Privacy Policy
This policy explains what personal data TaskFlow collects, why, who we share it with, and the choices you have. TaskFlow is provided by "TaskFlow" ("we", "us"). Contact: agherajahnvi@gmail.com.
1. What we collect
| Data | Why we need it |
|---|---|
| Account details: email address, full name, password (stored hashed by our authentication provider, never readable by us) | To create your account, sign you in, reset your password and show your name to teammates. |
| Workspace details: organization or workspace name, your department and role, join requests | To place you in the right workspace and apply permissions. |
| Content you add: tasks, descriptions, due dates, comments, attachments, extension requests, tags and mentions | To provide the task management service. |
| Notifications and device identifiers: in-app notifications, a push notification token for your device, device type | To send you task reminders and updates and to stop sending them to a device after you sign out. |
| Subscription status: your plan, renewal and expiry dates, and an anonymous purchase identifier. We do not receive your card or payment details. | To unlock paid features and enforce plan limits. |
| Camera (only if you choose to scan a QR code) | To scan an organization's join code. Images are not stored or sent to us. |
| Technical and diagnostic data: app version, error logs, timestamps | To keep the service secure and fix problems. |
| Data stored on your device: cached tasks and notifications, remembered email addresses for sign-in | To make the app faster and work briefly offline. Cleared when you sign out. |
We do not sell your personal data and we do not use it for advertising.
2. Who can see your data
Your data is separated by workspace. Members of an organization can see what the organization's permissions allow: administrators can see all tasks in their organization, and other members see tasks they created or are assigned to (or that are assigned to their role). People in other organizations cannot see your workspace's data. A personal workspace is visible only to you.
3. Service providers we use
| Provider | Purpose |
|---|---|
| Supabase | Database, sign-in, file storage and server functions. |
| Google Firebase Cloud Messaging | Delivering push notifications. |
| RevenueCat | Managing subscription status across app stores. |
| Google Play (and Apple App Store on iOS) | Processing payments and subscriptions. |
These providers process data only to provide their service to us and have their own privacy policies. Your data may be stored and processed in countries other than your own. We may also disclose data if required by law or to protect rights and safety.
4. How long we keep it
We keep your data while your account is active. Read notifications are removed automatically after about 30 days and all notifications after about 90 days. Unused device tokens are removed after about 60 days. When you leave an organization, your notifications for that organization are deleted. Tasks and content you created may remain in the organization's workspace so the team keeps its records, unless you ask us to delete or anonymize them. After you delete your account we remove or anonymize your personal data, except where we must keep it by law or for legitimate security or billing records.
5. Your choices and rights
- Access and correction: you can view and edit your profile in the app.
- Delete your account and data: email us at agherajahnvi@gmail.com from the address on your account with the subject "Delete my TaskFlow account". We will confirm and complete the deletion, normally within 30 days.
- Notifications: you can turn off notifications in your device settings, or mute notification types in the app where available.
- Camera: you can deny or revoke camera permission in your device settings; you can still join with a code.
- Withdraw consent and complaints: you may withdraw consent for optional processing at any time. If you are in India, you have rights under the Digital Personal Data Protection Act, 2023, including to access, correct and erase your data and to nominate a person to exercise your rights; contact us first and we will respond within a reasonable time. Users elsewhere may have similar rights under their local laws.
6. Security
We protect data with encrypted connections, access controls that separate workspaces, and restricted server access. No system is completely secure, so we cannot guarantee absolute security. Tell us straight away if you suspect a problem with your account.
7. Children
TaskFlow is not intended for people under 18, and we do not knowingly collect their data. If you think a child has given us data, contact us and we will delete it.
8. Changes to this policy
We may update this policy. We will change the date above and, for significant changes, tell you in the app before they apply.
9. Contact
Questions or requests: agherajahnvi@gmail.com.