This Privacy Policy explains how TaskFlow ("we", "our", or "the app") collects, uses,
stores, and protects your information when you use our personal task management
application. By using TaskFlow, you agree to the practices described in this policy.
1. Information We Collect
Task data: Tasks, subtasks, due dates, priorities, reminders, notes, and categories you create are stored locally on your device using an encrypted database.
Account information: If you register an account, we collect your email address, display name, optional username, and optional profile photo.
Profile information: You may optionally provide a short bio and a username to personalize your account. These are stored on our servers only when you sign in.
Cloud backup data: If you enable cloud backup (optional, account required), your task data is uploaded to our servers and/or Firebase Cloud Storage so you can restore or sync across devices.
Authentication tokens: We store encrypted authentication tokens on your device to keep you signed in securely.
Usage analytics: We do not collect behavioral analytics, usage telemetry, or advertising identifiers. We do not track how you navigate the app.
Device information: We do not collect device identifiers, IMEI, or OS-level advertising IDs.
2. How We Use Your Information
Core functionality: Task data is used solely to provide the task management features you expect.
Cloud backup & sync: If opted in, your encrypted task data is stored to enable backup and restore across your own devices.
Authentication: Your email is used to authenticate your account and to send password-reset or email-verification messages when you request them.
Profile display: Your display name, username, bio, and profile photo are shown within the app to personalize your experience. They are not shared publicly or with third parties.
Service communications: We may send transactional emails (verification, password reset). We do not send marketing emails without your consent.
3. Data Storage & Security
Local storage: All task data is stored locally on your device using Hive, an encrypted local database. No task data leaves your device unless you explicitly enable cloud backup.
Cloud storage: When cloud backup is enabled, data is transmitted over HTTPS and stored with industry-standard encryption in transit and at rest on MongoDB Atlas.
Profile photos: Profile photos you upload are stored on our backend server and served over HTTPS. Only you can update or delete your photo.
Authentication security: Passwords are hashed using bcrypt (cost factor 12) and are never stored in plain text. Access tokens expire after 15 minutes; refresh tokens expire after 30 days.
Third-party services: We use Firebase (Google) for email/password authentication and optionally for cloud storage. Google's Privacy Policy applies to data processed through Firebase infrastructure.
4. Data Sharing
No selling: We do not sell, rent, or trade your personal data to any third parties.
No advertising: We do not use your data for advertising, profiling, or remarketing.
Service providers: We share minimal data with trusted service providers (MongoDB Atlas, Firebase, SMTP email provider) only as necessary to operate the app, and only under confidentiality agreements.
Legal requirements: We may disclose information if required by law, court order, or to protect the rights, property, or safety of our users or the public.
5. Your Rights & Choices
Access & correction: You can view and update your account information (display name, username, bio, profile photo) at any time from the Profile screen.
Disable cloud backup: You can disable cloud backup at any time from Settings → Cloud Backup. This stops any future uploads; existing cloud data is retained until you delete your account.
Delete your account: You can permanently delete your account and all associated cloud data from Settings → Delete Account. This action is irreversible.
Local data: Uninstalling the app removes all locally stored task data from your device.
Data portability: You may request an export of your task data by contacting us at the email below.
6. Data Retention
Active accounts: We retain your account data for as long as your account is active.
Deleted accounts: Upon account deletion, all personal data and cloud backups are permanently removed within 30 days.
Inactive accounts: Accounts with no activity for 24 consecutive months may be scheduled for deletion. We will notify you by email before any such action.
7. Children's Privacy
Age requirement: TaskFlow is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided personal data, we will promptly delete it.
8. International Users
Data location: Our servers are located in regions supported by our cloud providers. By using TaskFlow, you consent to your data being processed in those locations.
9. Changes to This Policy
Updates: We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date above. Continued use of the app after changes are posted constitutes your acceptance of the revised policy.
10. Contact Us
Questions or requests: If you have questions about this Privacy Policy, wish to exercise your data rights, or need to report a privacy concern, please contact us at: devxhive@gmail.com