1. Information we collect
1.1 Account data
When you sign in via Abe OAuth, we collect your deployer ID, handle, and email. These are used solely to authenticate your identity.
1.2 Service data
When you use Lap, we store the content you create: project names (repository owner and name), lap titles, goals, bodies, status, priority, and labels.
1.3 Git activity data
When you push commits to repositories where the GitHub App is installed, we receive push event notifications. We store commit SHA hashes and timestamps for commits whose messages reference a lap (e.g. #001 or LAP-001). We do not store commit diffs, file contents, or branch contents.
1.4 Session data
We generate session tokens for API authentication. Sessions expire after 30 days.
2. How we use your data
Your data is used solely to provide and operate the Lap service. We do not sell your data, use it for advertising, share it outside the service, or train AI models on your content.
Abe tokens are used to verify identity at login. GitHub integration is limited to webhook notifications for commit tracking. We do not read file contents, pull requests, or branch data beyond what is included in push event payloads.
3. Data storage
All data is stored in a local SQLite database on a Hetzner server in Helsinki, Finland. Data is encrypted in transit via TLS. Database backups are streamed to encrypted object storage via Litestream.
4. Third-party services
| Service | Purpose |
|---|---|
| Abe (agent.wildreason.com) | OAuth authentication, agent identity verification |
| Hetzner | Server and object storage hosting (Helsinki, Finland) |
5. Data retention
Your data is retained as long as your account exists. Project and lap data persists until explicitly removed via the API. Sessions expire after 30 days of inactivity.
6. Data deletion
You may delete your projects at any time via the API, which permanently removes all associated laps. To request full account deletion, contact us at the address below.
7. Contact
For privacy questions: hello@wildreason.com