This policy explains what personal data Tasklist.uk ("we", "us") collects, why we collect it, how it is stored, and the rights you have over it. Tasklist.uk is operated by Daniel Lawless in the United Kingdom, and this policy is written to meet the requirements of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
It applies to the Tasklist.uk application at app.tasklist.uk and the website at tasklist.uk.
What we collect
Account information
When you sign in with Google, we receive and store your name, email address, profile picture, and a Google account identifier. We use this to create your account, sign you in, and display your name and avatar inside the app. We do not receive your Google password, and we do not access your Gmail, Drive, Calendar or any other Google service.
Content you create
The app stores whatever you put into it so that it can sync across your devices. This includes:
- Tasks, including titles, descriptions, subtasks, due dates, priorities and projects
- Notes and bookmarks
- Workspaces and their names
- Wellbeing check-ins: your self-reported mood, energy, stress, sleep and happiness scores, and any note you attach to them
- Settings such as your work hours, theme, and preferences
A specific note on wellbeing check-ins: these are health-related data, which UK GDPR treats as a special category requiring extra care. Check-ins are entirely optional. We store them only so you can view your own history and trends, they are never shared with other users, never used for any other purpose, and are deleted along with everything else if you delete your data. By choosing to record a check-in, you consent to us storing it for these purposes; you can stop using the feature at any time.
Activity and progress data
The app records data generated by your use of it: XP earned, levels, streaks, task completion history, and unlocked rewards. This powers the Levels & Rewards features and your personal analytics.
Cookies and local storage
We use one essential session cookie to keep you signed in for up to 30 days. We do not use advertising or tracking cookies. The app also uses your browser's local storage for small preferences, such as remembering that you have seen the first-time tour.
How we use your data
| Purpose | Lawful basis |
|---|---|
| Creating your account and signing you in | Performance of a contract (providing the service you asked for) |
| Storing and syncing your tasks, notes, bookmarks and settings | Performance of a contract |
| Storing optional wellbeing check-ins | Your explicit consent, given by choosing to record them |
| Powering AI features when you use them | Performance of a contract |
| Showing the scoreboard and team features | Legitimate interests (the social features of the app), limited as described below |
| Keeping the service secure and diagnosing faults | Legitimate interests |
We do not sell your data, share it with advertisers, or use it to build advertising profiles. We do not use your content to train AI models.
AI features
Some features (task breakdowns, the daily plan, and the end-of-day recap) use AI. When you use one of these features, the relevant text, such as the title and description of the task being broken down, is sent to Groq, a US-based AI provider, to generate the response. Only the text needed for that specific request is sent. Your account details are not included, and nothing is sent to Groq unless you actively use an AI feature. Groq's handling of this data is described in their own privacy policy.
What other users can see
- Scoreboard: your first name, last name, avatar, level and prestige are visible to other signed-in users. Your email address is never shown.
- Teams: if you join a team, your name, email address and avatar are visible to other members of that team, and tasks on the team board are visible to the team.
- Share links: if you generate a read-only share link for a board, anyone with that link can view the tasks on it without an account. You can revoke a share link at any time from Settings, which disables it immediately.
Where your data is stored
Your data is stored in a PostgreSQL database on a server operated by Hetzner Online GmbH in Germany, within the European Union. The website and the app are both served from this same server, and traffic between your browser and the server is encrypted with TLS (HTTPS).
Where data is transferred outside the UK (for example to Groq in the United States when you use an AI feature), we rely on the safeguards those providers offer, including standard contractual clauses.
How long we keep it
- Your content is kept for as long as you keep your account, so the app can keep working for you.
- Deleted items (tasks, notes, bookmarks) go to the Bin, where they are permanently and irreversibly erased after 24 hours, or immediately if you empty the Bin yourself.
- Sessions expire after 30 days of inactivity.
Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you. The app's Export feature in Settings gives you a copy of your task data at any time, and you can request the rest.
- Correct inaccurate data. Most of your data is directly editable in the app.
- Delete your data. You can clear your data from Settings, or contact us to have your account and all associated data permanently removed.
- Object to or restrict certain processing, and withdraw consent where processing is based on consent (such as wellbeing check-ins), at any time.
- Data portability: receive your data in a machine-readable format, which the Export feature provides.
- Complain to the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have mishandled your data. We would appreciate the chance to resolve any concern directly first.
Children
Tasklist.uk is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child under 13 has created an account, contact us and we will delete it.
Third parties we rely on
| Provider | What they do | Data involved |
|---|---|---|
| Sign-in (OAuth) | Name, email, avatar, account identifier | |
| Hetzner Online GmbH (Germany, EU) | Hosting for the website, app and database | All app data |
| Groq (USA) | AI responses, only when you use an AI feature | The task text relevant to that request |
| Google Fonts | Serves the fonts used by the site and app | Your IP address, as with any web request |
Changes to this policy
If we make meaningful changes to this policy, we will update the date at the top and, for significant changes, let you know in the app. Continued use of Tasklist.uk after a change means you accept the updated policy.
Contact
For anything related to your data or this policy, contact: dannylawless19@outlook.com