings, and choose which notifications you receive.
  • Sign out at any time; this removes the push token of that device.
  • Delete your account in Settings (website and apps) under Danger zone. It permanently removes your account, sign-in, personal board and push tokens. Team workspaces you own pass to their longest-standing member, or are deleted if nobody else is in them; tasks and comments you wrote in teams stay and show as “Deleted user”.
  • You can also e-mail hassansayed2002@hotmail.com to ask for access to or deletion of your data.

Retention

We keep your data while your account exists. Login codes expire within minutes. When you delete your account the data described above is removed from our database.

Children

YallaDo is not directed at children under 13, and we do not knowingly collect their information.

Security

Data is sent over HTTPS, sessions use secure tokens, and login codes are stored only as hashes. No system is perfectly secure, so please use the service with that in mind.

Changes

If this policy changes we will update the date above. Material changes will be announced in the app or on the website.