Privacy Policy

Last updated: September 20, 2026

This Privacy Policy describes how ETasks (“we”, “our”, or “the app”) handles information when you use this website or our native Apple application that syncs with Google Tasks. ETasks is published by the developer identified in the App Store listing (bundle identifier sgsimplydo.ETasks). This policy is published at https://etasks.app/privacy.html.

If you have questions, contact us at support@etasks.app.

Summary

• ETasks accesses your Google Tasks data only after you sign in with Google and grant permission.
• We do not operate a separate cloud server that stores your Google account password or a copy of your task database for advertising.
• Task content (titles, notes, due dates, completion, list structure) is synchronized with Google using Google’s APIs.
• When you link an Apple Mail message, ETasks stores limited identifying metadata for that message. On Google-connected tasks, that metadata may sync through an app-specific marker in the task’s Google Tasks notes. ETasks does not request Gmail access or store the message body.
• Some fields exist only on your Apple devices (reminder times, week-view ordering, list layout, language preference, and certain UI settings) and may sync via Apple iCloud between your devices signed into the same Apple ID.
• Optional location reminders (Settings → Labs) use your device location to notify you when you arrive at or leave a place tied to a task. Always location access is required for background alerts. Place metadata may travel with the task; live location is used on-device for geofence monitoring and is not sold or used for advertising.
• When the optional Recycle Bin is enabled, recently deleted lists and tasks are kept in a local snapshot on your device until you restore or permanently delete them.
• The app collects anonymous usage analytics (for example which screens are opened and whether sync succeeds) that are anonymized before they leave your device and can never be linked back to you. Task content is never included.
• This website uses first-party, cookie-free analytics to count visits and download clicks. It does not create persistent visitor profiles or send website analytics to a third-party analytics service.
• Users who already allow ETasks notifications may automatically receive announcement push alerts. We store only a pseudonymous Apple Push Notification service (APNs) device token, its sandbox or production environment, and timestamps for this purpose.
• We do not sell your personal information.

Information we access

Google Tasks (via Google sign-in)

When you connect your Google account, the app requests the OAuth scope:

https://www.googleapis.com/auth/tasks

Through this scope, the app may access and update, on your behalf:

• Your Google Tasks task lists (names and ordering metadata Google provides)
• Tasks and subtasks within those lists, including title, notes, due date, completion status, and parent/child relationships
• Fields required to keep your tasks ordered and synchronized with Google’s service

We do not request access to Gmail, Google Calendar, Google Drive, Google Photos, or other Google products.

Favorite (starred) tasks and notes

Google’s public Tasks API does not expose the same “starred” flag shown in Google’s official Tasks apps. To keep favorites consistent when syncing, ETasks may append a small, app-specific marker line ([★ETasks]) to the bottom of a task’s notes field when you star a task. The marker is removed from what you see inside ETasks and is only used so the favorite state can round-trip through Google. If you edit notes in another Google Tasks client, you may see or remove that marker there.

Linked Apple Mail messages

When you choose to link a message by dragging it from Apple Mail, ETasks stores the message subject, sender, sent date, and a callback identifier derived from the message’s Message-ID. This lets ETasks show the link and either reopen the message in Apple Mail or help you search for it. ETasks does not request access to Gmail or another mail provider’s account, and it does not store or synchronize the email body or the message’s file attachments.

• For a Google-connected task, ETasks encodes the linked-message metadata in a compact app-specific marker in that task’s Google Tasks notes so the link can appear on your other devices. The marker may be visible if you edit the notes in another Google Tasks client.
• For an iCloud shared list, linked emails stay personal on your device. Their metadata is not added to the shared task record and is not sent to collaborators.
• An ETasks backup you export includes the linked-message metadata so links can be restored. Keep exported backup files secure because they may contain task and linked-email information.

Location (optional Labs feature)

When you enable Location notifications under Settings → Labs, you can attach a place to a task and receive a local notification when you arrive at that place (and optionally when you leave, if Leaving notifications is on). The app uses Apple’s location services and on-device geofences for this. Always location access is required so reminders can fire when the app is closed; with While Using only, background location reminders will not fire.

• Place coordinates and related reminder settings are stored with the task (including as app-specific notes metadata on Google-connected lists, similar to other ETasks enhancements) so the reminder can sync with the task where applicable.
• Your live device location is used on the iPhone to monitor geofences and to show your position on Calendar Map. It is not sent to a developer-operated backend for advertising or analytics profiling.
• On shared lists, location reminders stay personal to you; collaborators do not receive your place alerts.
• You can turn Location notifications off in Labs at any time, and you can revoke location access in iOS Settings.

Announcement push notifications

When a user has already authorized or provisionally authorized ETasks notifications, the app automatically enrolls that installation to receive announcement alerts through the Apple Push Notification service (APNs). ETasks does not display a permission prompt solely for announcements. To deliver these alerts, the app sends our server the APNs device token assigned to that installation, whether it belongs to Apple's sandbox or production environment, and refresh timestamps.

