Privacy Policy

Taskli is a family task tracker for iOS. Parents assign chores; children and teens complete them, earn in-app credits, and redeem them in a reward shop their parents control. This Privacy Policy explains what personal data we collect, why we collect it, how we keep it safe, and the choices and rights you have. We've written it to be readable — not just legally complete.

1. Who we are

Taskli ("Taskli", "we", "us", or "our") is operated by an independent developer established in the European Union, acting as the data controller for the personal data described in this policy. For any privacy question or to exercise your rights, contact us at ppa.ilksat@ycavirp . For general support, write to ppa.ilksat@troppus .

This policy applies to the Taskli iOS app and the Taskli website at taskli.app (together, the "Service").

2. What data we collect

We collect only the data needed to operate the Service:

Category	What it includes
Account data	Display name, email address, a securely hashed password, and your role in the family (parent or child).
Family data	The family you create or join, family membership, and invitation details used to add members.
Activity data	Tasks, subtasks, comments, deadlines and statuses; rewards and reward claims; credit transactions and balances; achievements and streaks.
Preferences	Your notification settings and in-app configuration (for example, archive and badge preferences).
Device & technical data	A push-notification token issued by Apple (APNs) so we can deliver alerts to your device, and basic technical logs (such as timestamps and error information) needed to run and secure the Service.

We do not collect precise location, contacts, photos, payment card details, biometric data, or device advertising identifiers. We do not operate an advertising network and we do not embed third-party advertising or analytics trackers in the app.

2.1 Website analytics & cookies

This applies to our website at taskli.app only — the Taskli iOS app contains no analytics or tracking SDKs. On the website we use Google Analytics (provided by Google LLC) to understand aggregate, anonymous traffic — such as which pages are visited and roughly where visitors come from — so we can improve the site. We use Google Consent Mode: analytics is off by default and only runs after you accept it in the cookie banner, which then stores analytics cookies on your device. If you decline, no analytics cookies are set and no analytics data is collected. You can change your choice at any time by clearing this site's cookies and local storage in your browser, which makes the banner appear again. We have configured Google Analytics so that it is not used for advertising or ad personalisation.

3. How we use your data and our legal bases

Under the EU General Data Protection Regulation (GDPR), we rely on the following legal bases:

• Performance of a contract (Art. 6(1)(b)). To create and maintain your account, run your family's boards, track tasks and credits, and provide the core features of the Service.
• Legitimate interests (Art. 6(1)(f)). To keep the Service secure, prevent abuse, diagnose problems, and improve reliability — balanced against your rights and freedoms.
• Consent (Art. 6(1)(a)). To send push notifications, which you can enable or disable at any time in your device and in-app settings. Where applicable, we rely on the consent of a parent or guardian for the processing of a child's data (see section 5).
• Legal obligation (Art. 6(1)(c)). To comply with applicable law and respond to lawful requests.

4. Children's privacy

Taskli is designed for families and is intended to be set up and supervised by a parent or guardian. We take children's privacy seriously.

• A child account is created by invitation: a parent invites the child to their family. By inviting a child and helping them set up their account, the parent confirms they hold parental responsibility for that child and consents to the processing of the child's data as described here.
• Where a child is below the age of digital consent in their country (between 13 and 16 depending on the EU member state), the child's use of Taskli requires the consent and supervision of a parent or guardian, which is given and managed through the inviting parent's account.
• We practise data minimisation for children: a child account only needs a display name, an email, and a password. We do not use children's data for advertising, profiling, or any marketing, and we never sell it.
• A parent can view, manage, and delete their child's data at any time — including removing the child from the family or deleting the child's account (see section 8).

If you believe a child has provided us data without appropriate parental involvement, contact ppa.ilksat@ycavirp and we will delete it promptly.

5. Who we share data with

We do not sell your personal data and we do not share it for advertising. We share data only with the service providers ("processors") needed to run Taskli, under contracts that require them to protect it:

• Cloudflare, Inc. — hosting and database (Cloudflare Workers and the D1 database). Your account and activity data are stored on Cloudflare's infrastructure.
• Apple Inc. — delivery of push notifications via the Apple Push Notification service (APNs), and distribution of the app through the App Store.
• Google LLC — privacy-friendly website analytics (Google Analytics) on taskli.app, used only with your consent. This applies to the website only, not the app.

