Privacy policy

We collect your account information and what you write in the app — the largest part, and the one that matters most — and, depending on your plan and your choices, some technical information.

We do not collect your precise location, the contacts on your device, or special categories of data within the meaning of Article 9 of the GDPR.

What you give us. When you create an account, your name and email. When you use the app, the content you write and the files you attach.

What is collected automatically. Technical information tied to crashes and performance, if you allow it; usage statistics, if you allow them; the verification signals described under Protecting the service; and, on the free plan of the Android app, the information the ad service collects.

From third parties. If you sign in with Google, Microsoft or GitHub, that provider passes us the name and email address on that account. If you subscribe, Google Play confirms the purchase and its state to us.

We do not buy or receive information about you from data brokers, online directories, marketplaces or data exchanges, or any similar service.

The free plan of the Android app shows a small banner ad, in a space of its own at the bottom of the main screens and, sometimes, below the screen that appears when you complete a list. The web app shows no ads. Premium removes ads completely: for Premium accounts the ad service is not even started.

Ads are provided by Google AdMob (Google Ireland Limited in the European Economic Area). To choose, show and measure ads, and to prevent fraud, the AdMob software in the app collects and shares with Google: your IP address, which may be used to estimate your approximate location; interactions with the app and with ads (for example, app launches, taps, ads shown); diagnostic information about the app and the ad software; and device identifiers, including the Android advertising ID. This information is encrypted in transit.

The content of your lists, notes and attachments is never sent to the ad service.

Personalised ads are off by default. Unless you switch on Personalised ads (Settings → Privacy & Data Consent), ads are requested as non-personalised, which means they are not based on a profile of your interests. Google still uses the information above for delivery, frequency limits, measurement and fraud prevention.

In the European Economic Area, the United Kingdom and Switzerland, Google's consent message is shown before any ad is requested, with options to consent, not to consent, or to manage your choices. You can change your answer at any time from Settings → Privacy & Data Consent → Ad privacy options. You can also reset or delete your advertising ID in your device's Android settings.

Google's use of this information is governed by Google's own privacy policy (policies.google.com/privacy). How Google uses information from apps that use its services is described at policies.google.com/technologies/partner-sites.

To improve the app — to see which features are used and where people get stuck — Task Tamer can collect usage statistics with Google Analytics for Firebase, in the Android app and in the web app. They are off by default and only collected if you say yes: the app asks once, and the choice lives in Settings → Privacy & Data Consent → Usage analytics.

The choice applies on this device or in this browser. It is stored on the device or in the browser, not on your account: it survives signing out, and whoever signs in next on the same device inherits it.

What the app sends. List created, list completed, assistant used (with the outcome: answered, failed or refused), Premium screen shown (and where from), trial started, Vault opened, and consent given. Never the content of your lists, names, your email address or your account ID.

What Google Analytics collects automatically, once allowed: the first app open or first visit, sessions and engagement time, app updates and removal, and crashes Google Analytics itself detects; on Android, Google Play purchase and subscription events (purchase, renewal, cancellation, refund); an app instance identifier (Android) or a random client identifier stored in the _ga cookie (web); general device data — the device category (phone, tablet or computer), operating system, the browser (in the web app), app version and language; and the country and region, derived from your IP address. Google Analytics does not store the IP address.

What is not collected: city, device brand and model, the advertising ID, the Android ID, Google signals (cross-device association), age, gender, interests, and install source. The statistics are not linked to AdMob and are not used for advertising.

Withdrawing consent. You can switch the statistics off at any time, in the same place. In the web app, the app deletes the Google Analytics cookies; on Android, it resets the analytics data stored on the device. Declining or withdrawing consent limits nothing in the app.

Google handles these statistics on our behalf, as a processor, under its data processing terms, and may not use them for its own purposes. How long they are kept is under How long we keep it.

To stop automated abuse — requests that do not come from the genuine app — Task Tamer uses Firebase App Check, a Google service, on both surfaces.

On Android, Google Play Integrity checks that requests come from the genuine app, installed from Google Play, on a genuine device.

In the web app, Google reCAPTCHA v3 runs in the background, with no puzzle to solve. To tell a person from an automated program, reCAPTCHA collects hardware and software information, such as device and browser data, and sends it to Google for analysis. It sets one cookie of its own, _GRECAPTCHA, which is strictly necessary for that risk analysis.

The web app is protected by reCAPTCHA, and the Google Privacy Policy and Terms of Service apply.

We receive only the result of the check — genuine or not — never the underlying signals. The legal basis is our legitimate interest in keeping the service and your account secure.

