Trust
Tellr24 is built so that planning never needs your task text, and so that each board decides how much, if anything, reaches an AI.
This page describes how the product is designed. It is a draft for the beta and will be finalised, with a signed data processing agreement and an EU data region option, before the Business plan launches.
Planning runs without your task text
Free time, the reactive budget, replanning and task scoring are plain rules that run on metadata only: estimate, due date, importance, board, state and how often a task has been postponed. Task text is needed only to turn a capture into tasks, to write one-line reasons and to draft nudges. If the AI is unavailable, you still get a plan.
Choose what reaches an AI, per board
| Mode | What reaches the AI | Suggested for |
|---|---|---|
| Full AI | Task text, for parsing, one-line reasons and nudges. | Personal and side-project boards |
| Redacted | Task text with names, companies, emails, numbers and codes replaced in your browser before it is sent. | Work, when your employer allows AI |
| Private | Nothing. Plans use metadata only. | Work, when your employer restricts AI |
Answering that your employer restricts AI tools during setup puts your Work board in Private mode automatically.
How AI requests are handled
- Every request is made from our servers, never from your browser, so no AI key is ever in the app.
- Requests go through OpenRouter, pinned to Anthropic, with zero data retention enforced and data collection denied on every request.
- Prompts and replies are not logged. We keep only metadata such as the model, token counts and response time.
- Your tasks and plans are not used to train anyone's models.
- You approve every change. Nothing is moved, sent or deleted by the AI without a tap, and nudges are drafts you copy or share yourself.
Calendar access is minimal
We read only busy times from Google Calendar, Microsoft 365 or a private calendar link. Event titles and attendees are never stored. Access is read-only. If your IT team blocks third-party calendar apps, use the calendar link from Outlook or add meeting blocks by hand.
Subprocessors
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase | Database, sign-in and scheduled jobs | Account, boards, tasks and logs |
| OpenRouter | Routes AI requests to Anthropic | Only what a request needs, never stored (see below) |
| Anthropic | Language models for parsing, reasons, nudges and reports | Only what a request needs; not used for training |
| Stripe | Payments and tax | Billing details; we never see card numbers |
| Resend | Morning plan and account email | Email address and message content |
| PostHog | Product analytics | Events only, with task text removed |
| Sentry | Error reporting | Errors only, with task text removed |
| Vercel | Hosting the web app | Web requests |
Your data, your control
- Export everything, or delete your account and all data, from Settings.
- Access is enforced in the database so each person can read and write only their own rows.
- Calendar tokens are kept in a secrets vault, never in the app or in plain columns.
How to approve Tellr24 (for IT)
- Allow tellr24.com. It is the only domain the app needs, because AI calls run on our servers.
- Decide whether staff may connect a calendar. If Microsoft 365 requires admin consent for third-party apps, staff can use a read-only calendar link instead.
- Ask staff to set work boards to Private if company policy restricts AI tools. Planning still works.
- For a signed agreement or an EU data region, contact us about the Business plan.