Privacy Policy

Taskly is a small app that turns things you send (screenshots, PDFs, voice notes, text) into tasks. This page explains exactly what we collect, where it lives, and how it's protected.

What we collect

When you sign up

• Email address — used as your login.
• Password — stored only as a secure hash. We never see or store your actual password.

When you create tasks

• Task details — title, description, due date, due time, priority (low/medium/high), and status (todo/in progress/done).
• Source — whether the task came from a screenshot, PDF, voice note, pasted text, or you added it manually.

When you send something to Taskly

• The file you uploaded — a screenshot, photo, PDF, or voice note.
• The text you pasted — if you used the text input instead of uploading a file.
• A short AI summary — the one-line description our AI generated from your input.
• Processing status — whether the AI finished successfully.

What we do NOT collect

• No phone number, real name, or address.
• No payment information (Taskly has no paid plans yet).
• No location data.
• No analytics, tracking pixels, or advertising cookies.

Where your data lives

Everything is stored in Supabase — a secure, enterprise-grade platform built on PostgreSQL. Supabase is trusted by thousands of production apps and provides the security infrastructure that lets a small team like ours protect your data properly.

How Supabase keeps it safe

• Encrypted in transit — all traffic between your browser and Supabase uses HTTPS/TLS.
• Encrypted at rest — data on disk is encrypted with AES-256.
• Isolated accounts — every query is filtered by your user ID, and Supabase Row-Level Security policies prevent anyone else from ever reading your rows, even with a leaked API key.
• Private file storage — your uploaded screenshots, PDFs, and voice notes are stored in a private bucket. They are only accessible through short-lived signed links that we generate for you.
• Hashed passwords — your password is never stored in plain text.

AI processing

When you send something, we pass it to Google's Gemini API so it can pull out tasks. Google processes it and sends back structured data. We use the paid API, which Google says it does not use to train its models.

Please do not upload anything highly sensitive — ID documents, medical records, bank details, passwords, or private conversations. Taskly is designed for everyday things like school, work, and errands.

How long we keep it

Taskly is an MVP running as a pilot. We keep your data for the length of the pilot, and delete it when the pilot ends or when you ask us to.

Deleting your data

Want your account and everything in it removed? Email [aividsgeneator@gmail.com] and we'll delete everything within 7 days.

Who can see it

Just you. We only share data with the services that make Taskly work: Supabase (database + file storage) and Google (AI processing). We don't sell your data, and we don't share it with anyone else.

Changes

If we change this policy, the "last updated" date at the top will change too.

Questions

Email [aividsgeneator@gmail.com].