How we process, protect and store your data.
Achiever is provided by Forss Management Consulting AB (Formacon), which is the controller for the processing described here.
Account data such as name, email address, authentication data and plan information, and the content you store in the service yourself: tasks, projects, checklists, notes, daily plans, documents you upload and notification settings. Your account also stores the language you have chosen, so that notifications, push messages and emails reach you in that language. If you have connected a calendar or another service (see below), what is synced from it is stored as well.
To deliver the service, protect accounts, sync data between your devices, send transactional messages and improve the product's stability, security and usability.
Achiever's AI features use OpenAI as a subprocessor. It receives the text the feature needs — for example a task's title and notes, a project description or the text you asked for suggestions on. We never sell your information.
For each call we log your user ID, which feature and model was used, the amount consumed and an estimated cost. This is cost tracking — the content of the call is never stored in that log.
Smart search. So that search finds what you mean, not just exact words, the text in your tasks, projects, notes and uploaded documents is sent to OpenAI and turned into a search index (a so-called embedding) that is stored with us. The index is deleted when you delete the content or your account.
Sensitive notes. A note you have marked as sensitive — for example containing an account number or a code — is never sent to OpenAI or any other AI: no search index is created (an existing one is deleted when you set the mark), no AI suggestions are made, and the content is not shared with AI assistants connected to your account or with webhooks you have registered. Normal search in the app works as usual.
Avoid sending sensitive personal data to the AI features unless you explicitly need to for your use case.
Wherever you can write longer text you can dictate instead. The microphone is never turned on by itself — it starts only when you press the dictation button, and the browser asks for permission the first time. Recording stops automatically after five minutes and can always be cancelled.
The audio is sent to our server and on to OpenAI to be turned into text. No audio file is stored — neither with us nor in the database. Only the text you get back remains, in the field you dictated into, and it is then treated like any other text you have written.
Keep in mind that a recording may capture more than you intended, such as other people talking in the room.
Push notifications are off until you turn them on. Reminders and other notifications then reach you even when the app is closed. Each notification is sent encrypted through your browser's push service (Google for Chrome and Android, Apple for Safari and iPhone, Mozilla for Firefox, Microsoft for Edge). We store the device's push address and keys while notifications are on. You turn them off in the app or in your browser settings, and a device that stops responding is removed automatically.
Achiever can be connected to other services. None of this happens until you connect the service yourself, and you can remove the connection at any time.
Access tokens for connected services are stored encrypted.
The leaderboard shows the ten people with the most XP from daily boosters and is shared by all Achiever users, including those in other organisations. It shows your first name and the first letter of your last name, your level and your XP, never your email address. You appear only after completing a booster.
Verification and notification emails are sent through Microsoft 365 from achiever.se. Your email address is only used for the account and the mailings you have turned on yourself.
Necessary cookies are used for sign-in (access and refresh tokens) and protection against forged requests. The browser's local storage keeps settings such as theme, language and views, and changes waiting to be sent while you are offline.
Visitor statistics are collected with a self-hosted Umami instance, and only if you said yes when the app asked about usage statistics. Umami sets no cookies and stores no information that can identify you as a person. You can change your choice at any time under Account → Privacy; if you say no or change your mind, collection stops immediately.
If you use the weather widget and share your location, the browser sends the coordinates to Open-Meteo (forecast) and BigDataCloud (place name). If you search for a place instead, the place name is sent to Open-Meteo. The location is only stored in your browser. The sign-in and registration page loads a background image from Unsplash, which then sees your IP address.
When something goes wrong in the app, a technical error report is sent to Sentry (Functional Software, Inc.), a subprocessor for error monitoring. The purpose is to find and fix bugs. The report contains the error message, where in the code it occurred, browser, app version and the actions that led to the error — but never what you have written in the app: content of tasks and notes, search terms and form data are removed before the report is sent, and we do not include your email address or name. Reports are stored within the EU (Germany) and deleted automatically after at most 90 days.
The app's fonts are served from our own servers. No requests go to Google Fonts or other font services, so your IP address is not disclosed to display text.
The service runs on our own server infrastructure in Sweden, with encrypted transport, access controls and restrictions on sensitive endpoints. Data is kept while your account is active or as long as required to meet legal obligations.
Backups are taken automatically and kept on a rolling schedule: daily for 7 days, weekly for 4 weeks and monthly for 12 months. Copies of the backups are also stored in Microsoft OneDrive as protection against hardware failure. Deleted data disappears from the backups as they are rotated out.
Under Account → Export & import you can download all your data as JSON at any time. Under Account you can also delete your account — the account and all associated data are then permanently deleted from the database. Real deletion, not a flag in a table.
You have the right to request access to, rectification of or erasure of your personal data, and to object to the processing. Contact us at pierre.lindbom@formacon.se. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY), imy.se.