Privacy Policy

What we store

Your account: the email address and the name you sign up with, and whether that address has been verified. Your password itself is never stored, our server keeps only a secure hash of it.

Your team: the team name, who is in it and their roles (owner or member), and the shareable team code if you create one.

Tasks: everything an owner types into a task (title, category, room, priority, due date, notes, quantity, who it is for, how often it repeats) and what happens to it afterwards (accepted, started, snoozed, declined with the reason given, done). This activity is visible to every member of the team.

Your devices: a push-notification token for each device you sign in on, so reminders and task alerts can reach you, and your notification choices from Settings. Tokens are removed when you sign out or delete your account.

Staying signed in: for each device, a hash of the sign-in token, the device identifier the app generates, the platform (iOS, Android or web) and when it was last used, so a session can be recognised and revoked.

Invites and codes: when an owner adds a member by email, we store that email address and a one-way hash of the 6-digit code we send, never the code itself. The same is true of email-verification and password-reset codes.

Server logs: our server records the usual technical lines for each request (the time, which endpoint, the result and the calling IP address) so we can keep the service up and spot abuse. They are not used to profile anyone.

Owners and members

Members do not sign up on their own. An owner creates a member's account inside the team, and the member signs in with the code the owner had us email to them. The owner sees everything a member does in the app and can change the member's role or delete their account at any time.

The only things we hold about a member are the name and email address their owner entered, the tasks they are given and what they do with them, their notification choices, and the devices they sign in on.

Everyone in a team sees the same app, including the same ads, described below.

Ads

TaskCue is free and paid for by advertising. Everyone who uses it, owners and members alike, occasionally sees a full-screen ad at a natural break: after a new task is saved, or after a task screen is closed. Never in the middle of doing something, never more than one in fifteen minutes, never more than three in a day, and never in a team's first 24 hours.

The ads are served by Google AdMob. To serve them, AdMob receives your device's advertising identifier and standard request data (device model, app version, and rough location derived from your IP address). We do not send AdMob your name, your email address or anything from your tasks.

Where the law requires it (for example in the EEA and the UK) you are asked for consent before any ad is loaded, and on iOS you are also asked whether the app may track you across other companies' apps and sites. Those choices decide whether the ads you see are personalised, not whether you see ads: saying no means non-personalised ads rather than none. You can change either answer later in your device settings, and where consent is required and refused, no ad is requested at all.

There is no paid tier and no ad-free upgrade. Ads are how TaskCue is paid for, so they are part of the free app for every member of every team.

Who processes it

Our own server (a PostgreSQL database on hardware we control) stores your account, teams and tasks. Google Firebase Cloud Messaging delivers push notifications only, and Apple Push Notification service and Google Play services carry them to your phone.

Our outgoing mail provider, either a Gmail account we control or Resend where that is configured, sends the invite, verification and password-reset emails on our behalf and sees the recipient's email address and the message.

Google AdMob serves the ads, as described above, together with Google's consent tool which records your consent choice on your device.

We do not run analytics or crash-reporting in the app, we do not sell or rent your data, and we never share it for anyone else's marketing.

Keeping it safe

Everything travels over encrypted connections. Our API checks every request against your membership: a team's data is only readable by its members, members can only change the status of tasks assigned to them, and only owners can create, edit or delete tasks.

How long we keep it

Your account, team and tasks stay until they are deleted, either by you or by an owner of your team. This is a to-do list, so its history is the point of it.

The short-lived things clear themselves: an email invite expires after 7 days, verification and password-reset codes expire within the hour, and all of them are deleted once expired. A signed-out or expired session is deleted 30 days later. Server logs are kept for a short period for security and debugging and then rotate away.

Deleting your data

The Delete account row in Settings removes your sign-in, your membership and your push tokens straight away and takes you off every task you were assigned. Tasks you created stay with the team as its history. If you were the last member, the team and all of its tasks are deleted with you.

An owner can cancel a member's pending invite from the Team screen, which deletes the member's account before they ever sign in. An owner deleting a team deletes that team's tasks with it.

If you cannot get into the app, write to taskcue@gmail.com from the address you signed up with and we will delete the account for you within 30 days.

Children

TaskCue is not meant for children. You must be at least 13 to use it, and an owner must not add anyone under 13 to a team. We do not knowingly collect anything from a child under 13; if you believe we have, write to us and we will delete it.

Because the app is for teams and households generally rather than for children, the ads in it are not child-directed. An owner who adds a younger member to their team is responsible for what that person sees in the app.

Your rights and how to reach us

You can see and change your data in the app itself, and delete your account from Settings. Depending on where you live you also have the right to ask for a copy of your data, to have it corrected, to have it deleted, to object to how we use it, and to complain to your local data-protection authority.

For any of those, or just a question, write to taskcue@gmail.com and we will answer within 30 days. We never need anything beyond the email address you signed up with to act on a request.

If we change this policy we update the date at the top; material changes are announced in the app.