Privacy policy
Last updated 23 October 2026
Taskly is a to-do list. To work, it has to store your tasks; it doesn’t need anything else about you, and it doesn’t collect anything else. There are no ads, no tracking and no analytics, and your data is never sold.
Who is responsible
Taskly is run by [operator’s full legal name or company, and postal address], the data controller for the personal data described here. Questions or requests: privacy@taskly.business.
What we store
| Data | Why | Kept for |
|---|---|---|
| Email address, name, password (stored only as a salted, one-way hash), timezone, settings | Your account, signing in, showing dates in your timezone | Until you delete your account |
| Tasks, projects, sections, labels, filters, comments and their history | The service itself | Until you delete them or your account |
| Sign-in sessions and the device/browser name they came from | Keeping you signed in, letting you sign out other devices | 60 days, or until you sign out or change your password |
| Failed sign-in attempts (email and time) | Protecting accounts from password guessing | 24 hours |
| Links you create for Claude or calendar apps (stored only as a hash) | Letting those apps reach your tasks | Until you revoke them or delete your account |
| Google Calendar connection (see below) | Two-way sync, if you turn it on | Until you disconnect or delete your account |
The legal basis is the contract between you and us (providing the service you signed up for) and, for security records, our legitimate interest in keeping accounts safe.
Where it is stored
Taskly runs on Cloudflare. Your account and tasks are stored in a Cloudflare database located in the European Union. The apps also keep a copy of your tasks on your own device so they work offline; signing out removes it.
Cookies
The web app uses one cookie, which keeps you signed in. It is strictly necessary, so no consent banner is needed. The website you are reading uses no cookies at all.
Google Calendar
If you connect Google Calendar, Taskly asks Google for permission to:
- read your calendars’ events, to show them next to your tasks in Today and Upcoming;
- create one calendar called “Taskly” and manage the events in it, to place your dated tasks there and update a task when you move its event.
Taskly stores the Google account email you connected and the access tokens Google provides, so sync keeps working. Events from your other calendars are fetched when you view them and are not stored. Disconnecting in Settings revokes Taskly’s access at Google and deletes the tokens.
Taskly’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google data is used only to provide the calendar features you see in Taskly, is never used for advertising, is never sold, and is never used to train AI models.
Claude and calendar links
If you create a Claude link in Settings and add it to Claude, Claude can read and change your tasks when you ask it to. What you say to Claude is handled by Anthropic under your own Claude account and its privacy terms. Calendar subscription links show your dated tasks to the calendar app you add them to. You can revoke either kind of link at any time.
Who else processes data
- Cloudflare hosts the app and its database (EU storage).
- Google, only if you connect Google Calendar.
- Anthropic, only if you connect Claude, under your own Claude account.
- Apple and Google deliver the iPhone and Android apps through their stores.
Some of these companies are based outside the EU; transfers rely on the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.
Your rights
You can get a copy of all your data at any time in Settings → Backup, and delete your account and everything in it in Settings → Account. You also have the right to access, correct, restrict or object to processing, and to complain to your data protection authority (in France, the CNIL). Write to privacy@taskly.business for anything else; we answer within one month.
When you delete your account, your data is removed from the live database immediately. Encrypted database backups kept for disaster recovery expire within 30 days.
Children
Taskly is not meant for children under 15 and does not knowingly collect their data.
Changes
If this policy changes in a way that matters, we’ll tell you in the app before the change takes effect.