Last updated: 21 October 2026
Debo is a task app with personal AI agents, made by Habesha Labs LLC ("we", "us"). This policy explains what we collect, why, and what you can do about it. The short version: we keep your tasks so they sync between your devices, we don't sell your data, and we don't show ads.
Questions: hello@getdebo.com.
Account details. Your name and email address, so you can sign in and so collaborators can recognise you. You can sign in with your email address (we email you a sign-in code or link), or with Apple, Google or GitHub, in which case we receive your name and email from that service. You can also add a device with a one-time pairing code from a device you're already signed in on. If you use Sign in with Apple's "Hide My Email", we only see the relay address.
Your workspace content. Tasks, projects, sections, labels, comments, due dates, reminders, the activity history of your workspace, and the files you attach to comments. We store this so it syncs across your devices and to the people you share a project with. This is the core of the service.
Devices and sign-ins. For each device you sign in on, we keep a name (e.g. "iPhone"), the kind of device, when it was added and last used, and whether it was signed out. Sign-in tokens and pairing codes are stored only as one-way hashes, never in readable form. You can see, rename and sign out devices on the Devices page.
Push tokens. If you allow notifications on iPhone, we store the push token Apple gives us so we can send reminders and updates.
Technical logs. Our servers record requests (including IP address) to keep the service running, stop abuse and fix bugs. We use IP addresses briefly to rate-limit sign-in attempts. Server logs are kept for 7 days.
Our website. getdebo.com counts page views and download clicks with PostHog, so we can see how people find Debo. With each visit we also note where it came from: the site that linked to us (just its name, like news.ycombinator.com, not the page) and any campaign tags in the link (like utm_source=x). It sets no cookies and stores nothing in your browser. Instead, PostHog uses a one-way hash of your IP address and browser, with a salt that changes every day, so a visit can't be followed from one day to the next. We don't store your IP address or look up your location.
Usage data from the Debo apps. The Debo apps for Mac, Linux and iPhone send a few anonymous events: the steps of getting started (such as first open, sign-up, your first project, team or shared project, your first agent, your first invite, and when someone you invited joins and adds their agent), upgrading to a paid plan (Mac and Linux only), and one open a day with the screen you're on and how many days since you signed up. Each install gets a random ID that isn't linked to your account. We never send names, emails, task text or project names, and every value comes from a fixed list. We count these steps, never what you or your agents do in your tasks. You can turn it off in Settings → Privacy → "Share anonymous usage data" on Mac and Linux, or "Share Anonymous Usage Data" on iPhone. The apps set no cookies, and we don't store your IP address or look up your location.
Sign-in cookies. When you sign in with Apple, Google or GitHub through your browser, our server sets a cookie named debo_oauth_apple, debo_oauth_google or debo_oauth_github. It holds a random value, used once, to check that the sign-in finishes in the browser that started it. When you sign in from the Debo app on your computer, a second cookie, debo_oauth_page, tells our server to end on a page with an "Open Debo" button; it holds nothing else. Both are sent only to our sign-in address, are deleted when the sign-in finishes, and expire after 10 minutes in any case. They're used for sign-in only.
Files you choose to attach. The iPhone app asks for photo access only when you attach a photo, and only uploads the photo you pick. Attachments are limited to 25 MB each.
Imports. If you import from Todoist, you enter your own Todoist API token in the app. The app uses it once, on your device, to read your Todoist data and copy it into Debo. The token is sent only to Todoist, never to our servers, and the app forgets it when the import ends. To avoid duplicates if you run the import again, the app keeps a list on your device that matches Todoist IDs to Debo IDs (no content).
We don't collect your contacts, location, or advertising identifiers.
Debo's agents run in one of two places: on your own computer, or in the cloud.
Agents on your computer use AI tools you install and sign in to yourself, such as Claude Code or Codex, with your own accounts and subscriptions at those providers. When one works on a task, Debo sends the task content and your instructions to that provider from your machine. What the provider does with that data is governed by your agreement with that provider, not by this policy. We don't receive your provider credentials, and we don't run these models for you.
If you add an agent that runs in the cloud, it runs on our servers instead of your computer, and we run its AI model for you: Claude, made by Anthropic, PBC, in the United States. On the free plan it uses Claude Haiku. On Premium it uses Claude Sonnet up to a daily allowance, then Haiku until the next day. Both are Anthropic's models, so what follows applies to both.