The token is a pseudonymous delivery address. It is not stored with a Google account, Apple ID, task, list, email address, or task content. It is used only to send ETasks announcement notifications. Disabling notifications for ETasks in iOS Settings removes the active token on the next successful synchronization and stops delivery. A token is also removed when APNs reports it invalid or unregistered, or after 180 days without a refresh. The app keeps the last submitted token and environment locally on that installation so it can explicitly remove an older registration after APNs rotates the token or you opt out; that local copy is cleared after a successful removal.

Hostinger, our managed website hosting provider, automatically records standard access-log metadata for requests to the registration endpoint. This can include the request IP address, time, HTTP method and path, response information, and country derived by the provider. Standard access-log entries do not include the JSON request body, so ETasks does not place the APNs token or its environment in those entries. Hostinger controls retention of these provider logs under its hosting operations and policies; we do not use them to identify testers or for advertising.

Separately, to prevent automated abuse, the ETasks application creates a keyed daily value derived from the request network address for up to 24 hours; expired values are deleted on a later registration request. This value is not a raw IP address, cannot be used to deliver notifications, and is not linked to a device token or delivery record.

Data stored on your device

On your iPhone, the app locally stores:

• A cached copy of your lists and tasks for fast, offline use
• OAuth tokens (including a refresh token) in the device Keychain so you stay signed in
• A queue of pending changes waiting to sync when online
• Local notification schedules for time-based and (when enabled) place-based reminders
• Local-only task fields such as alarm/notify times and week-view day ordering (weekDayPosition)
• Location reminder place metadata for tasks you configure (when Labs location notifications are used)
• Linked Apple Mail message metadata that you add to tasks (subject, sender, sent date, and message callback identifier)
• Deleted list and task snapshots when you use the optional Recycle Bin
• For notification-authorized installations, the last APNs token and environment submitted for announcement delivery, until the server confirms removal or replacement
• Your chosen app language override (stored for the next launch)

Apple iCloud (optional)

If you are signed into iCloud on your device, certain local-only data (for example alarm/reminder times, week-tab day ordering, list layout and colors, Recycle Bin preference, undo-toast settings, location-reminder preferences such as radius, and app language choice) may sync between your Apple devices using Apple’s CloudKit and Key-Value storage, tied to your Apple ID. This does not replace Google Tasks sync; titles, notes, due dates, and completion still sync through Google when you use Google sign-in.

How we use information

We use the information described above solely to:

• Display and let you manage your Google Tasks on iPhone
• Keep your device in sync with Google Tasks when you are online
• Schedule local notifications at times you choose, and (when you enable Labs location notifications) when you arrive at or leave places you attach to tasks
• Send product-announcement notifications to installations whose users already allow ETasks notifications
• Show Calendar Map pins for open location reminders and help you pick places on a map
• Remember your preferences and local-only enhancements across app launches and, where applicable, your Apple devices

We do not use your Google Tasks content or location data for advertising or sell it to third parties.

Anonymous app usage analytics

To understand which features are useful and whether the app is working reliably, ETasks sends a small number of anonymous usage signals to TelemetryDeck, a privacy-focused analytics service. Examples of signals include: the app was launched, a tab was opened, onboarding was completed, a task was created (as a count only), or a sync run succeeded or failed with a coarse error category.

• No content, ever: task titles, notes, list names, email addresses, and any other content you create are never included in analytics signals.
• Anonymized by design: identifiers are irreversibly hashed on-device before transmission. Neither we nor TelemetryDeck can link signals back to you, your Google account, or your Apple ID.
• No advertising or tracking: analytics data is not used for ads, not shared with advertising platforms or data brokers, and not used to track you across other apps or websites. The app does not use the Apple advertising identifier (IDFA).
• Aggregated only: we look at this data as aggregate counts and trends (for example "how many sync runs failed this week"), not as individual profiles.

First-party website analytics

When you visit etasks.app, the website records limited first-party analytics so we can understand which pages are useful, how visitors find the site, and which pages lead to a download click. The analytics system runs on the same web server as this website and does not send these records to Google Analytics, TelemetryDeck, an advertising network, or another website analytics provider.

