Privacy Policy

Who we are and what this covers

This policy explains how TaskForge handles personal data. TaskForge is the app and the taskforge.md website, operated from Ontario, Canada. For data protection law, we are the data controller for the limited personal data described below.

If anything here is unclear, email us at the address in the Contact section. We're happy to explain.

How TaskForge handles your data

Your tasks are stored as Markdown files inside the vault folder you choose. TaskForge reads and writes those files directly on your device. We do not upload them, copy them, or read their contents for any purpose of our own.

If you sync your vault across devices, that happens through a service you already control, such as iCloud Drive or Dropbox. Your files pass between your devices and your cloud account. There is no TaskForge server in the middle.

App settings can sync between your Apple devices through your own iCloud account. Again, this stays within Apple's iCloud and your account, not our infrastructure. After setup, the app works offline.

What we do not collect

Most privacy policies are long because the app collects a lot. Ours is short because it doesn't. The TaskForge app does not:

• Collect analytics, telemetry, or usage statistics about how you use the app.
• Include any advertising, ad networks, or third-party trackers.
• Require or create an account, a profile, or a login.
• Read your task content, your file names, or your vault for our own purposes.
• Profile you, score you, or make any automated decisions about you.
• Sell, rent, or share your personal information with anyone for marketing.

The limited data we process

There are three narrow cases where data is involved. Each is described plainly below. Apart from completing a purchase, none of this is required: TaskForge is fully usable without giving us any personal information.

Purchases and subscriptions

TaskForge Premium is sold through Apple's App Store (and Google Play on Android). When you buy or subscribe, the payment itself is handled by Apple or Google. We use RevenueCat, a subscription management provider, to confirm your purchase and unlock Premium on your devices. For this, RevenueCat processes your purchase history, an anonymized identifier, the country of purchase, the purchase date, and basic technical information about your device and operating system. This is used only to validate your entitlement. We do not receive your name, your email, or your payment details from this process.

When you email us

If you contact us for support or with feedback, we receive your email address and whatever you write. We use it only to reply and to help with your request. We don't add you to a mailing list, and we don't use it for marketing.

The website

The taskforge.md website uses Plausible Analytics to understand which pages are visited. Plausible is privacy-friendly: it is cookieless, sets no consent banner, does not track you across sites, and collects no personal information. We see aggregate page views and referrers, not individuals. Our web host also keeps standard server logs for security and reliability.

Do we share your data?

We do not sell, rent, or trade your personal information, and we never will. The only third parties involved are the providers that make the cases above work:

• Apple and Google process payments when you buy Premium, under their own privacy policies.
• RevenueCat validates purchases on our behalf, as described above. RevenueCat acts as our data processor.
• Plausible Analytics provides cookieless, anonymous website analytics.

Each of these providers is bound by its own privacy policy and a data processing agreement, and is required to protect your data to a standard consistent with this policy.

We may disclose the little data we hold (such as a purchase record or a support email) if we are legally required to by valid legal process, or where necessary to protect our rights or someone's safety. Given how little we hold, this would rarely apply. Because we do not sell or share your personal information, there is no 'Do Not Sell or Share My Personal Information' link to provide, and we honor browser Global Privacy Control signals as a matter of course.

Legal bases for processing (GDPR)

If you are in the European Economic Area or the UK, we process the limited data above on these legal bases:

• Performance of a contract: validating your Premium purchase so we can deliver what you paid for.
• Legitimate interests: replying to your support emails and understanding website traffic in aggregate, balanced against your privacy.
• Legal obligation: keeping the records that tax and consumer law require.
• Consent: where the law requires it, and which you can withdraw at any time.

Your rights

Under laws such as the GDPR and the CCPA, you have rights over your personal data. Because almost everything stays on your own device, you already control most of it directly. For the limited data we or our providers hold, you can ask to:

• Access the personal data we hold about you.
• Correct it if it's wrong.
• Delete it.
• Receive a copy in a portable format.
• Object to or restrict how we use it.
• Withdraw consent where processing relies on it.
• Lodge a complaint with your local data protection authority.

To exercise any of these, email us using the Contact section below. Your task files are yours to edit or delete at any time; deleting the app and your vault removes that data entirely. For purchase records, you can also contact Apple, Google, or RevenueCat directly. We will never treat you differently for exercising any of these rights.

International data transfers

Our providers (RevenueCat, Plausible, and our web host) may process data on servers outside your country, including in the United States and the European Union. Where personal data is transferred internationally, we rely on those providers' safeguards, such as standard contractual clauses, to keep it protected.

How long we keep data

We don't store your tasks at all, so there is nothing to retain there. Purchase records are kept by Apple, Google, and RevenueCat for as long as needed to manage your subscription and to meet legal and tax obligations. Support emails are kept only as long as needed to handle your request and any follow-up. Website analytics are aggregate and not tied to you.

Security

Your task files are protected by your own device and the cloud service you choose to sync with. Our providers use encryption in transit for purchases and website traffic. No method of storage or transmission is ever completely secure, but because we hold so little personal data, there is very little about you for anyone to expose.

Children's privacy

TaskForge is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we will remove it.

Links to other sites

Our website and app may link to sites we don't operate, such as Obsidian or app store pages. We aren't responsible for their content or privacy practices, so we suggest reviewing the privacy policy of any site you visit.

Changes to this policy

If we change how we handle data, we'll update this page and the date at the top. If a change is significant, we'll make it prominent. Continued use of TaskForge after a change means you accept the updated policy.

Contact us

Questions about this policy or your data? We read every message:

• By email: azhar@taskforge.md