Taskel

Privacy Policy

Effective

Taskel is a to-do app for iPhone. Your tasks stay on your phone. This page lists what little we do hold, why we hold it, for how long, and how to remove it.

Who we are

Taskel is made by Brian Busco, an individual developer in California, who is responsible for the data described here (the “controller”, in the language of privacy law). Reach us at [email protected].

What stays on your phone

Your tasks, notes, lists, tags, reminders and settings are stored in a database on your device. None of it is uploaded. Cloud Sync is switched off in this version and the app sends nothing to it. Your tasks leave your phone only if you later turn on Cloud Sync, once it is offered.

What we hold

  • An anonymous account id. On first launch the app creates an anonymous account with our database provider, Supabase, hosted in the United States. It is a random identifier. It carries no name, no email address and no device serial number. It exists so the app can be upgraded later without losing your data. Creating it needs a connection once. After that Taskel works offline; when it is online it also checks for app updates and refreshes its session.
  • Your email address, if you join the waitlist. Whether you join in the app or on this website, we store the address, the feature you were interested in, whether you joined from the app or the web, and the time. If you join from the app, the entry is tied to your anonymous account id, so that deleting your account also unlinks it. We use it once, to tell you when Taskel AI and Cloud Sync are available. We do not share it and we do not use it for anything else. To be removed, email [email protected].
  • Crash reports. Sent to Sentry (Functional Software, Inc., United States) when the app crashes or hits an error: your device model, iOS version, the app version, the stack trace, and the network requests and taps just before the crash, with any query strings removed. Sentry also receives a short “app opened / closed” signal each time you use the app, with a per-install id, so we can see crash rates per version. Never the content of a task. Not linked to a name or an email address.
  • Usage counts. Sent to PostHog (PostHog, Inc., United States): which features are used, as counts. For example, that a task was created, a reminder was set, an upgrade prompt was shown, the waitlist was joined, or an update was applied. Each count carries your device model, iOS version, app version, language and time zone. They are tied to a random per-install id that PostHog generates, not to your anonymous account id. Never the content of a task. No advertising, no tracking across other apps or websites, and we do not sell data.

What we do not hold

The content of your tasks, notes, lists, tags and reminders. Your location: the app does not ask for it in this version. A push token: reminders are scheduled by iOS on your phone, and no notification token is sent to us in this version. Your contacts, photos or calendar. The advertising identifier: Taskel does not use it and never shows Apple’s tracking prompt.

Why we are allowed to

For readers in the EU, the UK and other places that ask for a legal basis: the anonymous account is necessary to provide the app; the waitlist is consent, which you withdraw by asking us to remove the address; crash reports and usage counts are our legitimate interest in keeping the app working, balanced by carrying no content and no identity beyond a random per-install id.

How long we keep it

  • The anonymous account id: until you delete it (Settings › Account › Delete Account) or ask us to.
  • Your waitlist email: until the one email it is for has gone out; then we delete the list. Sooner if you ask.
  • Crash reports: Sentry keeps them for up to 90 days, then deletes them.
  • Usage counts: PostHog retains them for one year on our plan. We would update this page before choosing a plan that keeps them longer.
  • Website request logs: Cloudflare keeps them for a short period under its own policy. We do not keep a copy.

Reminders

Reminders are scheduled by iOS on your phone. The first time you set one, iOS asks whether Taskel may send you notifications. Nothing about a reminder is sent to us.

Your rights and choices

  • Delete everything. Settings › Account › Delete Account erases everything on your phone and deletes the anonymous account from Supabase. If your phone is offline at that moment, that step may not complete. Email [email protected] and we will remove the record by hand. There is no server copy of your tasks, so there is nothing left to delete anywhere else. Crash reports and usage counts are not linked to your account id.
  • Leave the waitlist. Email [email protected] from the address you joined with.
  • See, correct or take your data. Your tasks are already on your phone and nowhere else. For anything we hold, email us and we will tell you what it is, fix it, or send it to you.
  • Object or withdraw consent. Email us. There is no switch in this version that turns off crash reports or usage counts; if you object, we will delete what we can identify and note it.
  • Complain. If you are in the EU or the UK you can complain to your data protection authority; in California, to the Attorney General. We would rather hear from you first.

We answer within 30 days, usually much sooner. We never treat you differently for exercising a right. We do not sell or share personal information, in the California sense or any other.

Security

Everything the app sends travels over HTTPS. What stays on your phone is protected by iOS’s own encryption whenever your phone has a passcode, and Settings › Account › Require Face ID puts Face ID or your passcode in front of Taskel itself. On Supabase, rules on every table mean an account can only read its own rows, and only the developer holds an administrative login. No system is perfectly secure; if something goes wrong with data of yours, we will tell you.

Services we use

  • Apple distributes the app through the App Store.
  • Supabase (United States) stores the anonymous account id and the waitlist entries.
  • Sentry (Functional Software, Inc., United States) receives crash reports.
  • PostHog (PostHog, Inc., United States) receives usage counts.
  • Expo (Expo, Inc., United States) delivers app updates. Each launch asks Expo whether an update is available, with a per-install id.
  • Cloudflare hosts this website. The waitlist form uses Cloudflare Turnstile to check that you are a person; it sets no tracking cookies. The site itself has no analytics and sets no cookies.

Each of these providers is bound by its own terms to protect your data at least as well as this page says we do, and to use it only to provide its service to us. Like any online service, the servers we use see your IP address when the app or this site connects. We do not use it to identify you.

Everything we hold is stored in the United States. If you use Taskel from somewhere else, that is where your data goes. Where the law asks for safeguards on such a transfer, we rely on the providers’ standard contractual clauses.

Children

Taskel is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has given us an email address, tell us and we will delete it.

Changes

If this policy changes, we update this page and the effective date at the top. If a change would let us do more with your data than this page allows today, we will say so inside the app before it takes effect.

Contact

Questions about this policy go to [email protected].