Privacy Policy

This Privacy Policy explains how DailyTasky ("DailyTasky", "we", "us", or "our") collects, uses, shares, and protects information when you use our mobile application on iOS and Android, our website, and related services (collectively, the "Service").

1. Overview

DailyTasky is an AI-powered task organizer that helps you plan your day, prioritize tasks, and build healthier habits. To do that, we store the content you create (tasks, projects, goals, notes) and some account information so you can securely sign in, sync across devices, and receive reminders.

By using DailyTasky you agree to the collection and use of information in accordance with this Privacy Policy.

2. Who we are

For the purposes of the EU General Data Protection Regulation (GDPR) and the UK Data Protection Act, the data controller is DailyTasky. You can reach our privacy team at info@dailytasky.com.

3. Data we collect

3.1 Information you provide

• Account information. When you create an account, we collect your email address and, optionally, your name and profile photo. If you sign in with Apple or Google, we receive basic profile information from those providers (name, email, avatar).
• Content you create. Tasks, projects, goals, notes, reminders, time blocks, streaks, and any files or images you attach.
• Conversations with Kora AI. Messages you send to our AI assistant and its responses.
• Support & feedback. Messages, bug reports, screenshots, and any contact details you share when you reach out to support.

3.2 Information we collect automatically

• Device & usage data. Device model, OS version, app version, language, time zone, crash logs, and non-identifying interaction events (e.g., "task created", "focus session started").
• Identifiers. A randomly generated installation ID and, if you opt in, the iOS IDFA or Android Advertising ID. We do not use these identifiers for cross-app advertising.
• Approximate location. Derived from your IP address solely to set your time zone, protect against fraud, and comply with law. We do not collect precise GPS location.
• Log data. Standard server logs such as IP address, request timestamps, and referring URLs.

3.3 Information from third parties

• Subscription status from the Apple App Store or Google Play when you purchase DailyTasky Pro.
• Authentication data from Sign in with Apple or Google if you choose to use those options.
• Calendar data (optional) — if you connect Apple, Google, or Outlook calendars, we read event titles, times, and attendees to plan around meetings. We never write to your calendar without explicit confirmation.

4. How we use your data

We use the information we collect to:

• Provide, maintain, and improve the Service, including syncing your data across devices.
• Plan your day, generate recommendations, and power streaks and insights.
• Send you reminders, focus notifications, and transactional emails related to your account or subscription.
• Respond to support requests and communicate with you about your account.
• Detect, prevent, and address fraud, abuse, security issues, and technical problems.
• Comply with legal obligations and enforce our Terms of Service.
• With your consent, send occasional product updates (you can unsubscribe at any time).

4.1 Legal bases (EEA, UK, and Switzerland)

If you are in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following legal bases:

• Performance of a contract — to provide DailyTasky and the Pro subscription you purchased.
• Legitimate interests — to keep the Service secure, improve it, and run our business fairly and responsibly.
• Consent — for optional features such as marketing emails, analytics, calendar connections, and some AI features.
• Legal obligation — to comply with tax, accounting, and other legal requirements.

5. AI features & Kora

Some DailyTasky features — including Kora (your AI coach), quick-add parsing, day planning, and suggestions — are powered by third-party large language models. When you use these features:

• The content of your prompt and the minimum context required to answer it (for example, the task title or project name) is sent to our AI provider for processing.
• We instruct our AI providers not to use your data to train their models.
• We do not send sensitive authentication data, payment data, or calendar attendee contact details to AI providers.
• You can disable AI features in Settings. When disabled, no content is sent to AI providers.

6. How we share data

We do not sell your personal information. We share data only in the limited circumstances described below.

• Service providers that help us operate DailyTasky (hosting, authentication, analytics, AI, push notifications, payments, customer support). They may only process your data on our instructions and under contractual confidentiality and security obligations.
• With your direction — for example, when you choose to share a project or invite a collaborator (team features may be introduced in a future update).
• Legal requirements — to comply with a subpoena, court order, or other legal obligation, or to protect the safety, rights, or property of our users or the public.
• Business transfers — if DailyTasky is involved in a merger, acquisition, or asset sale, personal data may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.

7. Third-party services

We rely on the following categories of sub-processors. A current list is available on request.

• Authentication & identity: Apple, Google, Firebase Authentication.
• Cloud hosting & storage: Google Cloud, Firebase, AWS.
• AI providers: OpenAI (and/or Anthropic) for natural-language features.
• Analytics & crash reporting: Firebase Analytics, Firebase Crashlytics.
• Push notifications: Apple Push Notification service (APNs), Firebase Cloud Messaging.
• Subscriptions & payments: Apple App Store, Google Play, and RevenueCat. We never see your full card number.
• Customer support & bug tracking: Jira, email.

8. Data retention

We keep your information for as long as your account is active or as needed to provide the Service. Specifically:

• Account content (tasks, projects, goals, notes, AI chats) is retained until you delete it or close your account.
• Deleted items are kept in a soft-delete state for up to 30 days so you can restore them, then permanently removed.
• Analytics events are retained for up to 24 months in aggregated form.
• Support tickets are retained for up to 24 months after your last interaction.
• We may retain certain records longer if required by law (for example, tax records) or to resolve disputes.

9. Security

We use industry-standard safeguards to protect your data:

• Transport Layer Security (TLS 1.2+) for all data in transit.
• Encryption at rest for databases and backups.
• Principle-of-least-privilege access controls for our team.
• Regular security reviews, dependency scanning, and incident response procedures.

No system is 100% secure. If you believe your account has been compromised, please contact us immediately.

10. Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your data and close your account.
• Export a portable copy of your data.
• Restrict or object to certain processing.
• Withdraw consent at any time where we rely on consent.
• Lodge a complaint with your local data protection authority.

You can exercise most of these rights directly from Settings → Account in the app, or by emailing info@dailytasky.com. We will respond within 30 days.

10.1 California residents (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect, to request deletion or correction, to opt out of the "sale" or "sharing" of personal information (we do not sell or share for cross-context behavioral advertising), and to not be discriminated against for exercising your rights.

11. Children's privacy

DailyTasky is not directed to children under 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

12. International users

DailyTasky is operated from, and data may be processed in, countries other than the one in which you live — including the United States and the European Union. Where required, we use Standard Contractual Clauses or other lawful transfer mechanisms to protect your data.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or through an in-app notice and update the "Last updated" date at the top of this page. Your continued use of DailyTasky after the effective date means you accept the updated policy.

14. Contact us

If you have questions or concerns about this Privacy Policy or how we handle your data, please contact us:

• Email: info@dailytasky.com
• Subject line: "Privacy request" (for rights requests)

We're a small, responsive team and we read every message.