Privacy Policy

Last updated: [DATE OF PUBLISHING]

Onjo is a time-blocking and focus app for Mac. It is made by Koji Studios, a sole proprietorship registered in Hong Kong (business registration no. 41703021), owned by Tsun Wang Ting. In this policy, "we" and "us" mean Koji Studios.

The short version: we collect what we need to sync your plans between your Macs and to know whether you have Pro. We don't sell your data, we don't show ads, and the app has no analytics or tracking.

What we collect

Your account

You sign in to Onjo with Apple or Google.

• With Apple, Apple tells us your Apple account's user ID for Onjo, your email address and your name if you choose to share it. If you pick Hide My Email, we get a private relay address that forwards to you instead of your real one.
• With Google, Google tells us your email address, your name, your Google account ID, and your profile picture if you have one.

We use them to create your account and show you which account you're signed in to. Onjo asks Apple and Google for nothing more. It can't see your iCloud, Gmail, Google Drive, calendars or contacts.

What you put in Onjo

To sync between your Macs, we store:

• your folders (names, colours and order),
• your tasks (titles, notes, checklists, priority, estimates, whether they're done and when you finished them),
• your time blocks (when each task is scheduled),
• your focus sessions (when each one started and ended, which task and folder it was for, and whether you finished it), which Stats counts,
• your routines (their titles, folders, times, the weekdays they repeat on, when they start, whether they're paused, and the days you skip),
• your day templates (their names, order and the blocks they lay out).

Your Macs

For each Mac you sign in on, we store a random device ID, the Mac's name (for example "Sam's MacBook Air") and when it last synced. This is how Onjo shows which Macs are using your account and applies the free plan's one-Mac limit.

Purchases and trials

We store whether you have Pro and where it came from: a trial, the Mac App Store, or our website. For each purchase we keep the product, the transaction ID that Apple or Paddle gave us, and when it started or ended. We also record that your Apple or Google account has used its free trial, so the trial is one per person.

We never see your card or bank details. Apple handles App Store payments, and Paddle handles website payments (see below).

What we don't collect

• Your calendar. If you choose to show calendar events on your timeline, Onjo reads them on your Mac only. Your calendar is never sent to us. If you also use the Claude connection, Claude can read the titles and times of events in the calendars you choose, including all-day events, as described below.
• No analytics, advertising IDs or tracking inside the app.
• No crash reporting service.
• No access to your files, other apps, location, camera or microphone.

The Claude connection

Onjo can connect to Claude, Anthropic's AI assistant, on your Mac. That connection runs entirely on your Mac: Claude talks to Onjo through a local helper, and none of it passes through our servers.

When you ask Claude about your plans, including your meetings when Calendar is on, Claude reads them from Onjo and sends them to Anthropic as part of your conversation. That's covered by Anthropic's privacy policy, not this one. If you don't turn the Claude connection on, nothing in Onjo goes to Claude.

Who processes your data for us

We use a small number of services to run Onjo:

Service	What it does	What it receives
Supabase	Hosts your account and synced data	Your account, your folders, tasks, time blocks, focus sessions, routines, day templates, Mac names and Pro status. Stored in Mumbai, India (AWS ap-south-1).
Google	Sign-in, if you sign in with Google	Google already has your account. It learns that you signed in to Onjo.
Paddle	Sells Pro on our website as merchant of record	Your payment details, email, country and any tax details you give at checkout. Paddle tells us the transaction ID, and your email and country.
Apple	Sells Pro in the Mac App Store, and Sign in with Apple	For purchases, Apple handles the payment and tells us the transaction ID, never your name, email or card. For sign-in, Apple already has your account and learns that you signed in to Onjo.
Cloudflare	Hosts this website	Standard web request data, such as your IP address. Our site analytics set no cookies.
GitHub	Hosts the app downloads	Standard download request data, such as your IP address.

Paddle and Apple act as the sellers of record for their purchases, so their own privacy policies also apply to your payment.

When Onjo checks for updates (website version only), it asks our website for the latest version number and downloads updates from GitHub. That request includes your Mac's IP address and Onjo's version, as any web request does.

Some of these services are outside Hong Kong, so your data may be stored or processed in other countries. We only use providers that protect personal data to a standard comparable to Hong Kong law.

How we use your data

• To run your account and sync your plans between your Macs.
• To know whether you have Pro, and to stop the free trial being reused.
• To answer you when you contact support.
• To keep records our tax and accounting obligations require.

We don't sell or rent your data, and we don't use your plans for advertising or to train AI models.

How long we keep it

• Your plans and Mac list are kept while your account exists.
• Delete your account in Onjo under Settings › Account › Delete my account. That deletes your account and everything synced to it from our servers straight away. Other Macs signed in to the account keep their local copy until you sign out on them.
• Purchase and trial records are kept after you delete your account, linked only to your Apple or Google account ID. This lets a purchase follow you if you sign in again and keeps the trial one per person. Business records of purchases are kept for 7 years, as Hong Kong law requires.
• Support emails are kept while needed to help you, then deleted.

Your rights

You can ask us to:

• give you a copy of the personal data we hold about you,
• correct anything that's wrong,
• delete your data (or do it yourself with Delete my account).

Requests to see, correct or delete your data are handled by the owner of Koji Studios, Tsun Wang Ting. Email [email protected] or write to Koji Studios, [PO BOX], Hong Kong, and we'll reply within 30 days. Depending on where you live (for example the EU, UK or California), you may have further rights, such as objecting to processing or complaining to your local data protection authority. In Hong Kong that's the Office of the Privacy Commissioner for Personal Data.

Children

Onjo isn't meant for children under 13, and we don't knowingly collect their data. If you think a child has signed up, email us and we'll delete the account.

Security

Your data is sent over encrypted connections and stored with Supabase, where each account can only read its own data. No system is perfectly secure, but we take reasonable steps to protect what you trust us with.

Changes

If we change this policy in a way that matters, we'll update the date above and say so on the website or in the app before the change takes effect.

Contact

Koji Studios
[PO BOX]
Hong Kong
[email protected]