Privacy Policy
Last updated 8 October 2026
This policy explains what personal data 08 Studio LLC (“08 Studio”, “we”) collects when you use the 08 Studio website and app, why, who receives it, and how you can see or correct it.
Who we are
08 Studio is operated by 08 Studio LLC, Hong Kong. We decide how and why your personal data is used. For anything in this policy, email support@08studio.app.
What we collect
- Account details: your email address, your name, and your password. We store the password only as a hash, never as written.
- Your workspace: the tasks, projects, events, deadlines, notes, categories, rules, activity log and settings you put into 08 Studio.
- Sign-in and security records: for each signed-in device, the IP address and browser details (user agent) it signed in from, and when it was last used. We also keep short-lived records to limit repeated attempts. These hold a one-way hash of an IP address or email address, not the address itself.
- AI requests: what you ask the AI features, the parts of your workspace sent with it, and the preferences 08 learns from it (see “AI features”).
- Subscription details: your plan, its status and renewal date, and the identifiers Stripe uses for you. Card details and billing address go to Stripe directly and never reach our servers.
- Server logs: our hosting provider records requests to our servers, including IP addresses, to run and protect the service.
You must give an email address and password to make an account. Without them we can’t provide the service. Everything else in your workspace is up to you.
We don’t use analytics, advertising, tracking pixels or session recording. We don’t sell your personal data or use it for advertising.
How we use it
- To make and run your account, sign you in, and keep your workspace in sync across your devices.
- To run the AI features when you use them.
- To take payment for your subscription and manage it.
- To send account emails, such as verifying your address and resetting your password.
- To keep the service secure and prevent abuse, such as repeated sign-in attempts.
- To answer you when you contact us.
AI features
When you use an AI feature, such as Ask 08, planning or breaking down a task, we send your request and the relevant parts of your workspace (for example tasks, events and notes) to our AI service provider to generate the response. The provider processes this in China under its own API terms. No person at 08 Studio reviews these requests.
08 also keeps notes on how you like to work, either ones you write or ones it learns from your requests. They are sent with each AI request so 08 can take them into account. You can see, edit, switch off or delete them in Settings, under “What 08 knows about you”. They are deleted with your account.
If you don’t use the AI features, nothing is sent to our AI service provider.
Where it's processed
We are in Hong Kong, and the providers above process data in the United States, Singapore, China and elsewhere. Your data may be processed in places whose data protection laws differ from those where you live.
How long we keep it
- Your account and workspace: until you delete them. Deleting your account deletes your account, workspace, AI notes, subscription record and sign-in records from our database.
- Sign-in and security records: for as long as your account exists. Records that limit repeated attempts last only for their short time window.
- On your device: until you sign out, clear your browser data, or delete your account.
- Held by providers: Stripe keeps payment records, Google keeps copies of the emails we sent you, and Vercel keeps server logs, each under its own retention terms.
Security
We take practical steps to protect your data. Passwords are stored only as hashes, and sign-in tokens only as one-way digests. Card details go to Stripe and never reach our servers. No system is completely secure, so we can’t promise that your data will never be accessed without permission.
Seeing and correcting your data
You can ask for a copy of the personal data we hold about you, and ask us to correct it. You can change your name and email address in Settings, and delete your account there at any time. To make a request, email support@08studio.app from the address on your account. We will reply within 40 days, as Hong Kong’s Personal Data (Privacy) Ordinance requires.
If you are in the EU or the UK
The GDPR and the UK GDPR give you these rights in addition to those above.
Why we can use your data
- To perform our contract with you: running your account and workspace, the AI features you use, your subscription and account emails.
- Our legitimate interests: keeping the service secure and preventing abuse, through sign-in records, limits on repeated attempts and server logs.
- Legal obligations: keeping payment records where the law requires it.
Your rights
You can ask us to give you access to your data, correct it, delete it, restrict how we use it, or send it to you in a portable format. You can also object to our use of it based on legitimate interests. Email support@08studio.app. You can also complain to your local data protection authority, or in the UK to the Information Commissioner’s Office.
International transfers
Using 08 Studio means your data is transferred outside the EU and UK, to Hong Kong and to the countries listed under “Who we share it with”. Some of these countries, including China, where the AI features are processed, are not recognised by the EU or the UK as giving equivalent protection. Email support@08studio.app to ask about a particular transfer.
Children
08 Studio is not for anyone under 16. We don’t knowingly collect personal data from anyone under 16. If you think we have, email support@08studio.app and we will delete it.
Changes to this policy
If we change this policy, we will update the date at the top of the page. If a change is significant, we will tell you by email or in the app before it takes effect.
Contact
08 Studio LLC, Hong Kong. Email support@08studio.app.