Privacy Policy

gegma (“we”, “us”) is the data controller for the information described here. If you use gegma as part of a team, your team’s administrators also control how your workspace is configured and who can see your activity within it.

We only collect what we need to run the service:

• Account details. Your name and email address, and — if you sign in with Google — the profile picture Google provides. If you use a password, we store only a salted hash of it, never the password itself.
• Content you create. The work you put into gegma: tasks and their descriptions, comments and @-mentions, wiki pages, time entries and notes, remote-day bookings, planning-poker votes, and any files or images you attach to a task. Passwords you keep in a wiki page are stored encrypted, and each time one is revealed or copied is logged for the team.
• Team and role information. Which teams you belong to, your role in each, and a snapshot record of actions (an audit log) so history stays accurate even after a rename or departure.
• Technical data. Basic information needed to deliver and secure the service, such as your authentication session and the requests your device makes to our servers.

gegma does notinclude third-party advertising, analytics, or tracking SDKs. We do not collect your location, your contacts, your browsing history on other sites, or payment-card details, and we do not track you across other companies’ apps or websites.

• To authenticate you and keep your account secure.
• To provide the product — showing your team’s rota, tasks, timesheets, and poker rooms, and syncing them across the web and mobile apps.
• To send in-app notifications, such as when you are mentioned or assigned work.
• To maintain reliability, prevent abuse, and comply with legal obligations.

Content you create in a team is visible to other members of that team, according to your workspace’s roles and permissions — that is the point of a shared workspace. Comments, for example, are visible to the whole team.

Beyond your own team, we do not sell your data or share it for advertising. We share information only with service providers that host and operate gegma on our behalf (for example, our hosting and database infrastructure), and only as needed to run the service, or where required by law.

If you choose “Continue with Google”, Google shares your name, email address, and profile picture with gegma so we can create or match your account. We use this only to identify you and link you to the team seats created for your email. Your use of Google sign-in is also governed by Google’s own privacy policy.

We keep your account information and content for as long as your account is active and your team retains it. When a task, comment, time entry, or account is deleted, the associated data is removed from the live service, subject to routine backups and any records we must keep for legal or security reasons.

You can view and update much of your information directly in the app. Depending on where you live, you may have rights to access, correct, export, or delete your personal data. Team administrators can manage members and their data within a workspace; for requests we handle directly, contact us at the address below and we will respond within a reasonable time.

We protect your data with industry-standard measures, including encrypted connections (HTTPS) and hashed passwords. No system is perfectly secure, but we work to keep your information safe and to limit access to it.

gegma is a workplace tool intended for adults and is not directed to children under 13. We do not knowingly collect personal information from children.

We may update this policy from time to time. When we make material changes, we will revise the “Last updated” date above and, where appropriate, notify you in the app.

Questions about this policy or your data? Email us at privacy@gegma.app.