Privacy Policy · Task Book

Task Book ("we", "us") is a personal app for keeping track of the work you get done and turning it into a monthly "brag document". This policy explains what information we collect, why, who we share it with, and the choices you have. By using Task Book you agree to this policy.

1. Information we collect

From your Google account

You sign in with Google. We ask Google only for the basic openid, email and profile permissions, which give us:

your Google account ID (a number that identifies your account),
your email address and whether Google has verified it,
your name and profile picture URL.

We do not get your Google password, and we do not access your Gmail, Google Drive, Calendar, contacts or any other Google data.

Information you give us

Profile details you enter when you sign up or edit your profile: full name, job title, and optionally phone number, company, department, years of experience, LinkedIn URL and a short bio.
Tasks you create: titles, descriptions and dates.
Brag documents generated from your tasks for a given month.

Information created automatically

Cookies that are strictly necessary for sign-in (see section 6).
Reminder settings, only if you turn on the daily reminder: your device's push notification address and keys (created by your browser), your time zone, and the reminder time and weekdays you picked. Turning reminders off deletes that device's address.
Basic server logs (such as request time, path and error messages) kept by us and our hosting providers to keep the service running and secure.

We do not use advertising or third-party analytics trackers.

2. How we use your information

To sign you in and keep you signed in.
To show, save and update your tasks and profile.
To generate and polish tasks and brag documents with AI when you ask for it (see section 3).
To send you a daily reminder, if you turned it on, on days you haven't logged a task.
To keep the service secure, fix bugs and prevent abuse.
To reply when you contact us.

We do not sell your data, use it for advertising, or use it to build profiles about you for anyone else.

3. AI features

When you use an AI feature (for example, generating a task from a prompt, polishing a task, or generating a brag document), the text needed for that request, such as your prompt, your task titles and descriptions, and relevant profile details like your job title, is sent to Google's Gemini API to produce the result. This happens only when you use those features. Google processes that data under its own Gemini API terms. AI output can be wrong, so please review it before relying on it.

4. Google user data and Limited Use

Task Book's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we use the data we get from Google sign-in only to create and secure your account and show your name and picture in the app. We do not transfer it to others except as needed to run the service, to comply with the law, or as part of a merger or acquisition with notice to you; we do not use it for ads; and no human reads it unless you ask us to, it is needed for security or to comply with the law. We do not use it to train AI models.

5. Who we share data with

We share data only with service providers that help us run Task Book, and only as much as they need:

Google: sign-in (Google OAuth) and AI features (Gemini API).
Supabase: hosts our database, where your account, tasks and brag documents are stored.
Render: hosts our backend server.
Vercel: hosts the website you use.
Your browser's push service (for example Google for Chrome and Android, Apple for Safari and iPhone, Mozilla for Firefox): delivers the daily reminder if you turn it on. The reminder text is encrypted so only your device can read it.

These providers may store and process data in the United States or other countries. We may also disclose information if the law requires it, or to protect the rights, safety or property of our users or others.

6. Cookies

We use only the cookies needed for sign-in. They are all HttpOnly:

session: keeps you signed in, lasts up to 30 days or until you sign out.
oauth_state: protects the Google sign-in step against forgery, lasts 10 minutes.
signup_token: remembers your Google details while you finish creating your profile, lasts 30 minutes.

If you block these cookies, you won't be able to sign in.

7. How long we keep data

We keep your account, tasks and brag documents for as long as your account exists. Sign-in sessions expire after 30 days. When you ask us to delete your account, we delete your profile, tasks, brag documents and sessions from our database within 30 days. Copies may stay in backups or provider logs for a short extra time before they are overwritten.

8. Your choices and rights

See and change your tasks and profile any time in the app.
Delete your account or get a copy of your data by emailing tanbin.dev@gmail.com. We will reply within 30 days.
Remove Task Book's access to Google any time at myaccount.google.com/permissions.

Depending on where you live (for example the EU, UK or California), you may have extra rights, such as to object to or restrict processing, or to complain to a data protection authority. Contact us and we will help.

9. Security

We use HTTPS, store only a hash of your session token (never the token itself), and limit each account to its own data. No system is perfectly secure, but we work to protect your information and will tell you about a breach that affects you as the law requires.

10. Children

Task Book is not meant for children under 13 (or the minimum age in your country), and we do not knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.

11. Changes to this policy

We may update this policy. We will change the "Last updated" date above, and for important changes we will let you know in the app or by email.

12. Contact us

Questions or requests about your privacy: tanbin.dev@gmail.com. See also our Terms of Service.