Privacy Policy

Last updated September 10, 2026

Shared Tasks is a small household to-do app used by a private group of people to share recurring and one-off tasks. This policy describes exactly what it stores and why. It is not an advertising business: there are no trackers, no analytics, and nothing is sold or shared for marketing.

Information we collect

Your Google account details. When you sign in with Google we receive and store your name, email address, and profile picture URL.
Google sign-in tokens. We store the access and refresh tokens Google issues, so you stay signed in and so scheduled background jobs can act on your behalf.
The content you create. Tasks, projects, teams, recurring task settings, links you attach to tasks, and who each task is assigned to.
Google Calendar data — only if you ask for it. If you link a recurring task to a calendar event, we use read-only calendar access to look up that event. We read the event's title and the start and end times of its occurrences, and store the title, the next occurrence time, and an identifier for each occurrence that has produced a task. We do not read, store, or transmit the contents of other calendar entries, guests, locations, or attachments.
Callback records. A task can carry a link that lets an outside app mark it complete. When such a link is used, we record the time, the IP address, and the browser user-agent of that request, so unexpected or mistaken completions are traceable.
An app token. If you use the companion iOS app, we store a random token that authenticates it. You can regenerate it at any time, which immediately invalidates the old one.

How we use it

Solely to operate the app: to sign you in, to show and share your tasks with the people you share a team with, to create tasks on the schedule or calendar event you configured, and to let you complete tasks from the web, the iOS app, or a link. We do not use your information for advertising, profiling, or training machine learning models, and we do not sell it.

Google user data

Shared Tasks' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Calendar access is read-only, is used only to create the tasks you configured, and is never transferred to anyone else. You can revoke it at any time from your Google account permissions.

Who can see your information

People you share a team with can see the tasks in that team, including who they are assigned to. Beyond that, your data is handled only by the services that run the app: Vercel (hosting), Supabase (database), and Google (sign-in and calendar). We do not share it with anyone else, and we do not sell it.

Keeping and deleting your information

Your data is kept for as long as you use the app. You can disconnect Google access at any time from your Google account permissions page, which stops all calendar access immediately. To delete your account and everything associated with it, email hello@shared-tasks.app and it will be removed.

Security

The app is served over HTTPS and data is stored in a managed Postgres database with restricted access. No system is perfectly secure, but the data here is limited to what is listed above.

Changes

If this policy changes, the date at the top of this page changes with it.

Contact

Questions or deletion requests: hello@shared-tasks.app.