Privacy
Your household's data is yours.
SharedTasks holds the minimum it needs to run a shared task list, and nothing it holds is sold, shared, or used for advertising. Draft policy — pending legal review before launch.
What we collect
- Account: your name, email address, a hash of your password (bcrypt — we never see the password itself), timezone, and an avatar colour.
- Content you create: tasks, checklists, messages, photos, invitations, and reactions inside your groups.
- Device records: push notification subscriptions for devices you enable them on, and a security audit trail of sign-ins and account changes (IP address and browser identifier included) so you can spot activity that isn't yours.
What we don't do
- No analytics or tracking scripts — not on this site, not in the app.
- No advertising, no data sales, no third-party profiling.
- Photos are re-encoded on upload, which strips location (EXIF/GPS) and other embedded metadata before storage.
- Crash reports (Sentry) are configured to exclude personal information and message content.
Who can see what
- Content you post in a group is visible to that group's members.
- If you leave a group, content you contributed while a member (tasks, messages, checklist items) remains visible to the group — the same way your messages stay in a group chat after you leave it.
- Direct messages are archived, not deleted, when one participant leaves the shared group; the remaining participant keeps their copy of the conversation.
Retention and deletion
- Deleted items are retained for up to 30 days to keep offline devices in sync, then purged.
- Deleting your account destroys your sessions, tokens, push subscriptions, invitations, reactions, and the email traces in the audit log. Your name is anonymised on content that structurally has to remain (e.g. messages already in a group's timeline).
- Unverified accounts and expired tokens are cleaned up automatically.
Your data, portable
You can download everything we hold about you as a single JSON file from your profile page at any time, and delete your account from the same place — no email required, no waiting period.
We send transactional email only: verification, password resets, invitations, and security notices. There is no marketing list.
Contact
Questions about your data? Contact us and a human will answer.