Each time it works (when someone comments to it or hands it a task), Debo sends Anthropic the instructions Debo gives it and what it reads and does with its tools: the tasks and comments in the projects it's in, including what other people in those projects wrote, and their names; the text of files attached to comments there that it opens (text files and PDFs; it can't open images or other files); and the result of each change it makes. It can also search the web with Anthropic's web search, so its searches go to Anthropic too, under the same terms.
Anthropic handles this for us under its commercial terms. It doesn't train its models on it. It deletes it within 30 days, unless it has to keep it longer to enforce its Usage Policy or to comply with the law: if Anthropic's safety systems flag something as breaking that policy, it may keep it for up to 2 years, and its safety scores for up to 7 years. Anthropic explains how long it keeps data here.
We keep what it remembers about you (its conversation and notes) until you remove it or delete your account. We also keep how much it used each day, as counts and cost with no content, to apply its allowance. We keep these counts until you delete your account, so removing the agent doesn't reset its allowance; after that, its cost stays only in a total that names no one.
We share data only with the service providers we need to run Debo, and only for that purpose:
| Provider | What for | Data |
|---|---|---|
| Cloudflare (US) | Hosting, database, file storage | Everything stored on our servers |
| Apple | Push notifications, Sign in with Apple, App Store | Push tokens; notification content (who acted, the task or project name, and for comments and questions the message text); sign-in details. You can turn off each kind in Debo's Settings, or hide previews in iOS Settings |
| Google, GitHub | Sign-in (if you choose them) | Sign-in details |
| Resend | Sign-in emails (from signin@getdebo.com) and service emails | Your email address and the email we send you |
| PostHog (US) | Anonymous usage counts from getdebo.com and the Mac, Linux and iPhone apps | |
| Anthropic, PBC (US) | Running agents that run in the cloud, if you add one | The tasks and comments in the projects that agent is in, the names of the people in them, the text of the files it opens there, and its instructions |
| AI providers you connect | Running agents on your computer | Whatever you or your agent send them, under your agreement with them |
We may also disclose information if the law requires it, to protect people's safety, or as part of a sale or merger of our business (we'd tell you first).
We don't sell your personal information, we don't share it for advertising, and we don't use your content to train AI models.
If you share a project, the people in it can see its content and your name and email. Comments and activity you add there are visible to them.
We keep your account and workspace while your account is open. When you delete something it may persist in backups or history for up to 30 days. Revoked devices remain in your device list as a record. Server logs: 7 days. A cloud agent's memory: until you remove it or delete your account. What it sends Anthropic: Anthropic deletes it within 30 days, except as described under "Agents that run in the cloud".
You can export your data and delete your account in the app, under Settings → Account on iPhone and on Mac. The export is a file with your workspace data and links to download your attachments.
Before deleting your account, Debo asks you to confirm it's you, by signing in again or with a code we email you. Deleting your account also deletes the agents you own and your data. In projects you shared, your comments stay for the other members, shown as "Deleted user", and a shared project you own passes to the collaborator who joined it first.
If you can't do this in the app, email hello@getdebo.com and we'll do it for you within 30 days.
Connections are encrypted (HTTPS). Sign-in tokens and codes are stored only as hashes. Each workspace is stored separately. Attachments are private. No system is perfect; if we learn of a breach affecting you, we'll tell you as required by law.
Debo is not for children under 13, or under 16 in the EU/UK and other places where that's the age of digital consent. If you believe a child has given us data, contact us and we'll delete it.
Wherever you live, you can ask us to access, correct, delete or export your data, and to stop analytics on you. If you're in the EU/UK you also have the right to object, to restrict processing, and to complain to your data protection authority. Our legal bases: providing the service you asked for (contract), keeping it secure and improving it (legitimate interests), and your consent where we ask for it (e.g. notifications, session recording).
California residents: we don't sell or "share" personal information as the CCPA defines it, and we won't treat you differently for using your rights.
To use any of these rights, email hello@getdebo.com. We'll reply within 30 days.
We're based in the United States and store data there. If you use Debo from elsewhere, your data is transferred to the US.
If we change this policy, we'll update the date above. For significant changes we'll tell you in the app or by email before they take effect.
Habesha Labs LLC, 6255 Shackelford Terrace, Alexandria, VA 22312, USA — hello@getdebo.com — getdebo.com