Privacy Policy

• Every tool works without an account. In that mode your data stays in your own browser — we never receive it.
• If you create an account, we store your data on our server so it syncs across devices.
• We do use Google Analytics to understand how the site is used. We do not sell your data or run advertising.
• You can download everything we hold, or delete your account entirely, at any time.

When you use ADHD.lk without logging in, the planner, routines, habits, journal, brain-dump inbox and focus statistics are saved using your browser's localStorage. This data never leaves your device and we cannot read it.

It stays until you clear your browser data. Clearing your browsing data, using private/incognito mode, or switching browsers or devices will lose it — that is why we offer accounts.

If you create an account, we store on our server:

• Your username, email address and a securely hashed password (we never store the password itself)
• Your daily tasks and mood check-ins
• Your journal entries
• Your routines and their steps
• Your habits and daily habit check-ins
• Articles you bookmarked
• Your XP and level
• If you signed in with Google: your Google account identifier

If you have used the tools as a guest and then sign up, anything stored in your browser (tasks, moods, journal entries, routines and habits) is copied once into your new account so you do not lose it. After a successful copy, the guest copies in your browser are cleared. This happens only once per account.

We use a small number of cookies:

• Session cookie — keeps you logged in. Essential.
• adhd_lang — remembers whether you chose English, Sinhala or Tamil (1 year).
• Google Analytics cookies — set by Google to measure site usage (see below).

Your theme choice (dark or light) is stored in localStorage, not a cookie.

We use Google Analytics 4 and Google Tag Manager on every page to understand which tools people use and where visitors come from. Google receives your IP address, browser and device information, and the pages you view, and sets its own cookies.

We use this only in aggregate, to decide what to build next. We do not sell data, run advertising, or use it to identify individuals. You can block it with any standard ad/tracker blocker or your browser's "Do Not Track"/privacy settings, and the site will keep working normally.

If you choose "Sign in with Google", Google shares your name, email address and a unique account identifier with us so we can create or find your account. We do not receive your Google password and we cannot access anything else in your Google account.

The ASRS v1.1 self-test runs entirely in your browser. Your answers and your score are never sent to our server and are not stored anywhere — closing the page discards them.

• Download your data — Settings → "Download my data" exports everything in your account as a JSON file.
• Delete your account — Settings → Danger Zone permanently erases your account and all associated data.
• Delete guest data — clear your browser's site data for adhd.lk.
• Change your password — Settings → Change Password.

See the data deletion page for step-by-step instructions.

The site is served over HTTPS, passwords are hashed with modern algorithms, and account data is only accessible to the logged-in account owner. No online service can promise perfect security, so please use a password you do not reuse elsewhere.

ADHD.lk is intended for adults. If you are under 16, please use it with a parent or guardian. We do not knowingly collect data from children; if you believe a child has created an account, contact us and we will remove it.

If this policy changes materially we will update the date at the top of this page. Questions about your data: support@adhd.lk.