Privacy

This page says, in plain words, what OnTask keeps about you and why. It covers the OnTask app and this website. Questions go to support@on-task.co.

This website

This site sets no cookies and runs no trackers or third-party scripts. The waiting-list form sends nothing yet: it only checks that an address looks right and asks you to email us.

When you sign in

You sign in with Google, with Apple (on iPhone), or with your email address and a one-time code. We keep:

how you signed in, and the identity and email address that sign-in gives us;
your name, if Google or Apple offers one (email sign-in gives none);
your beta access state: the address you put on the waiting list and the history of any access code given to your account.

What the app keeps so it works

Your record. The sessions you count, your activities with their names and leverage, your habits, and the answers you give during setup. They are saved on our server so your record is safe and reaches the phone you sign in on.
Your devices. For each phone: its platform, system version, app build, the region its settings name, and when it last synced.
Approximate location. At each sync we look up a city and country from your network address and keep only the city, the country and the date. There is no GPS and no location permission.
Server logs. Our server logs keep a network address for 30 days, and then it is gone. It is never stored with your account.
Problem reports. If you send one, we keep its text and anything attached to it.
Premium. Beta testers hold Premium for six months. If you buy Premium, the purchase is made in the App Store or Google Play; RevenueCat handles the receipt, and we keep the receipt’s identifiers and whether it is active.

Usage data, and the switch that stops it

To learn where the app helps and where it fails, OnTask sends usage events and crash reports to PostHog, which processes them for us and hosts them in the United States.

Nothing is sent before you tap a sign-in button.
Events carry a pseudonymous account code — never your email, your name or your sign-in identity.
Your activity and habit names never go to PostHog, and no free text does.
PostHog is set to store no network (IP) address with any event.
Subscription events from RevenueCat reach PostHog too.
“Share usage data”, a switch in the app’s settings, is on until you turn it off. Off, your phone sends no usage events and no crash reports, and our server stops passing your events to PostHog. Nothing held back while it is off is sent later.

OnTask does not use your data to track you across other companies’ apps or websites.

Getting a copy of your data

Email support@on-task.co. We first check that you hold the account. The copy holds all the personal data our server keeps about your account: your full record, your account and sign-in details, your Premium and access-code history, your devices and sync details, and your problem reports. It is made on our server and sent to you, and our copy is deleted as soon as it has been sent.

Deleting your account

You can delete your account in the app’s settings, or ask us to do it for you. Deletion is scheduled for 14 days later; signing in again during those 14 days cancels it. After that, your account and your record are erased, and so is what PostHog holds about you.

Still to come

How long each kind of data is kept beyond what is stated above, the legal grounds we rely on, and your rights where you live: this draft will be completed before public launch.