humane.tools

Privacy policy

Last updated: 2026-10-09

This policy covers the website humane.tools and the apps Humane Todos (todos.humane.tools) and Humane Mail (mail.humane.tools). We show no ads, use no analytics or tracking services, and sell no data.

1. Controller

Beat Hagenlocher
1911 Golden Gate Avenue, San Francisco, CA 94115, USA
Email: bah@posteo.de

2. Hosting and server logs

The apps run on servers of Hetzner Online GmbH in Germany. Encrypted backups are also stored at Hetzner (Storage Box, Germany). Hetzner processes the data on our behalf (Art. 28 GDPR).

For every request to the apps, the web server writes an access log entry: IP address, time, requested address, browser identifier (user agent) and status code. Some addresses contain an email address or a user ID, for example during automatic mail account setup. These logs are deleted after at most 90 days. Application logs (for example error messages with an account or user ID, without mail content) are deleted after 30 days. The legal basis is our legitimate interest in secure, stable operation and in debugging (Art. 6(1)(f) GDPR).

The website humane.tools is served by Cloudflare Workers (Cloudflare, Inc., USA). It sets no cookies and loads no scripts. Cloudflare processes the connection data needed to deliver it, such as your IP address (Art. 6(1)(f) GDPR).

3. Humane Todos

Without an account, the app keeps your todos in your browser only. No content is sent to us.

With an account, we store your email address, your password (as a hash only), session data (session token, expiry, browser identifier) and your todos with their tags and notes, so they sync between your devices. The content is stored unencrypted on the server; the operator could technically access it and does so only at your request or when needed to fix a fault. Deleted todos are marked as deleted, but their content stays in the sync history until your account is deleted. The legal basis is performance of our agreement with you (Art. 6(1)(b) GDPR).

Verification and password-reset emails are sent through Resend (Resend, Inc., USA). Resend receives your email address and the content of that email (Art. 6(1)(b) GDPR).

Paid subscriptions are handled by Creem (creem.io) as merchant of record. We pass on your email address and user ID; only Creem collects payment details, under its own privacy policy. We store the subscription status, period, and Creem's customer and subscription IDs (Art. 6(1)(b) GDPR).

Sharing: when you share a list by link, anyone who opens the link sees your account name. Currently, that is your email address.

AI agents: when you connect an agent (for example Claude Code) with a token, that agent can read and change your todos. What the agent and its provider do with the data is governed by your agreement with that provider. You can revoke tokens at any time.

4. Humane Mail

Sign-in: Humane Mail uses your Humane Todos account. Your sign-in details are forwarded to todos.humane.tools for checking.

Mail accounts: when you connect a mail account, we store server, port, user name, email address and password or app password. For Google accounts, we store a refresh token from Google instead; it lets the server get short-lived access to your mailbox without your password. Passwords and tokens are encrypted with AES-256. The server must be able to decrypt them to fetch and send your mail in the background.

Mail content: the server fetches your mail over IMAP and stores a copy: headers, bodies, recipients, a search index, drafts, outgoing mail with attachments, and an address book built from the senders and recipients of your mail. This content is stored unencrypted on the server. Your browser keeps an offline copy. The legal basis is performance of our agreement with you (Art. 6(1)(b) GDPR). For the people you correspond with, we rely on our and your legitimate interest in providing you with a mail client (Art. 6(1)(f) GDPR).

What the server does with your mailbox: it reads mail to show, sync and search it, sends mail you write and files it in Sent, saves your drafts, and moves, flags, tags or deletes mail when you do so in the app. When you create a todo from a mail, it moves the mail to Action; when you complete that todo, it archives the mail. It changes your mailbox only as a result of what you do.

Who reads your mail: in general, we do not read your mail. A person accesses mail content only with your explicit consent for specific messages, to investigate abuse or a security incident, or when the law requires it.

Automatic setup: to find your provider's server settings, the server queries your mail provider's configuration service (with your email address), the Mozilla Thunderbird database (with the domain only) and DNS.

Google accounts: when you connect a Google account, we redirect you to Google (Google LLC, USA). After you consent, Google gives us a token to access your mailbox. Humane Mail's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use data from your Google account only for the features described here, never for advertising, and never to develop, improve or train AI or machine-learning models.

You can end Humane Mail's access at any time in your Google account settings. Removing the account in Humane Mail also revokes its access at Google.

Remote images in HTML mail are loaded automatically by the server through a cache, not by your browser. The sender therefore doesn't see your IP address, but can tell when the mail was opened. We remove invisible tracking pixels. Images stay in the cache for up to 7 days.

Sender logos: for sender domains whose mail passes DMARC, the server fetches a BIMI logo via DNS. To check DKIM signatures, it queries DNS.

Push notifications (only if you turn them on): sender, subject and a short preview are delivered, encrypted, through your browser's push service (Google, Mozilla or Apple). The push service cannot read the content (Art. 6(1)(a) GDPR; you can turn notifications off at any time).

Todos from mail: when you create a todo from a mail, Humane Mail sends the todo text (by default the subject), tags and a link to the mail to Humane Todos. If you have connected an AI agent to Humane Todos, that agent can read these todos like any other. Mail itself is never sent to an AI agent or an AI provider.

5. Cookies and browser storage

We set only a session cookie that keeps you signed in. It applies to all apps under humane.tools. The apps also keep your data, settings and an offline copy in your browser's local storage (IndexedDB, localStorage, service worker). All of this is strictly necessary for the service you ask for and needs no consent (§ 25(2) no. 2 TDDDG). Signing out of Humane Mail deletes its offline copy. We use no tracking cookies. Because we don't track you across websites, “Do Not Track” signals change nothing.

6. Recipients

7. Transfers outside the EU

The controller is based in the USA and accesses the servers from there. Resend, Cloudflare and Google are also based in the USA. Transfers rely on the EU-U.S. Data Privacy Framework where available, otherwise on the European Commission's Standard Contractual Clauses (Art. 45, 46 GDPR), and, for performing our agreement with you, on Art. 49(1)(b) GDPR.

8. Retention

The app has no button to delete a Todos account yet. Email us and we will delete your account and all associated data.

9. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability (Humane Todos offers an export for this) and to object to processing based on legitimate interests (Art. 15–21 GDPR). You can withdraw consent at any time. Write to bah@posteo.de. You can also complain to a data protection supervisory authority, in particular in the EU country where you live.

10. Changes

When the apps change, we update this policy. The date at the top shows the current version. For material changes, we inform signed-in users in the app or by email.