Privacy policy
Data controller
The data controller is Damian Mironiuk. Contact: contact@tasklet.house.
What data we process
- Account: e-mail address, display name and account identifier. Your password is handled by Firebase Authentication (Google) - we have no access to it.
- Groups and lists: group names, member names in groups, member e-mail addresses (visible to members of the same group), shopping list items and their categories.
- Voice: when you dictate items, the audio is streamed through our server to a speech recognition provider (Deepgram) and turned into text. We do not store recordings.
- Item text (e.g. “butter”): we send it to language model providers (OpenAI, DeepSeek) to recognise the product name, amount and category. No account data is attached to it.
- Technical data: IP address and the date and type of requests in server logs.
We show no ads and use no analytics or tracking tools.
Purposes and legal bases
- Providing the service - your account, groups and shared lists (Art. 6(1)(b) GDPR).
- Security of the service and preventing abuse - our legitimate interest (Art. 6(1)(f) GDPR).
Who we share data with
Data is processed on our behalf by these service providers:
- Google - Firebase Authentication (sign-in) and Firebase App Distribution (installing the Android test version);
- Apple - TestFlight (installing the iOS test version);
- Cloudflare - network, traffic protection and e-mail forwarding;
- Oracle Cloud - server and database in Zurich (Switzerland);
- Deepgram (USA) - speech recognition;
- OpenAI (USA) and DeepSeek (China) - recognising products from item text.
Some providers process data outside the European Economic Area. List item text goes to language model providers without account data - please do not put personal data on your lists.
How long we keep data
- Account data - until you delete the account. On deletion, your name and e-mail are removed immediately and your Firebase Authentication account is deleted.
- Deleted groups (by the owner, or together with an account when there are no other members) - shopping lists and other group data are permanently deleted after 30 days.
- Server logs and database backups - up to 30 days.
Deleting your account
Delete your account in the app: Settings → Delete account. Details and other options: account deletion.
Your rights
You have the right to access, rectify and erase your data, to restrict processing, to data portability and to object. Write to contact@tasklet.house. You can also lodge a complaint with a data protection authority (in Poland: Prezes Urzędu Ochrony Danych Osobowych).
Children
The app is not intended for children under 16.
Changes
We will tell you about significant changes to this policy in the app or by e-mail. The date of the last change is at the top of this page.