Privacy Policy

Who runs Saung

Saung is operated by Dzul (designbydzul@gmail.com). It is a small, independently run service. Contact that address for any privacy question or request in this policy.

What Saung stores

• Account: your name, email address, password hash, and sign-in records. If you sign in with Google, Saung stores your Google account identifier, email, name, and profile image URL — never your Google password.
• Workspace: projects, tasks, tags, board sections, goals, clients, time entries, notes, sticky notes, comments, and the context documents you keep on a project or a team.
• Billing records you enter yourself: invoices, line items, milestones, and your business profile. These describe your own clients; the money they owe you is not paid through Saung.
• Payment records, if you buy seats for a team: the order number, which team it was for, how many seats and for how long, the amount charged in rupiah (and, if you were shown dollars, that amount and the exchange rate used), the status, the kind of payment method (for example QRIS or card), Midtrans’s transaction reference, the dates, and the address of the payment page while an order is unpaid. Saung never receives your card number or bank details.
• Files you upload into notes — images and PDFs — stored in Cloudflare R2 and served only through Saung: to you, to people who can open the note that holds them, and to readers of a note or project you have published to the web.
• Preferences that sync across your devices: timer mode and sounds, working hours, widget layout, sidebar width, pinned projects, and theme.
• Sharing records: the projects you share and who you share them with, the teams you create or join, invitations you send (including the recipient’s email address), and the public share links you switch on.
• Integration credentials: hashed MCP access tokens, OAuth client authorizations, and — if you connect it — an encrypted Google Calendar token.
• Operational records: sessions, email verification tokens, and a suppression list of addresses that unsubscribed from announcements.

What stays on your device

Some state is never uploaded: per-day task ordering, board section collapse state, dismissed suggestions, and custom timer sound files above the sync size limit. Clearing your browser storage clears these.

How your data is used

To authenticate you, render your workspace, sync it between your devices, calculate your tracked time and capacity, and run the integrations you explicitly connect.

Saung does not sell your data, does not use it for advertising, and does not use your workspace content to train AI or machine-learning models.

Who can see your content

Your workspace is private to your account. Other people can see something only when you explicitly share it: a project or a single note you invite them to, a project you add to a team, or a public share link you switch on. Each of those can be revoked at any time, and revoking it removes the access.

No one reads your workspace content in the normal course of operating Saung. Your data is encrypted at rest on Cloudflare’s infrastructure, but Saung is not end-to-end encrypted — the same model as most work tools — so operator access to the database exists in order to run, debug, and back up the service. That access is not used to browse your content. The only time a human looks inside your workspace is when you ask for help with a problem in your account, and then only as far as needed to resolve it.

Google Calendar

Connecting Google Calendar is optional and off by default. If you connect it, Saung requests read-only access (calendar.readonly) and uses it for one purpose: to show your own events for the day you are viewing, next to your tasks.

Saung reads events from your primary calendar for the day in view: the title, start and end time, colour, location, description, video-call link, and a count of how many guests are invited. Guest names and email addresses are never requested or received. It never creates, changes, or deletes anything in your calendar. Event details are fetched fresh each time, displayed to you in the app, and are not stored in Saung’s database. Saung stores your Google authorization token, encrypted, so the connection keeps working — nothing else from Google is retained. No human reads your calendar data.

You can disconnect Google Calendar at any time from Settings › Connector. Disconnecting deletes the stored token immediately.

Saung’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

AI assistants and MCP

Saung can expose your workspace to an AI client you connect yourself — for example Claude, ChatGPT, or a command-line agent — through the Model Context Protocol. This only happens when you sign in to Saung from that client, and only that client can then read and write your workspace.

These connections are human-driven: nothing runs on a schedule and no assistant reaches your data unless you invoke it. Anything you send to an AI client is then handled under that provider’s own privacy policy, not this one. You can disconnect a client at any time from Settings › Connector.