Our pages use no advertising cookies. In the web app, the third-party cookie that is always present is reCAPTCHA's _GRECAPTCHA, described under Protecting the service: strictly necessary for security and not used for advertising.

Analytics cookies, only if you allow them. If you allow usage statistics, Google Analytics sets the _ga and _ga_<ID> cookies. Before that, nothing loads: no Google Analytics script, no cookies, no requests. If you withdraw consent, the app deletes those cookies. See Usage statistics.

The web app keeps a few preferences in your browser's local storage — the theme, the language, your diagnostics and usage-statistics choices, and the last version whose news you have seen. They are not cookies, they are never sent to us, and they are erased when you clear your browser data.

“Do not track” requests. We do not change our behaviour in response to the browser's Do Not Track signal, because there is no uniform technical standard for interpreting it. We do no cross-site tracking.

Account content is processed persistently, so that your lists are available across sessions and across devices. That is the service: there is no way to turn it off and still have sync.

Collecting diagnostics — crash and stability logs — is separate from that, and it is yours to decide. It starts switched off and is only collected if you switch it on, and the choice applies on this device or in this browser: each keeps its own. Firebase Crashlytics handles the logs on Android, Sentry in the web app. You can switch collection on and off at any time in Settings → Privacy & Data Consent. Diagnostics never include the content of your lists, and declining limits nothing in the app.

Usage statistics — Android app and web app: off by default, switched on only by you, and the choice applies on this device or in this browser. You can switch them off at any time, and declining limits nothing in the app. See Usage statistics.

Personalised ads — Android app, free plan: off by default, switched on only by you, and subject to Google's consent message where it applies. See Advertising.

The content of your lists is not used for advertising, is not used to train artificial-intelligence models, and is not read by us in the normal course of running the service.

Your lists, tasks, folders and tags, subscription state and usage counters are held in Google Cloud Firestore in the European Union (eur3 multi-region: data centres in Belgium and the Netherlands).

Your account and sign-in data are handled by Firebase Authentication. Google offers no regional guarantee for this service, so this information may be processed outside the European Union.

Profile photos and the files you attach to tasks are held in Google Cloud Storage, in the United States, for a delivery-latency reason. The files are protected by access rules that allow only you to read them.

Assistant requests are handled by Vertex AI in the European Union (EU multi-region), using the Gemini 3.8 Flash model. Under Google Cloud's terms, Google does not use your requests or the assistant's answers to train or fine-tune any model. To answer faster, they may be held in memory for up to 24 hours, isolated to our project and within the EU; and Google may log requests to detect abuse of its services, as its terms allow. Requests are limited per user and per month.

Purchase verification is done by Cloud Functions for Firebase, in the United States, which check each purchase with Google Play and record its state on your account.

Crash logs, where you have allowed them, are handled on Android by Firebase Crashlytics (Google) and, in the web app, by Sentry, whose organisation is configured in the European Union data region. Neither receives the content of your lists.

Usage statistics, where you have allowed them, are handled by Google Analytics for Firebase (Google), as described under Usage statistics, and may be processed outside the European Union, including in the United States, with the safeguards described in the last paragraph of this section.

Cloud backup (Premium, only if you use it) is written to your own Google Drive or Microsoft OneDrive — on OneDrive, only in the app's folder — under your account with that provider and on its terms. We keep no copy.

Ads and app verification are handled by Google, as described under Advertising and Protecting the service.

Deleting your account removes the information we hold, including the subscription record and the messages you sent us through in-app support. While the account exists, those messages cannot be altered or deleted from inside the app, because a support record either party can rewrite is not a reliable record. Write to us if you need a support message removed. Email correspondence follows the period given in How long we keep it. Deleting your account does not cancel a Google Play subscription; cancel it in Google Play.

Where information is processed outside the European Economic Area, those transfers are made under the European Commission's Standard Contractual Clauses, incorporated into our data processing terms with Google, or under an adequacy decision, such as the EU–US Data Privacy Framework, where the recipient is certified.

You can ask for a copy of everything we hold, from the app's settings. What you get is a readable, unencrypted text file — whoever holds it, reads it. It includes your lists, sections, tasks, folders, tags, each list's settings, and also your profile — name, profession, date of birth, gender and the address of your photo. Subscription state and usage counters are not in the file: they are managed by the service and cannot be restored from a file.

The Vault is included only if you ask. By default, lists marked as secret are left out and never leave the app. If you ask for them to be included, they go in the clear, in the same file. The PIN and biometrics protect access inside the app; they do not protect the exported file. Those are different things.