Within your family, data is shared as the product requires: parents can see and manage tasks, credits, and rewards across the family, while children see the tasks assigned to them and their own credits and rewards. We may also disclose data where required by law or to protect the rights and safety of users.

6. International data transfers

Our providers (Cloudflare, Apple, and Google) may process data on servers located outside the European Economic Area (EEA). Where data is transferred outside the EEA, it is protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.

7. How long we keep data

We keep your personal data for as long as your account is active and as needed to provide the Service. Some activity data (such as tasks, credit history, and reward claims) may be automatically archived or pruned according to your family's archive settings. When you delete your account, we delete the associated personal data as described below, except where we must retain limited information to comply with a legal obligation or to resolve disputes.

8. Account deletion & data removal

You are always in control of your data:

• Delete your own account. In the app, go to Settings → Delete account. For security, this requires re-entering your password. Deleting your account removes your personal data from the Service.
• Remove a child. A parent can remove a child from the family, which deletes that child's personal data while reassigning shared family records to a remaining parent.
• Closing a family. If the last remaining parent deletes their account, the entire family — including all child accounts and family data — is deleted.

Deletion is permanent and cannot be undone. If you need help, contact ppa.ilksat@ycavirp .

9. Your rights

If you are in the EEA or UK, you have the right to:

• access the personal data we hold about you;
• rectify inaccurate or incomplete data;
• erase your data ("right to be forgotten");
• restrict or object to certain processing;
• data portability — receive your data in a structured, machine-readable format;
• withdraw consent at any time, without affecting prior processing; and
• lodge a complaint with your local data protection supervisory authority.

To exercise any of these rights, email ppa.ilksat@ycavirp . We will respond within the time limits required by law (generally one month).

10. How we protect your data

We use appropriate technical and organisational measures to protect your data, including encryption of data in transit (TLS/HTTPS), securely hashed passwords, role-based access controls, and short-lived authentication tokens. No method of transmission or storage is perfectly secure, but we work to protect your data and to address vulnerabilities promptly. If a data breach is likely to affect your rights, we will notify you and the relevant authority as required by law.

11. Additional information for United States residents

The following disclosures apply to users in the United States and supplement the rest of this policy.

11.1 Children's privacy under COPPA

Taskli complies with the U.S. Children's Online Privacy Protection Act (COPPA). Because a child account is created only when a parent invites the child, the parent receives direct notice of — and provides verifiable consent to — our collection and use of their child's information at the time of the invitation.

• We collect only a child's display name, email, and password, plus the in-app activity needed to run the family (tasks, credits, rewards, achievements). We collect no more than is reasonably necessary, and we never condition a child's participation on disclosing more than is needed.
• We never use children's data for behavioral advertising or profiling, and we do not disclose it to third parties except the service providers needed to operate Taskli (see section 5).
• A parent may at any time review the personal information collected from their child, refuse to permit its further collection or use, and direct us to delete it — by managing or removing the child in the app (Settings), or by emailing ppa.ilksat@ycavirp .

If you believe we have collected information from a child without the required parental consent, contact ppa.ilksat@ycavirp and we will delete it.

11.2 California and other U.S. state privacy rights (CCPA/CPRA)

If you are a resident of California or another U.S. state with a comprehensive privacy law (for example, Virginia, Colorado, Connecticut, Utah, or Texas), you have the right to:

• know and access the personal information we collect about you and how we use it;
• request deletion of your personal information;
• correct inaccurate personal information; and
• not be discriminated against for exercising these rights.

We do not sell or "share" your personal information, and we do not use it for cross-context behavioral advertising — for any user, including minors. The categories of personal information we collect are described in section 2. To exercise your rights, email ppa.ilksat@ycavirp ; we will verify your request and respond within the time required by law. You may use an authorized agent to submit a request on your behalf.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you in the app. Your continued use of the Service after an update means you accept the revised policy.

13. Contact us

Questions about privacy or your data? Email ppa.ilksat@ycavirp . For everything else, reach us at ppa.ilksat@troppus .