TaskStomp — Privacy Policy

TaskStomp ("we", "us", "the app") is a personal task, finance and habit assistant. This policy explains what information we collect, how we use it, who we share it with, and the choices you have. By creating an account or using the app you agree to this policy.

Information we collect

Account information

• Your email address and display name.
• A password (stored only as a securely hashed value — we never see or store your real password).
• If you sign in with Google: your Google email, name and profile picture, provided by Google after you authenticate. We never receive your Google password.

Content you create

• Tasks, goals, daily challenges, calendar events and reminders.
• Notes and "memories" you record, including any personal facts, preferences, habits or feelings you choose to share with the assistant.
• Financial information you voluntarily enter, such as bills, budgets and spending amounts.
• Messages you send to the in-app AI assistant.

Technical information

• Your device's time zone (used to send reminders at the correct local time).
• A push notification token (used to deliver notifications to your device).
• Basic app settings (language, currency, theme, units).
• If you subscribe to a paid plan: your subscription tier, renewal date, and monthly AI-message usage count.

We do not collect your precise GPS location, contacts, photos, or browsing history.

How we use your information

• To create and secure your account and keep you signed in.
• To provide the core features: storing your tasks, goals, events and memories.
• To power the AI assistant, which reads your messages and relevant saved data to give helpful, personalised responses.
• To send reminders and notifications you ask for.
• To verify your email and allow password resets.

We do not sell your personal data, and we do not use it for advertising.

Who we share it with (service providers)

We use trusted third-party services to run the app. Your data is processed by them only to provide the service:

• Anthropic — powers the AI assistant. Messages and relevant saved context are sent to Anthropic's API to generate responses.
• Railway — hosts our backend server and the database where your account and content are stored.
• Resend — sends transactional emails (verification and password-reset codes).
• Google Firebase — delivers push notifications.
• Google Sign-In — used only if you choose to sign in with Google.
• Google Play Billing — processes all payments for paid subscriptions. We never receive or store your card number or other payment details.
• RevenueCat — manages and verifies subscription status across devices. It receives your purchased product identifier and subscription status, not your payment details.

We may also disclose information if required by law.

AI processing

When you chat with the assistant, your messages and relevant saved data (such as your tasks or memories) are sent to Anthropic's Claude API to generate a response. Please avoid sharing highly sensitive information (such as government IDs, full card numbers or passwords) in chat.

Subscriptions & payments

TaskStomp offers optional paid subscription plans (Spark, Pro and Companion) that unlock AI chat with the assistant. New accounts also get a one-time 7-day free trial of Pro-tier access.

• All payments are processed by Google Play Billing. We never receive or store your card number or other payment details.
• We use RevenueCat to manage and verify subscription status across devices.
• Subscriptions automatically renew each billing period unless cancelled. You can view, change or cancel your subscription at any time through your Google Play Store account settings.
• We store your current plan, renewal date and monthly AI-message usage count in order to enforce your plan's message limits.

Data retention & deletion

We keep your data for as long as your account exists. You can delete your account at any time, directly in the app: Settings → Delete Account. Deletion has a 30-day grace period: your account is scheduled for deletion and you're signed out immediately, but if you log back in within 30 days, your account and all data (tasks, goals, memories, events, notifications and settings) are fully restored. After 30 days, everything is permanently and irreversibly deleted.

Alternatively, you can email taskstomp@gmail.com from your account's email address to request deletion, and we will remove your data within 30 days of a verified request.

Security

• Passwords are hashed with bcrypt; we never store them in plain text.
• All traffic between the app and our server is encrypted over HTTPS.
• Sign-in tokens are stored securely on your device.

No method of transmission or storage is 100% secure, but we take reasonable measures to protect your data.

Children

TaskStomp is not intended for children under 13, and we do not knowingly collect data from them.

Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top reflects the latest version.

Contact

Questions about this policy or your data? Email us at taskstomp@gmail.com.