Privacy Policy
Last updated: April 14, 2026
1. Information We Collect
We collect the following information when you use Taskly:
- Account information: Name, email address, and hashed password
- Task data: Task titles, descriptions, due dates, labels, notes, and subtasks you create
- Usage data: Activity logs of actions performed within the app (retained for 90 days)
2. How We Use Your Information
We use your information to:
- Provide and operate the Taskly service
- Send transactional emails (email verification, password reset)
- Display your task data within the application
- Improve the Service and fix bugs
3. Data Storage and Security
Your data is stored in MongoDB Atlas with encryption at rest. Passwords are hashed using bcrypt and never stored in plaintext. Authentication uses secure httpOnly cookies with JWT tokens.
4. Data Retention
- Account data is retained as long as your account is active
- Activity logs are automatically deleted after 90 days
- Password reset tokens expire after 1 hour
- Email verification tokens expire after 24 hours
5. Third-Party Services
We use the following third-party services:
- Resend: For sending transactional emails (verification and password reset). Your email address is shared with Resend only for this purpose.
- MongoDB Atlas: For database hosting and storage.
6. Cookies
We use a single httpOnly cookie to maintain your authenticated session. This cookie is essential for the Service to function and cannot be opted out of while using the app.
7. Browser Notifications
If you enable deadline reminders, we request browser notification permission. This is entirely optional and can be revoked at any time through your browser settings. We do not use push notification services — all notifications are generated locally in your browser.
8. Your Rights
You have the right to:
- Export your task data at any time using the CSV export feature
- Delete your account and all associated data by contacting us
- Update your account information through the Profile page
9. Children's Privacy
Taskly is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification. Continued use of the Service after changes constitutes acceptance of the updated policy.
11. Contact
If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us through the app.