Privacy Policy for TaskDeck

Last updated: August 2026

TaskDeck operates as a native desktop application for macOS. We prioritize user privacy and data security.

1. Information We Collect & Data Storage

TaskDeck is designed as a local-first desktop application. We do not maintain external application servers to store your personal information, tasks, or calendar data. All core user data is processed locally on your device.

2. Google User Data Accessed

TaskDeck accesses specific Google user data through official Google APIs strictly to display, manage, and synchronize your tasks and calendar events directly within the desktop workspace:

• Google Tasks Data: Task titles, descriptions, due dates, completion status, task list names, and hierarchical subtask structures via the Google Tasks API.
• Google Calendar Data: Event titles, start and end times, descriptions, event status, and calendar list metadata via the Google Calendar API.
• Account Identifiers: Your Google Account email address and basic profile details used solely for multi-account authentication, identification, and sync status within the app interface.

3. Data Protection Mechanisms for Sensitive Data

We implement strict industry-standard technical controls to safeguard all sensitive user data and authentication credentials:

• Data Encryption in Transit: All communications between TaskDeck and Google APIs strictly use secure, encrypted channels via HTTPS/TLS 1.2+ (Transport Layer Security) to prevent interception, eavesdropping, or tampering during transit.
• Data Encryption at Rest: Sensitive authentication tokens (including OAuth 2.0 access and refresh tokens) are securely stored on your local machine using the native system macOS Keychain Services, which utilizes AES-256 hardware-level encryption. Cached app data stored locally relies on native macOS FileVault encryption.
• Access Controls & Isolation: Credentials and cached data are isolated within the application’s sandboxed environment, preventing unauthorized external access or cross-application leakage.

4. Retention and Deletion of Google User Data

Data retention and deletion are managed under the following policies:

• Local Retention & Storage: All retrieved Google user data (tasks and calendar events) and OAuth credentials are stored exclusively on your local device to support offline functionality and application performance.
• Data Deletion: You can delete your cached Google user data at any time by signing out of your account or removing the account within TaskDeck settings. Signing out immediately and permanently deletes all stored OAuth credentials, refresh tokens, and locally cached task and calendar data from your machine.
• Revoking Access: You can revoke TaskDeck’s access to your Google account at any time via Google Security Settings. Upon revocation, TaskDeck will no longer be able to access or sync your data, and local credentials will be cleared.

5. Data Sharing & Third Parties

We do not collect, sell, rent, track, or transfer your Google user data to external servers, analytics providers, or third parties. All data transfers move directly and securely between your local TaskDeck application and Google's official API endpoints.

6. Contact Us

If you have any questions regarding this privacy policy or data security practices, please contact us at: support@agoldschmidt.com

← Back to TaskDeck