Privacy Policy
Task & Event Tracker (the "App") — available on iOS and at task-tracker.net
Effective date: 3 October 2026
Who we are
The App is developed and operated by an individual developer based in Poland ("we", "us"), who is the data controller for the personal data described in this policy.
The short version
•
You sign in with your email address. There are no passwords.
•
Everything you put into the App — tasks, notes, checklists, contexts, countdown events, time entries — is stored so we can show it back to you on every device you sign in on.
•
We do not show ads, we do not sell data, and we do not track you across other apps or websites.
•
You can delete your account, and everything in it, from inside the App at any time.
What we collect and why
Account data. Your email address, used to sign you in (we email you a one-time code) and to identify your account. Legal basis: performance of our contract with you.
Content you create. Task titles and notes, checklist items, context names, colours and emoji, countdown event titles and dates, recurrence rules, time entries from the timer, and your settings (language, timezone, notification preferences). This is the service itself. Legal basis: performance of our contract with you.
Push notification token and device model. When you allow notifications, the App registers a push token (an identifier issued by Apple and Expo for your device) together with the device model, such as "iPhone 15 Pro". We use it only to deliver your reminders. Legal basis: performance of our contract with you; the notification permission itself is controlled by iOS.
Session data. Hashed sign-in tokens and the time of your last activity, so you stay signed in. Sessions expire after 14 days without use. Sign-in codes expire after 15 minutes. In the browser version at task-tracker.net the session is kept in your browser's local storage; we set no cookies.
Notification delivery log. Which reminders were sent for which tasks, so you do not receive the same reminder twice.
Diagnostics. The App reports app-launch and performance metrics (such as time to first screen), device and network type, and an anonymous session identifier to Expo's EAS Observe service. This data is not linked to your account. Legal basis: our legitimate interest in keeping the App fast and working.
Server logs. Our hosting provider keeps short-term technical logs (your IP address, request paths, status codes, timestamps) for operations and security. We do not store IP addresses in our own database. These logs do not contain your task content or sign-in codes.
We do not collect your name, phone number, precise or approximate location, contacts, photos, health data, or payment details. We do not use the advertising identifier (IDFA), and we do not use advertising or product-analytics SDKs; the only telemetry is the performance diagnostics described above.
Who else processes your data
We use a small number of service providers to run the App. Each processes data only on our instructions:
Neon
Database hosting
Frankfurt, Germany (EU)
Render
API and web hosting
Frankfurt, Germany (EU)
Resend
Sending sign-in emails
Ireland (EU region); Resend is a US company
Expo (EAS)
Push notification delivery, over-the-air app updates, performance diagnostics
United States
Apple
Push notification delivery to your iPhone (APNs)
Apple's global infrastructure
Cloudflare
DNS for task-tracker.net and forwarding of email sent to support@
Global network
Google (Gmail)
The mailbox where email to support@ is received and answered
Google's infrastructure (EU/US)
When a reminder is sent, the task title and the context name are included in the notification body and pass through Expo and Apple on the way to your device. The morning summary contains counts only.
Where a provider processes data outside the European Economic Area, we rely on the safeguards provided under GDPR, such as the EU–US Data Privacy Framework or Standard Contractual Clauses, as applicable to that provider.
AI assistants you connect (optional)
The App can be connected to an AI assistant of your choice — such as Claude or ChatGPT — through the Model Context Protocol (MCP). This is entirely optional and is off until you issue a personal access token in Settings and configure your assistant with it.
If you do connect an assistant, it can read and change your tasks, checklists and countdown events on your request. Your content is then transmitted to that assistant's provider under their privacy terms, which we do not control. We never send your data to any AI provider ourselves. You can revoke the token in Settings at any time, and deleting your account revokes all tokens immediately.
How long we keep data
Your data is kept for as long as your account exists. When you delete your account, all of your data — tasks, content, settings, push tokens, sessions and access tokens — is permanently deleted from our database immediately. Short-term server logs expire on their own schedule at our hosting provider. Database history kept for disaster recovery is retained for a short period (currently a matter of hours) and then expires. Emails you send to support@ stay in our mailbox until the request is resolved and are then deleted on request.
Your rights
Under the GDPR you have the right to access, correct, export and delete your personal data, to restrict or object to certain processing, and to lodge a complaint with a supervisory authority — in Poland, the President of the Personal Data Protection Office (UODO). We do not make automated decisions about you and we do not profile you.
•
Delete: Settings → Delete account. This is immediate and cannot be undone.
Security
All traffic between the App and our servers is encrypted with TLS. Sign-in codes, session tokens and MCP access tokens are stored only as cryptographic hashes; the plain values are never stored. There are no passwords to leak.
Children
The App is not directed at children. You must be at least 13 to use it, or the age of digital consent in your country if it is higher (16 in Poland and in most of the EU), and we do not knowingly collect data from anyone below that age. If you believe a child has created an account, contact us and we will delete it.
Changes
If we change this policy in a way that matters, we will update the date above and, for significant changes, tell you inside the App. Continued use after a change means you accept the updated policy.