Privacy Policy

1 Introduction

Welcome to Taskaro. Taskaro ("we," "our," or "us") is a task management application available on Android (package name: org.app.taskaro). We are committed to protecting your personal information and being transparent about how we handle it.

This Privacy Policy explains what information we collect when you use Taskaro, how we use that information, and the choices you have. By downloading or using Taskaro, you agree to the practices described in this policy.

2 Information We Collect

2.1 Information You Provide Directly

• Task data: task titles, descriptions, sub-task lists, deadlines (timestamps), completion states, and meeting links that you enter into the app.
• Notes: note titles and content you create within the app.
• App preferences: your chosen theme (Light or Dark) and whether you have enabled notifications.

2.2 Information from Google Sign-In

When you choose to sign in with Google, we receive the following information from Google's OAuth service:

• Your Google account display name
• Your Google account email address
• Your Google account profile photo URL
• A Firebase User ID (UID) assigned by Firebase Authentication

We do not receive your Google password, payment information, contacts, or any other data from your Google account beyond what is listed above.

2.3 Automatically Collected Information

Firebase may automatically collect limited technical data to operate its services, including:

• Firebase installation IDs (for crash reporting and analytics, if enabled)
• App version and Android OS version (for diagnostic purposes)

We do not configure or use Firebase Analytics or Firebase Crashlytics beyond what Firebase enables by default.

3 Firebase & Firestore

Taskaro uses Google Firebase (provided by Google LLC) for two services:

• Firebase Authentication: to verify your identity when you sign in with Google.
• Cloud Firestore: to store and sync your tasks and notes in the cloud so you can access them from multiple devices.

Your synced data is stored in Firestore under the following structure:

• users/{yourUID}/tasks/{taskId} — your task records
• users/{yourUID}/notes/{noteId} — your note records

Only you (using your authenticated Google account) can read or write to your data. Data is encrypted in transit using TLS and encrypted at rest by Google.

Firebase is operated by Google LLC and is subject to Google's Firebase Terms of Service and Google's Privacy Policy.

4 Google Sign-In

Taskaro uses Google Sign-In for authentication. When you tap "Sign in with Google," you are redirected to Google's OAuth 2.0 authentication screen, which is operated entirely by Google. Taskaro only requests the following OAuth scopes:

• profile — access to your display name and profile photo URL
• email — access to your email address

We do not request access to your Gmail, Google Drive, Google Contacts, or any other Google services.

You can revoke Taskaro's access to your Google account at any time by visiting Google Account → Security → Third-party apps with account access and removing Taskaro.

5 Local Storage

Taskaro stores data locally on your device using two mechanisms:

• SQLite database (via SQLDelight): all tasks and notes are stored in a local database file on your device's internal storage. This database is managed by Android's app sandboxing and is inaccessible to other apps unless your device is rooted.
• DataStore preferences: your app settings (theme, notification preference, sign-in state, and cached Google account info) are stored as key-value pairs in Android DataStore, also sandboxed within the app.

Local data is deleted when you uninstall the app or when you sign out (which clears the local database to protect your privacy on shared devices).

6 How We Use Your Information

We use the information we collect for the following purposes only:

• To provide the app's core features: storing, organizing, and displaying your tasks and notes.
• To sync your data: when you are signed in, syncing your tasks and notes to Firestore so they are accessible across your devices.
• To send local notifications and alarms: scheduling on-device reminders using exact alarms for your task deadlines and meetings. Notifications and alarms are processed entirely on your device and no notification content is sent to our servers.
• To personalize your experience: remembering your theme and notification preferences.

We do not use your information for advertising, profiling, or any purpose beyond operating the app.

7 Data Sharing

We do not sell, rent, or trade your personal information to any third party.

Your data is shared only with the following sub-processor:

• Google LLC (Firebase): as described in Section 3. Google processes your data solely to operate Firebase Authentication and Firestore on our behalf, consistent with Google's Firebase Data Processing Terms.

We may also disclose your information if required to do so by law or in response to valid legal process (e.g., a court order or subpoena).

8 Data Retention & Deletion

Your data is retained for as long as you actively use Taskaro or until you choose to delete it.

How to delete your data

• Sign out: signing out of Taskaro clears all tasks and notes from the local database on your device. Your Firestore data (cloud copy) remains under your account until explicitly deleted.
• Delete from Firestore: to remove your cloud data, contact us at privacy@taskaro.app with your request. We will delete your Firestore data within 30 days.
• Uninstall the app: uninstalling Taskaro removes all locally stored data from your device.
• Delete your Google account: deleting your Google account will prevent further access to your Firebase data. Contact us separately to ensure Firestore data is also removed.

9 Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: the right to request a copy of the personal data we hold about you.
• Rectification: the right to correct inaccurate data. Most of your data (tasks, notes, preferences) can be corrected directly within the app.
• Erasure ("right to be forgotten"): the right to request deletion of your personal data. See Section 8 for how to request this.
• Portability: the right to receive your data in a machine-readable format. Contact us to request an export.
• Objection: the right to object to how we process your data. Since we do not use your data for profiling or marketing, this primarily applies to the Firebase sub-processing described above.

To exercise any of these rights, contact us at privacy@taskaro.app. We will respond within 30 days.

If you are located in the European Economic Area (EEA) or UK, these rights are protected under the GDPR. If you are in California, you have similar rights under the CCPA.

10 Children's Privacy

Taskaro is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@taskaro.app and we will delete such information promptly.

This policy is consistent with the Children's Online Privacy Protection Act (COPPA) and applicable international children's privacy laws.

11 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the app, our practices, or applicable laws. When we make material changes, we will update the "Last Updated" date shown at the top of this page.

We encourage you to review this policy periodically. Your continued use of Taskaro after changes are posted constitutes your acceptance of the updated policy.

12 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how Taskaro handles your data, please contact us:

• Email: privacy@taskaro.app
• App package: org.app.taskaro

We aim to respond to all privacy-related inquiries within 30 days.