Privacy Policy

What we collect

When you create an account we store your email address, and your first and last name if you fill them in, so other people in a shared space can see who did what. You can pick an avatar from a set we provide; you cannot upload an image, so we never see your photos.

When you place an order we store your order details, the shipping address, and a phone number you give at checkout. The phone number is used only as a delivery contact for the carrier. We do not use it for marketing and we do not send you text messages. We never see or store your full payment card details; those go directly to our payment processor.

If you contact us, we keep the message and the email address you sent it from.

The app and your sign

The app stores the tasks you write: their titles, any description, due dates, and who a task is assigned to. That is the product. Your sign receives one thing, a color, worked out on our servers from those due dates. The sign has no microphone, no camera, and no sensors.

Constian does not use your location. There is no location permission, no map, and no address in the app at all. The only address we ever hold is the one you type at checkout if you buy a sign.

You can use your own tasks without an account. That creates an account with no email and no name attached, which means we cannot recover it and cannot identify you from it. If you later sign in, your tasks come with you.

Bluetooth and Wi-Fi setup

Pairing a sign uses Bluetooth to hand it your Wi-Fi name and password, directly from your phone to the sign. Android requires location permission to scan for Bluetooth devices; that is the operating system’s rule, not ours, and we neither read nor store your location when you grant it. Your Wi-Fi password is stored on the sign in encrypted storage and is never sent to us.

Crash reports and diagnostics

When the app crashes we receive the error and the code path that caused it, so we can fix it. Crash reports are kept for 90 days. They are not used to track you, here or anywhere else. Your sign also reports its firmware version and checks in periodically so the app can show whether it is online.

Sensitive data

We do not collect your date of birth, age, location, contacts, photos, microphone, camera, health data, biometrics, or advertising identifiers. The app does not track you across other apps or websites, and will never ask for permission to.

How we use it

Only to run the product: to show you your tasks and let the people you share with see theirs, to tell you when something needs you, to tell a paired sign which color to show, to keep you signed in, to fulfill and support an order, and to fix crashes. On this website we also measure how people find and use the site, and how our ads on Meta’s apps perform. Nothing from your account, your tasks, your sign or your orders is used for advertising, and we do not make automated decisions about you.

Who processes it

A small number of providers, each seeing only what its job needs: Amazon Web Services hosts the accounts, tasks and the connection to your sign; Google Firebase Cloud Messaging and Apple Push Notification service deliver notifications; Sentry receives crash reports; Google Sign-In confirms your email address if you choose that way in; Stripe processes payments; and EasyPost buys shipping labels and tracks parcels. On this website only, PostHog provides analytics and Meta measures our advertising, as described below. We do not sell your personal information for money.

Where your data is processed

In the United States. Our servers run in AWS US East (Ohio), and Constian is offered in the United States only.

How we protect it

Everything between the app and our servers travels over TLS. Your password is handled by Amazon Cognito and is never stored by us in a form we could read. The sign holds its credentials in encrypted storage, on hardware with secure boot and flash encryption permanently enabled. Access to production data is limited and logged. No system is perfect, and we will not pretend otherwise: if a breach ever affects your data, we will tell you.

Analytics on this website

We use PostHog to see which pages are visited, what is clicked, where visitors came from (including campaign tags in the link), and the type of browser and device. PostHog receives your IP address to work out an approximate location. It keeps an anonymous id in your browser’s local storage, not in a cookie, and it never records your screen. If you open the site from a link in the app, the visit is tied to your account’s internal id, never your email. PostHog works for us and does not use this data for its own purposes or for advertising.

Advertising on this website

We use the Meta Pixel, a script from Meta Platforms, to measure how our ads on Facebook and Instagram perform and to show ads to people who have visited this site. It runs only on our public pages, never on sign-in, account, cart, checkout, order or invite pages. When it runs, your browser sends Meta the address of the page, the page you came from, your IP address, and information about your browser and device, along with Meta’s cookies. If you are logged in to Facebook or Instagram, Meta can connect the visit to your account there.

We do not send Meta your name, email, phone number, address, orders or tasks, and we have switched off Meta’s features that would collect clicks or form fields on their own. What Meta does with the data it receives is covered by Meta’s privacy policy.

Cookies & local storage

This site uses local storage to keep you signed in, to remember what is in your cart, to hold PostHog’s anonymous id, and to remember your ad tracking choice. The Meta Pixel sets two cookies on constian.com: _fbp, which recognizes your browser on return visits for up to 90 days, and _fbc, only when you arrive by clicking one of our ads. Neither is set if ad tracking is off.

How long we keep it

Your account and tasks stay until you delete your account. Tasks you created in a shared space stay with that space when you leave, so the people still there are not left with holes in their history. Order records are kept as long as tax and accounting law requires. Push notification tokens go when you sign out or uninstall. Crash reports are kept for 90 days.

Your rights

You can see and change your details in the app, turn notifications off per category or at the operating system level, leave a shared space at any time, and delete your account yourself, immediately, without asking us.

Depending on your state, you may have further rights, such as to access, correct, or delete your data, or to receive a copy of it, and to opt out of the sale or sharing of personal information and of targeted advertising. Under California law, the Meta Pixel described above counts as sharing for advertising, and other states may treat it as targeted advertising or a sale. You can opt out of it under Your privacy choices or with Global Privacy Control. We do not use sensitive information for advertising. Email us to exercise any of these rights and we will respond within the time the law allows. We will not treat you differently for using them.

Changes to this policy

We may update this policy from time to time. When we do, we will post the new version here and update the effective date above. If the changes are significant, we will make a reasonable effort to let you know.

Children

Constian is for people aged 13 and over. Neither the store nor the app is directed to children, and we do not knowingly collect data from anyone under 13. If you believe a child under 13 has created an account, write to us and we will delete it.

Contact

Questions about this policy or your data? Email support@constian.com.