Skip to content
021

Effective 21 October 2026

Privacy policy

  • This site sets no cookies and runs no analytics or ads.
  • The dashboard stores what you put in it and what your connected tools send it, to show it back to you. It isn't sold, shared for advertising, or used to train AI.
  • Data is stored in Sydney, Australia. Integration keys are encrypted at rest.
  • You can disconnect an integration or ask for everything to be deleted at any time.

This policy explains how 021 (“021”, “we”) handles personal information through this website (021.au) and the 021 dashboard (https://dashboard.021.au). We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

This website

021.au sets no cookies and loads no analytics, advertising or tracking scripts. Our hosting provider, Vercel, keeps standard server logs (such as IP address, browser and the page requested) for security and reliability. We don't combine those logs with anything else.

What the dashboard collects

  • Your account. You sign in with GitHub. We receive your GitHub user id, email address, name and avatar, and store the email, name and avatar in your profile. We never see your GitHub password.
  • What you write. Projects, briefs, notes, ideas, tasks, expenses and the other content you create.
  • What your integrations send. When you connect a service such as GitHub, App Store Connect, Google Play or RevenueCat, we sync data from it on a schedule: for example repositories, issues and pull requests, the packages your repositories depend on, app listings and review status, ratings and reviews (including reviewers' display names and review text, as published by the store), and revenue and subscription figures.
  • Credentials. The API keys and tokens you give us for those services are stored encrypted in Supabase Vault and used only to sync your data. Tokens we issue to your AI tools are stored only as a one-way hash.
  • Feed activity. In “What's new”, which items you've scrolled past, opened and starred, so the feed can hide what you've seen and keep what you saved.
  • Cookies. The dashboard uses cookies to keep you signed in, and two preference cookies that remember display choices (showing archived projects, hiding finished tasks). There are no analytics or advertising cookies.

How we use it

Only to run the dashboard for you: to show your projects and their numbers, sync your connected tools, flag what needs attention, and personalise the feed (for example, showing a package release only if one of your projects uses that package). We don't sell personal information, use it for advertising, or use it to train AI models.

AI tools you connect

If you connect an AI assistant such as Claude Code or Claude Desktop to 021, it reads and writes your dashboard data with a token you create. That assistant runs on your own account with its provider, under that provider's terms and privacy policy. 021 does not send your data to an AI provider itself.

Where it's stored, and who helps us run it

We use a small number of service providers, who process data on our behalf:

  • Supabase: database and sign-in. Data is stored in the Sydney region (ap-southeast-2).
  • Vercel: hosting. Dashboard requests are processed in Sydney; content may pass through Vercel's global network on the way to you.
  • GitHub: sign-in, and the scheduler that triggers syncs.

Some of these providers are based overseas, mainly in the United States, and may access data from there to provide their service. The services you choose to connect (such as Apple, Google or RevenueCat) handle your data under their own policies.

How long we keep it

Your content and synced data are kept while your account exists. Feed items are deleted after 60 days unless someone has starred them, and your record of seen items goes with them. Disconnecting an integration deletes its stored credential. When you delete your account, we delete your data, except where the law requires us to keep it.

Your choices

  • Disconnect any integration from the dashboard's Integrations page.
  • Revoke any token you issued to an AI tool, at any time.
  • Ask us for a copy of your data, to correct it, or to delete your account, by emailing hello@021.au. We'll respond within 30 days.

Security

Data in the database is scoped to your account by row-level security, so one user's rows are not readable by another. Credentials are encrypted at rest and all traffic is encrypted in transit. No system is perfectly secure; if a breach is likely to cause you serious harm, we'll tell you and the Office of the Australian Information Commissioner as the law requires.

Questions and complaints

Email hello@021.au. If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Changes

If we change what we collect or how we use it, we'll update this page and its effective date. Significant changes will be announced in the dashboard before they take effect.