Privacy Policy

This Privacy Policy explains how Tasklogy (app.tasklogy.eu) processes personal data when you register for an account, use the application, share lists or tasks, generate an API key, or contact us.

Tasklogy is a task management application. We process the data you enter — tasks, lists, tags, comments, attachments — only to provide that functionality back to you and to anyone you explicitly share it with.

Controller: daxaa, s.r.o

Address: Mierová 70, 821 05 Bratislava, Slovakia

Privacy email: dpo@tomisko.anonaddy.com

Support email: captaintask@tasklogy.eu

Data Protection Officer: Tomáš Szarka — dpo@tomisko.anonaddy.com

We collect only the data needed to operate the account and features you use:

• Account information — your email address and password (stored as a salted hash, never in plain text), used for registration and authentication.
• Task data — lists, tasks, subtasks, tags, due dates, priorities, comments, and file attachments you create.
• Sharing data — which lists or tasks you've shared with other Tasklogy users, and any guest-access codes you generate for one-off external access.
• API keys — if you generate one from your profile, stored as a hash, used to authenticate requests to the Tasklogy API.
• Notification preferences — your email/push notification settings and, if push is enabled, a randomly generated notification topic (no third-party push network is used; notifications are delivered through infrastructure we operate ourselves).
• Server and session data — IP address, browser or user agent, and timestamps, used for authentication, security, and troubleshooting.
• Cookies — a session cookie required to keep you signed in, and (on this marketing site only) an optional analytics cookie set only with your consent.

An account is required to use Tasklogy's core features. This marketing site itself can be browsed without an account.

We use your data only to:

• Provide the application's functionality — lists, boards, calendar, smart views, recurring tasks, and the API.
• Deliver the sharing, guest-access, and approval-workflow features you choose to use.
• Send task reminders and notifications you've opted into, by email or push notification.
• Secure your account, investigate abuse, and troubleshoot technical issues.
• Respond to support requests you send us.

We do not sell your personal data, and we do not use your task content for advertising.

Under the GDPR, we process personal data only where we have a valid legal basis. Depending on the feature, this may include:

• Contract necessity — to create and operate your account and provide the features you use.
• Legitimate interests — for account security, abuse prevention, and service operation.
• Consent — for the optional analytics cookie on this marketing site.
• Legal obligation — where we must retain or disclose information under applicable law.

When you share a list with another Tasklogy user, that user can see and, depending on the permission you grant, edit the tasks in it. When you generate a guest-access code for a task or list, anyone with that code can view or act on it without creating an account, until the code expires or you revoke it.

You are responsible for choosing who you share lists, tasks, or guest codes with.

Tasklogy uses cookies for two purposes:

• Strictly necessary — required to keep you securely signed in to the app and to remember your cookie preferences. These can't be switched off.
• Analytics — help us understand how this marketing site is used, so we can improve it. Only set with your consent, via the cookie banner shown on your first visit. No analytics cookie is currently active on this site.

You can change your cookie preferences at any time using the "Cookie preferences" control on this site.

We do not sell personal data. We share data only with service providers that help us operate Tasklogy — currently our hosting provider and our email delivery provider. Push notifications are delivered through infrastructure we operate ourselves, not a third-party push network. These providers process data only as needed to provide their services, under a data processing agreement where required.

We prefer that personal data is processed within the EEA. If any personal data is transferred outside the EEA by a processor we use, we rely on legally recognized safeguards, such as an adequacy decision or standard contractual clauses.

• Account and task data — kept for as long as your account is active. You can edit or delete individual tasks, lists, or attachments at any time.
• Trash — a deleted task is recoverable from Trash for 30 days, after which it's permanently and automatically removed.
• Guest-access and share codes — expire automatically after a limited time, or immediately if you revoke them.
• API keys — kept until you revoke them from your profile.
• Server and activity logs — kept for a limited operational period, then periodically purged.
• Account deletion — on request, your account and associated task data are permanently deleted, subject to any residual copies in routine backups, which are cycled out over time.

If you are in the EU or otherwise protected by applicable privacy law, you may have the right to request:

• Access to your personal data
• Correction of inaccurate data
• Deletion of data
• Restriction of processing
• Portability of data where applicable
• Objection to certain processing
• Withdrawal of consent where consent is the legal basis

Many of these can be exercised directly in the app — editing your profile, exporting or deleting tasks, or revoking API keys and shares. For anything else, contact us at dpo@tomisko.anonaddy.com.

We apply standard security practices across the platform: passwords are stored using secure salted hashing, authentication is protected via sessions and API keys you control, access is restricted per account with no cross-account data access, and administrative access is restricted and logged.

No online service can be guaranteed completely secure, but we take reasonable technical and organisational steps to protect the data we process.

Tasklogy is not intended to knowingly collect personal data from children under 16 where consent is required for online services. We do not use solely automated decision-making that produces legal or similarly significant effects on users.

If you have privacy concerns, please contact us first at dpo@tomisko.anonaddy.com.

You also have the right to lodge a complaint with the Slovak supervisory authority:

Office for Personal Data Protection of the Slovak Republic
Website: dataprotection.gov.sk
Complaint guidance: Proceedings on the protection of personal data

We may update this Privacy Policy from time to time. Changes will be published on this page with a revised "Last updated" date. See also our Terms of Use.