Taskspell privacy policy

Information Taskspell handles

• Account information: the user identifier and email provided through Floot sign-in, used to identify your workspace and authorize access.
• Task content: task titles, notes, checklists, dates, reminders, repeat rules, completion history, lists, categories, preferences and recovery or trash records. This may include personal information you choose to enter.
• Uploads: files you attach, their names, sizes, types and task associations. Files may include photos, audio or documents you choose to upload.
• Device and notification information: widget pairing and authorization records, device labels, sync and operation records, notification subscriptions, delivery status and timezones needed for reminders.
• Shared lists: shared tasks, member identifiers, email addresses, assignments, invitations and activity or notification records. Other list members can see content and membership information you share with them.
• Sharing safety: your acceptance of the sharing rules (version and date), blocked-user identifiers and labels, reports you submit, and moderation decisions. Reports include your account identifier and contact email, the selected list/task/member reference, reason and explanation, and a limited snapshot of the reported saved content. A task report can include its title, notes and checklist; attached files are not copied into the report.
• Optional Microsoft connection: your connected account email and authorization information, and flagged-message identifiers, subjects, previews, dates, links and flag status needed to show and import flagged email. Imported information becomes saved task content. Disconnecting Microsoft stops future access but does not remove tasks you already imported.
• Support messages: your email address, request and any attachments you send us. Please avoid sending passwords, authentication codes or unnecessary sensitive information.

Why we use this information

We use it to provide task organization, save and synchronize your workspace, connect widgets, deliver requested reminders, operate shared lists and optional integrations, respond to support and privacy requests, and maintain reliability and security. Kaliona does not sell task content or use it for targeted advertising.

Cloud sync is enabled by default for a signed-in workspace. Browser storage and Android app storage also hold local data, preferences and widget caches. Pausing sync or uninstalling the companion does not erase your cloud workspace.

Shared-list safety

Accept the sharing rules before creating, joining, editing or inviting people to shared lists. You can report content or another member, block someone, or leave without accepting. Reports are available to Kaliona for review; they are not shown to other list members. Do not include unnecessary sensitive information in your explanation. Reports are not an emergency service.

Blocking removes the other person from lists you own and removes you from lists owned by someone else that you share with that person. It preserves list content, revokes affected invitation links and prevents sharing together while the block remains active. Unblocking does not restore membership. Previously delivered notifications or independently saved copies cannot be recalled. Kaliona may restrict sharing or remove violating shared content after review. Contact our support email about a moderation decision.

Hosting, analytics and service providers

Floot hosts Taskspell using AWS and Neon in the United States. Optional visitor analytics is disabled in the current Taskspell release. Earlier releases used Floot’s built-in Tinybird analytics for a session identifier, page path, referrer, browser/language information and timezone-derived country. Those historical analytics may remain for the provider’s 12-month retention period. Backend logs last 90 days; CDN, flagged security-request and file-access logs last 30 days. Security/file-access logs may include IP addresses and request details. See Floot’s privacy policy for provider details and controls.

Microsoft processes optional account connections and email access. Browser or operating-system push services process notification delivery and may receive notification content. Google’s Gmail service handles messages sent to our support inbox. These providers process information to deliver their respective services. We may disclose information when required by law or necessary to address fraud, abuse or security incidents.

These public support pages are hosted with ChatGPT Sites. The hosting service processes requests to deliver and secure the pages; we have added no analytics scripts or forms to them. Clicking an email link opens your email application and does not send anything until you send the message.

Security and access

Taskspell uses HTTPS for communication, account-scoped access to cloud records, private attachment storage with temporary download links, and revocable widget credentials. This is not end-to-end encryption: authorized service operators can process data to provide the service. No storage or transmission method is completely secure.

The current Android companion does not request access to your contacts, precise location, camera or microphone. Content that you deliberately upload or type is handled as described above. Taskspell uses Floot sign-in; its account eligibility and age requirements also apply.

Retention and deletion

We keep active workspace content while you use Taskspell, until you remove it or ask us to delete it. Removing a task can leave recoverable trash, reminder history or other associated records; it is not the same as a request to delete all account data. Disconnecting a device, pausing sync and closing a shared list are also not full account deletion.

On a verified full-deletion request, we remove your Taskspell cloud workspace and associated uploads, account links, device credentials, reminder and notification records, recovery data and owned shared-list data from active systems, and remove your membership or identifying references from shared lists held by Taskspell. We also request relevant deletion from service providers where necessary.

To prevent a previously closed account from restoring deleted cloud data, we retain a one-way hash of its Taskspell user identifier and the closure date while the account remains closed. Temporary cleanup records retain attachment storage keys and connected Microsoft email addresses until external removal has been verified, including a delayed recheck for files uploaded just before closure. These records do not retain task content. Contact us if you expressly wish to reopen your Taskspell account.

Sharing-rule acceptance, blocks and sharing-suspension records are removed when your Taskspell account is closed. Safety reports and their limited evidence, reasons and moderation history are kept for up to 90 days from submission to investigate abuse and handle related disputes, including after account deletion. On closure, direct reporter account/contact fields and subject identifiers are cleared; report explanations and evidence may still contain personal information until the report expires. Expired reports are removed by a daily cleanup. Deleted reports can then remain in the seven-day database recovery history described below.

Provider logs and analytics can remain for the periods stated above. Floot documents a seven-day database recovery history for our paid hosting plan; deleted database records may remain in that history until it expires. Floot Storage files are not included in that backup history. See Floot’s database documentation. If information must be retained for a legal obligation, security investigation or dispute, we explain the category, reason and applicable retention period unless legally prohibited. We keep only the support correspondence and minimal request record needed to handle and document your request, and remove it when that purpose ends.

We cannot remotely erase exports, screenshots or copies saved by other people, or local data on devices we cannot reach. We will explain how to clear your local copies and stop an old device from restoring deleted data. Deleting Taskspell data does not delete your separate Floot, Microsoft or Google account.

Your choices and requests

You can edit tasks, export a backup, manage shared lists, pause sync, revoke widget access, disconnect Microsoft and turn off notifications using the relevant app, device or provider settings. You may also ask us to access, correct, export, restrict or delete personal information. Depending on where you live, you may have additional privacy rights, including the right to object to processing or complain to a privacy regulator.

Email holo.kaliona@gmail.com or use the deletion instructions. We may request proportionate information to verify ownership before releasing or deleting data. We respond as promptly as reasonably possible, explain the expected completion timeframe and follow applicable legal deadlines.

Changes to this policy

We will update this page and its effective date when Taskspell’s practices change. Material changes will be communicated through the app or another appropriate channel.