Task OS

Privacy Policy

Effective date: July 14, 2026 · Last updated: July 14, 2026

This Privacy Policy explains what information Task OS (“Task OS,” “we,” “us”) collects, why, and what choices you have. Task OS is operated by [Operator legal name], located in Indiana, United States. You can reach us at [email protected].

1. Information we collect

You provide

Account data: your email address, and a password (stored only as a salted PBKDF2 hash — we never store or see your plaintext password).
Content you create: tasks, notes, schedules, meal selections, stock watchlists, feature requests, and similar items you enter into the app.
Payment data (premium): if you subscribe, payment is processed by Stripe. We receive a customer/subscription identifier and status from Stripe; we do not receive or store your full card number.

Collected automatically

Session data: a signed, HttpOnly session cookie so you stay logged in. It contains an opaque profile id and an expiry — no personal data.
Basic technical/usage data: IP address, request logs, and coarse in-app usage metrics used to keep the service running and improve layout/performance.

Connected accounts you choose to link (optional)

If you link a brokerage (e.g., Robinhood) or an email account, we access only the data needed for the feature you enabled, and only while the connection is active. You can disconnect at any time.

We do not knowingly collect data from children under 13, and Task OS is not directed to them.

2. How we use information

To provide, maintain, and secure your account and the features you use.
To process and manage premium subscriptions (via Stripe).
To generate AI-assisted summaries and content at your request (see our AI Use Statement).
To send transactional email (account setup, password reset, receipts) via Resend.
To diagnose problems, prevent abuse, and improve the product.

We do not sell your personal information, and we do not use your private content to train our own or third parties’ AI models.

3. Service providers we share data with

We share the minimum necessary with vendors that help us run Task OS. Each is bound by its own terms and privacy policy:

Provider	Purpose	Data shared
Cloudflare	Hosting, edge delivery, database (D1)	Account + content data, request metadata
Stripe	Payments & subscriptions	Email, subscription status, payment details you enter with Stripe
Anthropic (Claude)	AI features you invoke	Only the content needed for that request (see AI Use Statement)
Resend	Transactional email	Your email address and message contents
Finnhub	Stock market data	The ticker symbols you look up (no personal identity)

We may also disclose information if required by law, to enforce our Terms, or to protect the rights and safety of users and the public.

4. Data retention

We keep your account and content while your account is active. If you delete your account or ask us to, we delete or anonymize your personal data within a reasonable period, except where we must retain it for legal, accounting, or fraud-prevention reasons. Backups are cycled out on a rolling basis.

5. Security

Passwords are hashed (PBKDF2-HMAC-SHA1, 310,000 iterations). Sessions use signed, HttpOnly, Secure cookies. Traffic is served over HTTPS. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your information.

6. Your choices & rights

Access / correction / deletion: email [email protected] to request a copy of, correction to, or deletion of your data.
Disconnect integrations: unlink a brokerage or email connection at any time in-app.
Marketing: we send transactional email only; there is no marketing list to unsubscribe from at this time.
Region-specific rights: depending on where you live (e.g., California/CCPA, EU/UK GDPR), you may have additional rights. Contact us to exercise them.

7. International users

Task OS is operated from the United States and our providers may process data in the U.S. and other countries. If you use Task OS from outside the U.S., you consent to processing in the U.S. under this policy.

8. Financial data note

Stock and portfolio features are for informational purposes only and are not financial, investment, tax, or legal advice. See the Terms of Service for the full disclaimer.

9. Changes to this policy

We may update this policy. If we make material changes, we’ll update the “Last updated” date and, where appropriate, notify you in-app or by email.

10. Contact

[Operator legal name] · [email protected] · Indiana, United States