Privacy Policy
Last updated: December 18, 2025
1. Information We Collect
Account Information
When you create an account, we collect:
- Name and email address
- Password (stored securely using bcrypt hashing)
- Phone number (optional, for SMS notifications)
- Timezone preference
Usage Data
We automatically collect certain information when you use the Service:
- IP address and browser user agent
- Pages visited and features used
- Session duration and activity timestamps
- Device type and operating system
Location Data (Premium Feature)
If you enable geolocation features, we may collect your location to provide location-based task reminders. This is entirely optional and can be disabled at any time.
User Content
We store the content you create including projects, tasks, categories, locations, and templates.
2. How We Use Your Information
We use your information to:
- Provide and maintain the Service
- Send email notifications and daily digests (if enabled)
- Send SMS reminders (if opted in, premium feature)
- Process payments through Stripe
- Improve the Service through analytics
- Respond to support requests
- Detect and prevent fraud or abuse
3. Information Sharing
We do not sell your personal information. We may share data with:
- Service Providers: Stripe (payments), Postmark (email), Twilio (SMS), Sentry (error tracking)
- Collaborators: Users you invite to share projects can see project and task data
- Legal Requirements: When required by law or to protect our rights
4. Data Security
We implement industry-standard security measures:
- Passwords are hashed using bcrypt
- All data transmitted over HTTPS/TLS
- Database access restricted to internal network only
- Regular security audits and updates
- Session tokens with automatic expiry (36 hours of inactivity)
5. SMS Communications
If you opt in to SMS notifications:
- We record your opt-in timestamp and IP address for compliance
- Messages are sent via Twilio
- Standard message and data rates may apply
- You can opt out at any time in your account settings
6. Cookies and Tracking
We use essential cookies for authentication and session management. We use Ahoy for analytics to understand how users interact with the Service. Analytics data is only accessible to administrators and staff.
7. Data Retention
We retain your data as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or business purposes.
8. Your Rights
You have the right to:
- Access your personal data
- Export your data in JSON format (premium feature)
- Correct inaccurate information
- Delete your account and associated data
- Opt out of marketing communications
- Disable location tracking
9. Demo Account
The demo account (demo@tasknibbler.com) is for demonstration purposes only. Data in the demo account is reset nightly and should not be used for real tasks. No emails are sent to the demo account.
10. Children's Privacy
The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the Service.
12. Contact Us
For privacy-related questions or to exercise your rights, contact us at privacy@tasknibbler.com.