Privacy Policy for TaskRace
Last updated: September 14, 2026
Overview
TaskRace ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use TaskRace on Android, iOS, or the web.
The information described below is used solely to operate TaskRace's core features (syncing your tasks across your devices, authenticating you, powering the gamification/points system) and to improve the app and your experience in it. It is never packaged, shared, or monetized as a product in itself.
Information We Collect
1. Information You Provide
- Account Information — when you sign in with Google or Sign in with Apple: email address, name, and a unique user ID from the provider you chose.
- User-Generated Content — tasks and to-do items, projects and project tasks, recurring tasks, time block assignments, custom pit stop suggestions.
2. Automatically Collected Information
- Analytics Data (via Amplitude) — app usage patterns, feature interactions, session duration, device type/OS, app version. Anonymized and used only for improving app functionality.
- Crash Reports (via Firebase Crashlytics) — app crash logs, device state at time of crash, stack traces. Used to identify and fix bugs.
3. Voice Input (Optional Feature)
TaskRace uses voice input for several optional, opt-in features: Morning Standup, Evening Review, ad-hoc Voice Assist, and the wellness Help Chat.
- Microphone Access — used only while you are actively speaking to the app in one of these voice flows.
- Audio Processing — your speech audio is sent to Google's Gemini API for transcription to text. See Google's Gemini API Privacy Notice for how Google handles audio submitted to that API.
- Not Stored By Us — TaskRace does not record or retain the raw audio itself; only the resulting text transcript is saved, as part of your normal task/review data.
- Opt-in Only — you must grant microphone permission, and voice features are never used without you actively initiating them.
4. Information We Do NOT Collect
- Photos or camera access
- Contact lists
- Location data
- File system access beyond app storage
How We Use Your Information
- Provide Core Functionality — sync your tasks across devices, authenticate your account, store and retrieve your data.
- Improve the App and Your Experience — analyze usage patterns to improve features, fix bugs and crashes, understand which features are most valuable. We never use this information to sell you anything to third parties or build advertising profiles — TaskRace shows no ads and contains no ad-tracking SDKs.
- Gamification — track points earned from completed tasks, unlock features in the in-app store, maintain your progress and achievements.
Data Storage and Security
Where Your Data is Stored
- User Data — stored securely in Supabase, encrypted in transit (HTTPS), isolated per-user via Row Level Security. Only you can access your own tasks and projects.
- Local Storage — tasks, projects, and app preferences are cached locally for offline access, protected by your device's security.
- Analytics — Amplitude and Firebase data is stored on their respective secure servers. See Amplitude Privacy and Firebase Privacy.
Security Measures
- Encryption of data in transit
- Secure authentication via Google OAuth or Sign in with Apple
- Row-level security for database access
- Regular security updates
Third-Party Services
- Supabase (Data Storage) — Privacy Policy
- Google Sign-In (Authentication) — Privacy Policy
- Sign in with Apple (Authentication, iOS only) — Privacy Policy
- Google Gemini API (Voice Transcription, optional) — Privacy Notice. Used only when you actively use a voice feature; we do not retain the audio ourselves.
- Amplitude (Analytics) — Privacy Policy
- Firebase Crashlytics (Crash Reporting) — Privacy Policy
Your Data Rights
- Access Your Data — all your data is accessible within the app; you can view and export your tasks at any time.
- Delete Your Data — sign out removes local cached data from your device. Open the menu in the app and choose "Delete Account" to immediately and permanently delete your account and all associated data from our servers — irreversible, no need to contact support.
- Data Portability — your data is stored in standard formats; contact us to request a full data export.
Children's Privacy
TaskRace is not intended for children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal information, please contact us.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last updated" date and posting a notice in the app. Your continued use of the app after changes constitutes acceptance of the updated policy.
Data Retention
- We retain your data as long as your account is active.
- Accounts inactive for 2+ years may be deleted after notice.
- Deleted-account data is permanently removed within 30 days of the request.
International Data Transfers
Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.
Contact Us
If you have questions about this Privacy Policy or your data, email owlmentor@gmail.com.
Summary of Permissions
The Android app requests:
| Permission | Purpose | Required? |
|---|---|---|
| INTERNET | Connect to Supabase, sync data, Gemini voice transcription | Yes |
| RECORD_AUDIO | Voice input for standup/review/voice assist/help chat | Optional |
| VIBRATE | Haptic feedback for interactions | Yes |
| POST_NOTIFICATIONS | Reminders and review notifications | Optional |
| RECEIVE_BOOT_COMPLETED | Re-schedule reminders after device restart | Yes, if notifications enabled |
The iOS app requests microphone access for the same optional voice features, and notification permission for reminders.
We do not use: camera, location, contacts, phone, SMS, or storage access beyond app-specific storage.