Payments

Saung is free to use. A team owner can buy seats beyond the free ones, and that purchase is the only payment Saung takes. Midtrans, an Indonesian payment gateway, takes it on its own payment page: you enter your card or bank details there, not in Saung.

To start a payment Saung sends Midtrans your name and email address, the amount, and a one-line description of the order. Midtrans tells Saung whether the payment went through, and Saung checks that notification before it counts. Midtrans handles your payment details under its own terms and privacy policy.

Who else processes your data

• Cloudflare — hosting, application database, file storage, and email delivery. All Saung data is stored on Cloudflare infrastructure.
• PostHog — product analytics, as described below.
• Google — only if you use Google sign-in or connect Google Calendar.
• Midtrans — only if you buy seats for a team, as described under Payments.
• AI providers — only for assistants you connect yourself, as described above.
• When you paste a link into a note, Saung fetches that page once to build a preview card. That request reveals your server’s access to the linked site, in the same way opening the link would.

Product analytics

Saung uses PostHog to understand how the product is used: which pages are opened, which controls are clicked, and where people get stuck. Analytics requests are proxied through saung.app rather than sent to PostHog directly.

Your content is not part of this. Before any event leaves the app, the text of whatever you clicked is removed, and addresses are reduced to a route shape with every query string dropped — so task titles, note bodies, client names, share links, and one-time sign-in codes are not collected. Session recording is switched off, so no replay of your screen is captured.

When the app hits an error, the error message, the stack trace, and the page it happened on are reported to PostHog so the bug can be found and fixed. These reports describe the code that failed, not the content you were working on.

Once you sign in, events are associated with your account identifier so usage can be counted per person rather than per browser. Your email address and name are not sent to PostHog.

Email

Saung sends transactional email: a welcome message when you sign up, and a link when you ask to reset your password. These are part of the service, so there is nothing to unsubscribe from while your account is open.

When you invite someone to a project, a team, or a single item, Saung emails the address you type in and names you as the sender. You choose those addresses, and the invitation says what the person will be able to see.

Saung also sends occasional product announcements to the address on your account. Every announcement carries an unsubscribe link. Unsubscribing adds your address to a suppression list that stops announcements. It does not affect transactional email, so you still receive a password reset when you ask for one.

Feedback you send from inside the app is emailed to Saung support along with your name and email address, so a reply can reach you.

How long data is kept

Workspace data is kept until you delete it or delete your account. Sessions and verification tokens expire on their own. Deleting your account removes the account and the workspace data it owns, including the files you uploaded; this is destructive and cannot be undone.

Payment records are financial records, so deleting your account does not delete them. They stay, with you and the team detached from them: what remains is an order number, an amount, a status, and dates, with nothing in it that points to you or to a team. Midtrans keeps its own record of the payment under its own policy.

Work you shared is handed over rather than deleted: a project you shared with other people stays with them under a new owner, and tasks you made on someone else’s board stay on that board. A file that such a note or document still refers to stays with it; everything else you uploaded is deleted.

Your controls

• Export your data, payment records included, from Settings › Account.
• Delete your account and its workspace data from Settings › Account.
• Disconnect connected AI clients from Settings › Connector. To revoke an access token issued before clients signed in through Saung, email designbydzul@gmail.com.
• Disconnect Google Calendar from Settings › Connector.
• Ask for a copy of, correction of, or deletion of your data by emailing designbydzul@gmail.com.

Security

Every workspace request is authenticated and scoped to your account. Passwords are hashed, MCP tokens are stored as hashes rather than readable values, and Google Calendar tokens are encrypted at rest. Uploaded files are served only through an authenticated route, not from a public bucket URL.

No online service is risk-free. Use a strong, unique password and revoke integration credentials you no longer need.

Children

Saung is not intended for children under 13, and accounts should not be created for them.

Changes to this policy

If this policy changes in a way that affects how your data is handled, the date at the top of this page changes and, for significant changes, Saung will tell you by email.

Contact

For privacy questions, data requests, or anything in this policy, contact designbydzul@gmail.com.