Privacy Policy

Last updated: September 29, 2026

Otha ("we", "our") is a task-planning app for iOS that connects to a Notion database you choose. This policy describes what happens to your data when you use Otha, written to match exactly what the app and its server do — not a generic template.

What Otha accesses in your Notion workspace

When you connect Notion, you authorize Otha through Notion's own OAuth consent screen. Notion lets you choose exactly which pages and databases to share during that consent step — Otha never gets workspace-wide access beyond what you explicitly grant. Otha then reads and writes only the database(s) you selected, to show you your tasks and to save the changes you make in the app (creating a task, completing it, editing its title, dates, or notes). We don't request access to your Notion user profile or workspace member list beyond the minimum Notion returns during authorization (your workspace name and, if the grant is user-owned, basic owner info like name and email, used only to identify which workspace is connected).

Where your Notion access token is stored

Connecting Notion is a two-step handoff. First, our server exchanges Notion's one-time authorization code for an access token — this happens directly between our server and Notion over TLS; the code and token never pass through any other party. That token is briefly held server-side, encrypted at rest with AES-256-GCM authenticated encryption, for a maximum of five minutes while your device retrieves it. Once your device has retrieved it, the server-side copy is deleted.

After that handoff, your Notion access token lives only on your device, in Apple's iOS Keychain via Secure Enclave–backed secure storage (accessible only while your device is unlocked, and only to Otha). Our server does not keep a long-term copy of your Notion token. Every request your device makes to Notion — reading tasks, creating one, marking one complete — goes directly from your device to Notion's API using the token stored on your device.

What our server stores

Our server (hosted on infrastructure we control) stores only:

• A short-lived OAuth handoff record (the encrypted token exchange described above), automatically deleted within minutes and never longer than its five-minute expiry.
• A short-lived, single-use authorization state value used to prevent cross-site request forgery during the connect flow, expiring within ten minutes.
• Basic account and session records needed to recognize your device across app launches, including a random account identifier and the Notion workspace owner's name and email, if Notion provides them.

Your task titles, notes, dates, tags, and any other content you enter live in your own Notion database and, for offline use, in an on-device database on your phone. We do not copy, mirror, or retain your task content on our server.

What we don't do

• We don't sell your data.
• We don't share your data with advertisers or data brokers.
• We don't track you across other companies' apps or websites.

Service providers

Otha uses two third-party services. Neither receives your Notion data or task content.

• PostHog (product analytics). The app identifies you using a random app installation identifier and sets onboarding properties: what you want help with, where your tasks live, who the app is for, how you heard about Otha (when answered), and when onboarding was completed. We use these properties for product analytics. The app does not send your name, email, or Notion task content to PostHog.
• Superwall (paywalls and subscriptions). Superwall displays paywalls and provides the app with purchase and subscription status to determine whether Pro is unlocked. The app identifies the installation to Superwall using a random app installation identifier. Payments are processed by Apple; we never receive your card details.

We don't use crash-reporting services.

Disconnecting and deleting your data

You can disconnect a Notion workspace at any time from Settings inside Otha. Disconnecting immediately and permanently removes the Notion access token from your device's secure storage and removes the local record of that connection. Otha will no longer be able to read or write that Notion database.

Because your task data lives in your own Notion workspace, deleting it there — or removing Otha's integration from Notion's own integration settings — fully revokes Otha's access independent of anything in the app. Deleting the app from your device removes the on-device database and any locally stored credentials.

To request deletion of any account or session record kept on our server, or if you have any question about your data, open Settings › Contact support in the Otha app. We will confirm deletion within a reasonable time.

Children's privacy

Otha is not directed at children under 13, and we do not knowingly collect data from them.

Changes to this policy

If this policy changes in a way that affects what data we access or how we handle it, we'll update the date above and, for material changes, note it in the app.

Contact

Questions about this policy or your data: open Settings › Contact support in the Otha app. If you cannot reach the app — for example you have already deleted it — reach us through the contact route listed on our support page.