Privacy Policy

Last updated: September 18, 2026

TaskSync ("we", "us") helps you track the things you own and the maintenance they need. This policy explains what information the TaskSync mobile app and services collect, how it is used, and the choices you have.

Information we collect

• Account information — your email address, name, optional phone number, and password. Passwords are stored as salted hashes.
• Content you add — items, tasks, completion history, notes, mileage entries, costs, and photos or documents you attach. You may choose to record personal appointment or health-related reminders; TaskSync does not provide medical advice.
• Family sharing — family group membership and the email addresses you invite.
• Calendar data — if you connect Google Calendar, we store your connected Google email address, OAuth tokens, and the IDs of events TaskSync creates. We use these only to show the connected account and sync task due dates, changes, and completions to your primary Google calendar. We do not read unrelated calendar events.
• Location — only when you tag an item with a location. You can search for an address, or grant one-time "while using the app" permission to use your current location. We store the address label and its coordinates on that item. We never track your location in the background, and denying the permission leaves every other feature working.
• Device and usage data — your account identifier, a push notification token if you enable notifications, and basic usage timestamps such as last active time. Administrators use these timestamps to understand service activity.

How we use information

• To provide the app: syncing your items, tasks, and reminders.
• To send task reminder notifications and emails you request.
• To let you share items and tasks with your family group.
• To keep the service secure and prevent abuse.

What we do not do

• We do not sell your personal information.
• We do not show advertising.
• We do not share your data with third parties except the service providers below.

Service providers

We use Convex (database and file storage), Resend (transactional email), Expo (push notification delivery), and Google (calendar integration, only if you connect it, and Maps and Places APIs for address search, location tagging and map previews). Address lookups reach Google through our servers, so your device's API usage is not exposed to Google directly. Each provider processes data solely to operate TaskSync. Address searches are cached without your account identifier to reduce repeated requests. Search suggestions expire after ten minutes and place coordinates after thirty days. Map images are not stored in our database.

Data retention and deletion

Disconnecting Google Calendar removes the stored connection and tokens, requests revocation of the Google grant, and removes future TaskSync events from that calendar. Completed event entries remain in your calendar as your history and can be deleted in Google Calendar. Google account and event data is processed by our hosting provider only to operate this optional connection. It is not sold, used for advertising, or used to train AI models.

You can delete your account at any time from Settings → Account → Delete account. Deleted accounts and their content are removed from active systems and become inaccessible immediately. A limited administrative security log records the deletion, including the account name and email. Content already shared with a family may remain available to its other members.

Security

Data is encrypted in transit (TLS). Optional Face ID / Touch ID App Lock protects the app on your device; biometric data never leaves your device.

Children

TaskSync is not directed at children under 13.

Contact

Questions about this policy? Email david@sensara.io.