The copy carries the addresses of the files you attached, not the files. Attachments and photos go on living in storage, and the exported file points at them — if the account is deleted, those addresses stop answering. Save your attachments separately before deleting your account.

With Premium you can also back up to your own Google Drive or OneDrive. Restoring an existing backup, from a file or from the cloud, stays free.

We keep your account information, the content you create and the subscription record for as long as the account exists. There is no clock running behind it: a list written two years ago is still there because the account is still there.

When you ask for your account to be deleted, the account and its content are held for 30 days before being permanently removed. During that period, you can sign in and choose to keep your account. After the 30 days, removal is permanent and nothing can be recovered.

Usage counter: only the current month's is kept, replaced each month.

Diagnostics: if you allow collection, crash logs are kept for 90 days on Android (Firebase Crashlytics), after which removal begins, and for 30 days in the web app (Sentry).

Usage statistics: if you allow them, event-level and user-level data is kept for 2 months in Google Analytics; aggregated reports, with no identifiers, may be kept longer.

Support messages: those sent through the app are kept for 24 months from the last message in the conversation, or until the account is deleted, if that comes first; those sent by email are kept for 24 months from the last message.

Ad and verification data held by Google: under Google's own retention policies.

When we no longer have a legitimate need to process information, we delete it or anonymise it. Where that is not immediately possible — because it sits in backups, for instance — we keep it in isolation, with no further processing, until deletion becomes possible.

We do not sell or rent your information. Information leaves us in these situations.

Processors. The Google Cloud and Firebase services listed under Where it is processed handle information on our behalf, under data processing terms. Sentry handles the web app's crash logs on the same terms, if you allow diagnostics. None of them may use it for their own purposes.

Advertising. On the free plan of the Android app, Google AdMob receives the device and usage information described under Advertising and uses it on the terms of Google's own policies. Never the content of your lists.

Usage statistics. If you allow them, Google Analytics for Firebase handles them on our behalf, as a processor, under Google's data processing terms. They are not used for advertising.

App verification. Google Play Integrity and reCAPTCHA, as described under Protecting the service.

Google Play, for subscriptions and payment, on Google Play's terms.

Legal obligations. Where we are legally required to disclose information to comply with the law, an authority's request, legal proceedings or a court order.

Business transfer. In the event of a merger, sale of assets, financing or acquisition, in whole or in part, information may be transferred to the entity involved. If that happens, we will tell you before the information changes hands.

Links out. Our pages may link to sites that are not ours. That link does not bring them inside this policy, and we recommend reading the policy of whoever operates them.

Automated processing. We make no automated decisions with legal effects concerning you, and we build no profiles from the content of your lists. The assistant processes a list only when you use it, and not in the background. Personalised advertising, if you switch it on, is carried out by Google on the terms of its policies.

Your rights. Under Articles 12 to 23 of the GDPR, you have the right to: access and a copy of your information in an accessible format; rectification; erasure; restriction of processing; objection to processing, including processing based on legitimate interest; portability; and to withdraw consent at any time — for diagnostics, usage statistics and personalised ads, directly in the app — without affecting the lawfulness of processing carried out beforehand.

To exercise any of these rights, write to the contact address at the end. We reply within 30 days.

Complaints. If you believe we have handled your information unlawfully, you may complain to the Comissão Nacional de Proteção de Dados (CNPD), the Portuguese supervisory authority.

Task Tamer is not directed at children under 16 and we do not knowingly collect information from anyone below that age. If you are a parent or legal guardian and believe your child has given us information without your consent, write to us: once we have verified it, we will remove that information.

We take reasonable measures to keep the information we collect secure: communications with our services are encrypted in transit, access to account content is limited by rules that allow only you to read what is yours, and App Check and reCAPTCHA reject requests that do not come from the genuine app.

In the app, the PIN or biometric lock and the Vault are additional layers on your side: the PIN is stored encrypted in the device's own secure storage and never reaches us.

Those layers hold inside the application. A copy you export leaves unencrypted and, if you ask for the Vault, with the Vault in the clear — on the terms set out under Export and restore.

Even so, no method of transmission over the internet or of digital storage is completely secure, and we cannot guarantee absolute security.

We may update this policy to reflect changes in the law or in our practices. The effective date is at the top of the page and is the date from which the published version applies.

Where a change is material — a new category of information, a new purpose, a new recipient or a change of region — we show a notice in the app and update the date at the top of this page.

For any privacy question, or to exercise your rights, write to the address above. MAUJr is the controller of this information. The Terms of use complete this policy.