Privacy Policy

1. Introduction

We Do Stuff ("we," "our," or "us"), operated by Fifth Current (fifthcurrent.com), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our suite of productivity, coordination, and personal-tracking apps.

Data Controller: Fifth Current is the data controller responsible for your personal data. For contact information, see Section 16 below.

2. Information We Collect

Account Information

• Email address
• Password (encrypted, never stored in plain text)
• Phone number (if using phone authentication)
• Display name and profile information you provide

Usage Data

• Focus session details (task descriptions, duration, completion status)
• Session messages and chat history
• Gamification data (points, streaks, achievements)
• Voting, event, and shift-scheduling participation
• Activity, habit, and media-tracking logs (for example walks, workouts, movies rated)
• Mood/energy level selections (general wellness indicators)

Content You Create

• Free-text entries such as personal journals, reflections, goals, and notes
• Feedback you submit, including your name and email if you provide them
• Files you upload, such as PDF invoices in the Get Paid app

Financial Data (Get Paid app)

• Client and business details, hourly rates, invoice amounts, tax rates, and payment terms you enter
• Invoice paid/unpaid status you record. Get Paid does not process payments and does not collect card or bank details.

AI Interaction Data

• Conversations with our AI assistants (for example Ori in Focus, the chat coach in Wiggle)
• Task breakdowns and suggestions requested
• "Stuck moment" descriptions you submit
• Invoice content sent for AI import or editing in Get Paid

Payment Information

Payment processing is handled by Stripe. We do not store your credit card details. We only store your Stripe customer ID and subscription status.

Technical Data

• IP address (for security and fraud prevention)
• Browser type and version
• Device information
• Referring URL

3. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA) and UK, we process your personal data based on the following legal grounds:

4. How We Use Your Information

• To provide and maintain our service
• To process your transactions
• To personalize your experience
• To communicate with you about your account
• To improve our services
• To prevent fraud and enhance security
• To comply with legal obligations

5. AI Processing Disclosure

Important: When you use AI features (for example the Ori assistant, task breakdowns and smart suggestions in Focus, the AI chat coach in Wiggle, or AI invoice import and editing in Get Paid), your input is sent to one or more third-party AI providers for processing. We use more than one provider and route each request to whichever is best suited or available at the time, so a given request may be handled by any of them:

• Your input (task descriptions, messages, and for Get Paid the invoice content or uploaded file) is sent to the selected provider's servers for that request.
• Each provider processes the data under its own privacy policy, linked above.
• We store conversation history to provide continuity in your AI interactions.
• Under our agreements, these providers process your input to return a result and do not use it to train their models. This depends on each provider's current terms rather than a guarantee we can make on their behalf.

By using AI features, you consent to this data processing. AI features are always optional - you can avoid sharing data with these providers by not using them (in Focus, turn off the AI Features toggle in your profile settings).

6. App-Specific Data Practices

Different apps in the suite touch different data. The practices below are grouped by category and name representative apps; the same practices apply to other apps of the same kind.

7. Third-Party Services (Sub-processors)

We use the following third-party services to operate our platform:

8. International Data Transfers

Our services are primarily hosted in the United States. If you are accessing our Service from outside the United States, your data will be transferred to and processed in the United States.

For EU/EEA/UK Users

We transfer your personal data to the United States based on:

• EU-U.S. Data Privacy Framework (DPF): Our key processors (Stripe, Vercel) are certified under the DPF.
• Standard Contractual Clauses (SCCs): We have executed SCCs with sub-processors not certified under the DPF.

You may request a copy of the relevant transfer mechanisms by contacting us at privacy@wedostuff.app.

9. Data Retention

We retain your data for the following periods:

You can request deletion of your data at any time by contacting us or using the account deletion feature in your profile settings.

10. Your Rights

Depending on your location, you may have the following rights:

All Users

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Withdraw consent for data processing

EU/EEA/UK Users (GDPR)

You also have the right to:

• Restrict processing of your personal data
• Object to processing based on legitimate interests
• Lodge a complaint with your local data protection authority

11. California Privacy Rights (CCPA/CPRA)

Categories of Personal Information

In the past 12 months, we have collected:

• Identifiers: Email address, name, phone number, IP address
• Commercial information: Subscription and payment history; client, rate, and invoice details you enter in Get Paid
• Internet activity: Usage data, session history
• User content: Free-text entries (journals, reflections, notes, feedback) and files you upload
• Inferences: Preferences derived from usage patterns

Your California Rights

• Right to Know: Request disclosure of personal information collected
• Right to Delete: Request deletion of your personal information
• Right to Correct: Request correction of inaccurate information
• Right to Opt-Out of Sale/Sharing: See below
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

"Do Not Sell or Share My Personal Information"

To exercise your California privacy rights, contact us at privacy@wedostuff.app with the subject line "California Privacy Request."

12. Colorado Privacy Rights (CPA)

Colorado residents have additional rights under the Colorado Privacy Act:

• Right to Access: Confirm whether we process your data and access it
• Right to Correct: Correct inaccuracies in your personal data
• Right to Delete: Delete your personal data
• Right to Data Portability: Obtain your data in a portable format
• Right to Opt-Out: Opt out of targeted advertising, sale of data, or profiling

To exercise your Colorado privacy rights or appeal a decision regarding your rights, contact us at privacy@wedostuff.app.

13. Global Privacy Control (GPC)

Learn more about GPC at globalprivacycontrol.org.

14. Cookies and Tracking

We use essential cookies for authentication and session management. We do not use tracking cookies or third-party advertising cookies.

Cookies We Use

Because we only use essential cookies that are strictly necessary for the Service to function, no cookie consent banner is required under GDPR/ePrivacy Directive.

15. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption in transit (HTTPS/TLS)
• Encryption at rest for sensitive data
• Secure authentication with hashed passwords
• Row-level security policies at the database level
• Regular security reviews and updates

16. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:

• Privacy inquiries: privacy@wedostuff.app
• General support: support@wedostuff.app
• Data Protection Officer: dpo@fifthcurrent.com

EU Representative

If we are required to appoint an EU representative under GDPR Article 27, details will be published here. Currently, given our scale of operations, we are evaluating this requirement.

17. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page, updating the "Last updated" date, and sending you an email if we have your contact information. We encourage you to review this Privacy Policy periodically.