TaskLoop Logo TaskLoop Back to Home
Transparency & Compliance Last updated: October 2026

Privacy Policy & Privacy-by-Design

Transparency, data portability, and user independence are the core principles of TaskLoop. This policy details where your data resides, how we protect your privacy, and our compliance with European regulations (GDPR & Data Act).

1. Offline-First Storage: You Own Your Data

By default, TaskLoop operates in a 100% local mode.

  • No Account Required: You do not need to register, provide an email address, or create a profile to download and use the application.
  • Local Database: All your tasks, subprojects, tags, checklists, pomodoros, and notes are stored locally in a secure database on your device (SQLite for desktop, localStorage for web fallback).
  • Zero Data Transmission by Default: Unless you manually enable the optional cloud sync feature, no task data ever leaves your device.

2. Optional Cloud Sync & Data Sovereignty

Cloud sync is an optional feature enabled only upon user request to allow multi-device coordination.

Data Residency (EU Servers)

The database and file storage used for synchronization (Supabase) are hosted in the European Union (EU Central region, Frankfurt, Germany). When you sign in, TaskLoop stores there your tasks, subtasks, projects, tags, settings and, for Pro accounts, the files you attach (up to 1 MB per file, 25 MB per account). Reminder notifications on iPhone and iPad are delivered through Apple's push service, which receives the task title and your device's push token; nothing else leaves the EU.

Sign in with Apple or Google

Signing in is only needed to sync between devices. Sign in with Apple and Google Sign-In are used strictly for authentication. In line with GDPR's data minimization principle:

  • We receive only your name, email address and an account identifier. With Sign in with Apple you can hide your email: we then receive only a private relay address.
  • We do not read your Google Drive, calendar, contacts or any other Apple or Google account data.

Notifications and purchases

  • Reminders: if you allow notifications on iPhone or iPad, we store your device's push token and time zone, linked to your account, only to send task reminders.
  • TaskLoop Pro: App Store subscriptions are processed by Apple; we never see your payment details. To unlock Pro on all your devices we store the subscription status (product, expiry date, transaction identifier) linked to your account. Desktop licences are validated with our licensing provider (Freemius).
  • Import from Todoist: the app connects directly to Todoist with the API token you paste; the token is not stored and no data passes through our servers.
  • We use no advertising, no tracking and no third-party analytics inside the app.

3. European Regulatory Adherence (GDPR, Data Act & DGA)

TaskLoop is built following Privacy-by-Design and Privacy-by-Default principles, in compliance with European standards:

GDPR Compliance

Users can exercise their rights at any time:

  • Right to Access and Rectification: View or edit your data directly within the app.
  • Right to Erasure ("Right to be Forgotten"): In Settings → Account → Delete account you can delete your account at any time. Your tasks, projects, tags, settings, attached files, push tokens and subscription records are permanently erased from our servers right away, and the app is cleared on that device. If you signed in with Apple, your Apple sign-in token is revoked too. An App Store subscription is not cancelled automatically: manage it in your App Store settings.

Data Act & Portability (Switching)

In compliance with the European Data Act (active 2025/2026) on data portability and eliminating vendor lock-in:

  • No Lock-in: The data belongs to you.
  • Open Format: Settings → Export your data saves your whole database as a JSON file, for backups or to move to another tool.

4. Website Analytics

Website Analytics: We use Simple Analytics to monitor website traffic and usage. Simple Analytics is a privacy-first analytics platform that is fully GDPR-compliant, does not use cookies, does not collect personal data, and does not store IP addresses. We also track download counts anonymously (incrementing a platform counter on Supabase) to measure platform interest. No personal telemetry or user tracking is associated.

For any inquiries or requests regarding your data, contact our dedicated privacy email:

privacy@taskloop.app