Files
calctext/_bmad-output/implementation-artifacts/16-1-privacy-respecting-analytics.md
2026-03-16 19:54:53 -04:00

1.9 KiB

epic, story, title, status
epic story title status
16 16.1 Privacy-Respecting Analytics draft

Epic 16 — Analytics, Feedback & Iteration

Goal: Learn from usage to improve CalcPad while respecting user privacy.

Story 16.1: Privacy-Respecting Analytics

As the CalcPad product team, I want anonymous, privacy-respecting analytics on feature usage and error rates, So that we can make data-informed decisions without compromising user trust.

Acceptance Criteria:

Given analytics are implemented in CalcPad When any analytics event is recorded Then no personally identifiable information (PII) is included -- no names, emails, IP addresses, or sheet contents And events are limited to: feature usage counts, session duration, error type and frequency, and platform/version metadata

Given the macOS application When analytics are active Then events are sent via TelemetryDeck or PostHog (self-hosted or privacy mode) And the SDK is configured to anonymize all identifiers

Given the web application When analytics are active Then events are sent via Plausible or PostHog (self-hosted or privacy mode) And no cookies are used for analytics tracking

Given a user who does not want to participate in analytics When they navigate to Settings > Privacy Then an "Opt out of analytics" toggle is available And disabling the toggle immediately stops all analytics collection with no data sent after opting out And the opt-out preference persists across sessions and application updates

Given CalcPad's analytics implementation When reviewed for regulatory compliance Then it complies with GDPR (no data collected without legal basis, opt-out honored, no cross-site tracking) And it complies with CCPA (user can opt out of data sale -- though no data is sold) And a clear privacy policy is accessible from Settings > Privacy describing exactly what is collected