Last updated: January 4, 2026
We Do Stuff ("we," "our," or "us"), operated by Fifth Current (fifthcurrent.com), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our focus session and productivity platform.
Data Controller: Fifth Current is the data controller responsible for your personal data. For contact information, see Section 16 below.
Payment processing is handled by Stripe. We do not store your credit card details. We only store your Stripe customer ID and subscription status.
For users in the European Economic Area (EEA) and UK, we process your personal data based on the following legal grounds:
| Processing Activity | Legal Basis |
|---|---|
| Account creation and authentication | Contract performance |
| Providing focus sessions and features | Contract performance |
| Processing payments | Contract performance |
| AI assistant conversations | Consent (you choose to use AI features) |
| Service emails (account, billing) | Contract performance |
| Marketing communications | Consent |
| Security and fraud prevention | Legitimate interests |
| Service improvement and analytics | Legitimate interests |
Important: When you use our AI features (Ori assistant, task breakdowns, smart suggestions), your input is processed by Anthropic's Claude AI service. This means:
By using AI features, you consent to this data processing. You can avoid sharing data with Anthropic by not using AI-powered features.
We Do Stuff includes two applications with different data practices:
Focus is our productivity and body-doubling app with AI features. When you use Focus:
Opt-out: You can disable all AI features in your profile settings via the "AI Features" toggle. When disabled, no data is sent to Anthropic.
Stuff is our event planning and coordination app. When you use Stuff:
Note: Stuff does not use AI features. Your event data is not sent to any AI service.
We use the following third-party services to operate our platform:
| Service | Purpose | Location |
|---|---|---|
| Supabase | Database and authentication | United States |
| Stripe | Payment processing | United States |
| Anthropic | AI assistant services | United States |
| Vercel | Hosting and CDN | Global (US-based) |
| OAuth authentication (optional) | United States | |
| Giphy | GIF reactions | United States |
| Twilio | SMS delivery (Stuff app) | United States |
| Resend | Email delivery | United States |
Our services are primarily hosted in the United States. If you are accessing our Service from outside the United States, your data will be transferred to and processed in the United States.
We transfer your personal data to the United States based on:
You may request a copy of the relevant transfer mechanisms by contacting us at privacy@wedostuff.app.
We retain your data for the following periods:
| Data Type | Retention Period |
|---|---|
| Account information | Until account deletion + 30 days |
| Focus session data | Until account deletion |
| AI conversation history | 90 days (auto-pruned) |
| Payment records | 7 years (legal requirement) |
| Support tickets | 2 years after resolution |
| Security logs | 1 year |
You can request deletion of your data at any time by contacting us or using the account deletion feature in your profile settings.
Depending on your location, you may have the following rights:
You also have the right to:
NOTICE TO CALIFORNIA RESIDENTS
This section applies to California residents and supplements the information in this Privacy Policy pursuant to the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).
In the past 12 months, we have collected:
We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising. We do not have actual knowledge that we sell or share personal information of consumers under 16 years of age.
To exercise your California privacy rights, contact us at privacy@wedostuff.app with the subject line "California Privacy Request."
Colorado residents have additional rights under the Colorado Privacy Act:
To exercise your Colorado privacy rights or appeal a decision regarding your rights, contact us at privacy@wedostuff.app.
We honor Global Privacy Control signals. If your browser sends a GPC signal, we will treat it as a valid opt-out request for the sale or sharing of your personal information, as required by applicable state laws including the CCPA and Colorado Privacy Act.
Learn more about GPC at globalprivacycontrol.org.
We use essential cookies for authentication and session management. We do not use tracking cookies or third-party advertising cookies.
| Cookie | Purpose | Type |
|---|---|---|
| sb-*-auth-token | Supabase authentication | Essential |
| __stripe_mid | Stripe fraud prevention | Essential |
Because we only use essential cookies that are strictly necessary for the Service to function, no cookie consent banner is required under GDPR/ePrivacy Directive.
We implement appropriate technical and organizational measures to protect your personal data, including:
If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:
If we are required to appoint an EU representative under GDPR Article 27, details will be published here. Currently, given our scale of operations, we are evaluating this requirement.
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page, updating the "Last updated" date, and sending you an email if we have your contact information. We encourage you to review this Privacy Policy periodically.