Privacy Policy

What we store

• Your login: your username and a salted, one-way hash of your password (PBKDF2-SHA-256). We never store or see your actual password.
• Your tasks: the tasks, checklist steps, due dates, lists and priorities you or your group add, who each task is assigned to, who completed it, and an automatic history of changes to each task.
• Comments and attachments: comments you write on tasks, and any pictures or PDF files you choose to attach to them. The app only reads a file when you pick it yourself.
• People: the names and avatar colours the group admin adds for the people tasks are assigned to.
• Sign-in session: when you sign in, the app sets one secure, HttpOnly cookie that keeps you signed in for up to 60 days. Only a hash of it is stored on the server.
• Security records: to block password guessing, the server counts failed sign-in attempts per username and per network (IP) address. Nothing else about your device or location is recorded.

Where it is stored

Your data is stored on secure servers run by our cloud hosting provider, and it travels only over encrypted HTTPS connections. A copy of your own tasks is also kept on your phone so the app opens and works offline. Signing out of the app removes your session from that phone.

Who can see it

• The group admin can see and manage all of the group’s tasks, people and logins.
• Other members see only the tasks assigned to them, including the comments and files on those tasks. Files are never public: they open only for a signed-in person who can see that task.
• We do not share your data with anyone else, and we do not use it for advertising, profiling or training.

What we don’t do

• No ads and no advertising IDs.
• No analytics, tracking pixels or third-party trackers.
• No access to your contacts, location or microphone, and no access to your photos or camera except a picture or file you choose to attach.
• No selling or renting of personal data.

Deleting your data and account

• Tasks: the admin can delete any task at any time (members can delete tasks they added), and “Clear completed” removes all finished tasks. Deleting a task also deletes its attached files.
• Comments and files: you can delete your own comments and attachments at any time.
• A member’s account: the admin can remove a member’s login in Settings → People. This deletes that login and its sessions right away. Deleting a person keeps their tasks for the group, just unassigned.
• The whole account: to delete your account and all of your group’s data, contact us at the developer email address shown on the app’s Google Play or App Store page. We delete it within 30 days and confirm when it’s done.

Data you delete is removed from our database. The copy kept on your phone is removed when you sign out or uninstall the app.

Children

My Tasks is not directed at children under 13, and we do not knowingly collect personal information from them.

Changes and contact

If this policy changes, we will update this page and the date at the top. Questions? Contact us at the developer email address listed on the app’s store page.