Privacy Policy

Last updated: 13 July 2026

3ish is a calm daily to-do app. This policy explains what personal information we collect when you use it, why, and the choices and rights you have. We’ve kept it short and in plain English on purpose.

1. Who is responsible for your data

3ish is operated by Trinidad Business Consultancy Services, a sole proprietorship owned by Nikko Ronquillo Trinidad, registered with the Department of Trade and Industry (DTI) under Business Name Registration No. 5474758, based in Noveleta, Cavite, Philippines. For privacy purposes, this business is the “personal information controller” under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173).

Data Protection Officer: Nikko Ronquillo Trinidad
Contact for any privacy question or request: hello@3ish.app

If you are in the European Union, the EU General Data Protection Regulation (GDPR) also applies to you, in addition to Philippine law.

2. What we collect

Information you give us by using 3ish:

• Your email address: to create your account and sign you in.
• If you sign in with Google: your name, email address, and profile picture, as provided by Google. We do not receive your Google password.
• Your tasks: the text you write, along with their dates, whether they’re done, their Top-3/priority status, and their order. This is your content; we store it only to provide the service.
• If you subscribe to a paid plan: limited billing information from our payment processor, such as your subscription status, plan type, billing name and email, country (for tax), and partial card details (for example, the last four digits). We never receive or store your full card number; the payment processor handles that.

Information collected automatically (kept to a minimum):

• To deliver the app and keep it secure, our hosting and database providers process standard technical information such as your IP address in their server logs. We do not use this to track or profile you.
• If the app encounters a technical error, an error-monitoring service (Sentry) receives the technical details of that error so we can fix it. It is configured not to receive your IP address, your identity, or your task content.

If you send feedback. When you choose to use our optional feedback form, it is powered by Tally (our form provider), which processes whatever you decide to submit, such as your message and any contact detail you include. Using it is entirely optional.

We do not collect: passwords (sign-in is passwordless), your full card number (the payment processor handles card details), location data, contacts, or any “sensitive personal information” as defined by the Data Privacy Act.

We do not use advertising or analytics cookies. The app uses your browser’s local storage to function and to remember your settings, not to track you.

Analytics on our website. Our public marketing website (3ish.app) uses a privacy-friendly, cookieless analytics tool (PostHog, EU region) to understand visits in aggregate: for example, how many people view a page and where they came from. It sets no cookies, does not identify you, and collects no personal data. The 3ish app itself uses no analytics at all.

3. How we use your information

We use it only to:

• create your account and sign you in (passwordless email link or Google);
• store your tasks and sync them across your devices;
• keep the service secure and prevent abuse;
• diagnose and fix technical errors;
• respond to you when you contact us.

Under the GDPR (for EU users), our legal bases are: performance of our agreement with you (running the app), our legitimate interests (keeping it secure and working), and your consent where it applies.

4. What we do NOT do

To be completely clear:

• No advertising.
• No behavioural tracking, profiling, or cross-site tracking of you. (Our public website uses only cookieless, anonymous visit counts; see section 2.)
• No selling, renting, or sharing your information for anyone else’s marketing.
• No using your tasks or content to train artificial intelligence.
• No profiling or automated decisions that affect you.

5. Who else processes your data (our sub-processors)

We use a small number of trusted service providers to run 3ish. They process data only on our instructions and only to provide their service:

We do not add new categories of providers without updating this policy.

6. Where your data is processed

3ish is operated from the Philippines, but the providers above may store and process your data on servers outside the Philippines (for example, in the United States or the European Union). Where data leaves the Philippines, we rely on these providers’ own safeguards and contractual commitments to protect it, consistent with the Data Privacy Act.

7. How we protect your data

• All data is encrypted in transit and at rest.
• Account isolation: our database enforces a rule (row-level security) so that you (and only you) can read or change your own tasks. One account can never see another’s data.
• No passwords to leak: sign-in is passwordless (a one-time email link or Google), so there’s no password for us to store or for anyone to steal.

No system is perfectly secure, but we take reasonable and appropriate measures as required by the Data Privacy Act.

8. How long we keep your data

We keep your account and tasks for as long as your account is active. If you delete your account, or ask us to delete your data, we remove it from our systems. Tasks you delete in the app are removed during normal syncing.

9. Your rights under the Data Privacy Act

Under Republic Act No. 10173, you have the right to:

1. Be informed: to know what data we hold and how we use it (this policy).
2. Access: to get a copy of the personal data we hold about you.
3. Object: to object to processing, or to withdraw any consent you’ve given.
4. Rectification: to correct any inaccurate or outdated data.
5. Erasure or blocking: to have your data removed or blocked.
6. Data portability: to obtain your data in an electronic, portable format. (3ish also lets you export a backup of your tasks at any time from within the app.)
7. File a complaint: to lodge a complaint with the National Privacy Commission (see below).
8. Damages: to be indemnified for damage caused by a violation of your rights, as provided by law.

To exercise any of these, just email hello@3ish.app. You can also correct your tasks directly in the app, export a backup, or delete your account at any time.

10. Complaints

If you believe your privacy rights have been violated, you may file a complaint with the National Privacy Commission (NPC):

• Website: privacy.gov.ph
• Generally, within one (1) year from when you discovered the issue.

We’d appreciate the chance to put things right first. Please reach us at hello@3ish.app.

11. Children

3ish is intended for users 18 years of age and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us data, contact hello@3ish.app and we’ll delete it.

12. Changes to this policy

If we change this policy, we’ll update the “Last updated” date above and post the new version here. For significant changes, we’ll make a reasonable effort to let you know.

13. Contact us

Questions, requests, or concerns about your privacy:
Nikko Ronquillo Trinidad, Data Protection Officer
hello@3ish.app