Privacy Policy

Account information. When you sign up or sign in — by email and password, or with Google OAuth — we collect your email address and, if shared via Google, your name. This is handled through our authentication and database provider, Supabase.

Task and usage data. We store the task titles you create, your time-tracking sessions (start times, stop times, and durations), and how you use product features such as AI task splitting.

Technical data. Like most web services, our infrastructure providers automatically log standard technical information such as IP address, browser type, and device information, for security and reliability purposes.

Guest mode. If you use Tasklap without signing in, your tasks are stored only in your browser session and are never sent to our servers.

• To provide the core service: creating, timing, and syncing your tasks across devices
• To authenticate you and keep your account secure
• To process AI task-splitting requests, which sends the relevant task title to our AI provider, OpenRouter, to generate subtask suggestions
• To operate, maintain, and improve Tasklap, including diagnosing technical issues
• To send service-related communications (e.g. password resets) and, for Pro subscribers who opt in, a weekly email digest
• To process payments for the Pro tier, once billing is enabled

We do not sell your personal data, and we never will.

We rely on a small number of trusted third-party services to operate Tasklap, and only share the minimum data each one needs to do its job:

• Supabase — authentication and database hosting. Stores your account and task data.
• Google OAuth — optional sign-in method. If you sign in with Google, Google shares your name and email address with us.
• OpenRouter — powers the AI task-splitting feature. When you use it, the task title you're splitting is sent to OpenRouter to generate suggestions.
• Vercel — hosts the Tasklap application and processes standard server logs (e.g. IP address) as part of delivering the service.

• We retain your account and task data for as long as your account is active.
• Free accounts retain up to 30 days of session history; Pro accounts retain unlimited history, in line with our pricing plans.
• If you delete your account, we delete your personal data and task data from our active systems within 30 days, except where we must retain limited records for legal or security purposes.

Wherever you are in the world, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and associated data at any time
• Export your task data
• Object to or restrict certain processing

If you are located in the European Economic Area, the UK, or another region with similar data protection laws (such as the GDPR), these rights are guaranteed to you under applicable law, and we act as the data controller for the information described in this policy.

To exercise any of these rights, delete your account directly from within the app, or contact us at privacy@tasklap.app.

We use industry-standard measures, including encryption in transit and the access controls provided by our infrastructure providers, to protect your data. No method of transmission or storage is 100% secure, however, and we cannot guarantee absolute security.

Tasklap is not directed at children under 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.

We may update this Privacy Policy from time to time. If we make material changes, we'll update the date at the top of this page and, where appropriate, notify you by email.

Tasklap is operated by an individual developer. If you have questions about this Privacy Policy or how your data is handled, contact us at privacy@tasklap.app.