The website may record:

• The allowlisted public page path viewed, referring website domain, and standard campaign parameters such as utm_source, utm_medium, and utm_campaign. Campaign values that are not simple bounded labels, including email-shaped values, are discarded.
• A download click and its general placement on the page, such as the navigation, hero, page body, or footer
• Coarse device, browser, operating-system, viewport, language, and time-zone categories
• Requests for missing pages, so broken links can be identified; email-shaped, token-like, and otherwise unsafe path segments are replaced with [redacted]

The tracker does not use cookies, local storage, or session storage. The web analytics application processes the request IP address and browser User-Agent only in memory to create a keyed, pseudonymous identifier that changes at midnight Singapore time. A separate day-scoped keyed IP bucket limits abuse and is removed after it is no longer needed. The raw IP address and User-Agent are not written to the ETasks analytics database. Hostinger may separately retain the standard hosting access-log metadata described in this policy, including a raw request IP address; those provider logs are not part of the ETasks analytics database and do not include the analytics POST body. The active database keeps only the current day's visitor key rather than intentionally linking identifiers across days. Form contents, email addresses, app task data, arbitrary URL query parameters, and page text are never included.

Website analytics older than 13 months are excluded from reports and deleted automatically in bounded batches on the next analytics or dashboard request. If the private database reaches its fixed storage budget sooner, the oldest complete reporting day is removed so newer traffic can still be measured. The browser tracker does not run when your browser sends Global Privacy Control or Do Not Track, and analytics being unavailable or blocked does not affect the website. We use these records only as aggregate traffic and conversion reports, not for advertising or cross-site tracking.

Where data is processed

Network requests for Google Tasks go directly from the app on your device to Google’s APIs (for example tasks.googleapis.com). We do not route your Google task content through a developer-operated backend server for sync.

Sharing with third parties

We share information only as needed to provide the app:

• Google: when you sign in and use sync, per Google’s API terms and your account settings
• Apple: for App Store distribution, iCloud (if enabled), local notifications, optional APNs announcement delivery, and (when you enable location reminders) Apple location services / MapKit for place picking and geofences, per Apple’s policies
• Hostinger: hosts the ETasks website and may process standard request access-log metadata as part of operating and securing the managed hosting service, per its privacy policy
• TelemetryDeck: receives only the anonymized, content-free usage signals described under “Anonymous usage analytics” above, per its privacy policy

First-party website analytics remain on the ETasks website server and are not shared with a third-party analytics provider.

We do not sell or rent your personal information to data brokers.

Google API Limited Use Disclosure

ETasks's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

With respect to data obtained through the Google Tasks API (https://www.googleapis.com/auth/tasks):

• We use Google user data only to provide and improve user-facing features in the app (displaying, organizing, and syncing your tasks).
• We do not sell Google user data, use it for advertising, or transfer it to advertising platforms, data brokers, or information resellers.
• We do not use Google user data to determine credit-worthiness or for lending purposes.
• We do not allow humans to read your Google Tasks content except where necessary for security or legal compliance, or with your explicit agreement.
• We do not transfer Google user data to third parties except as described in this policy (for example, sync with Google’s servers and optional Apple iCloud for local-only fields) and as permitted by the Limited Use requirements.

Retention and deletion

• On your device: Cached tasks and local data remain until you delete the app or sign out (sign-out clears local task data, pending sync queue, and tokens as implemented in the app). Recycle Bin snapshots are removed when you empty the bin, restore items, or disable the feature.
• On Google: Tasks and lists remain in your Google account according to Google’s policies until you delete them in ETasks, in Google Tasks, or in another client.
• Website analytics: Detailed first-party website events older than 13 months are excluded from reports and deleted automatically in bounded batches on the next analytics or dashboard request. Daily identifiers and their visitor key reset at midnight Singapore time, and the analytics system does not intentionally join them into a cross-day visitor history.
• Announcement push tokens: Active APNs device tokens are removed when the user disables ETasks notifications and the app next synchronizes, when APNs reports the token invalid or unregistered, or after 180 days without a refresh. Delivery records retain aggregate operational status without announcement bodies or active device tokens in logs.
• Announcement registration rate limits: Separate keyed daily network values used only for abuse prevention are deleted on later registration requests after they are 24 hours old.
• Hosting access logs: Hostinger controls retention of standard managed-hosting request logs under its operational and privacy policies. These provider logs are separate from the ETasks analytics, announcement-token, and rate-limit databases and their retention schedules.
• Revoke access: You can remove ETasks’s access at Google Account → Third-party access and sign out inside the app.

Security and data protection

Security procedures are in place to protect the confidentiality and integrity of Google user data accessed through ETasks. We use encryption and other safeguards appropriate to the sensitivity of the information we handle.

Protection of Google user data

Google Tasks content (list names, task titles, notes, due dates, completion status, and related metadata) and OAuth credentials are treated as sensitive data. We protect them as follows:

• Encryption in transit: All communication between the app on your device and Google’s servers uses HTTPS (TLS). OAuth token exchange and Google Tasks API requests are sent only over encrypted connections.
• Encryption at rest on your device: OAuth access and refresh tokens, and your signed-in Google account email used for display, are stored in the iOS Keychain, which uses Apple’s secure storage and device-level encryption. Your cached task data is stored in the app’s local database on your iPhone, protected by Apple’s file-system encryption when your device is locked with a passcode, Face ID, or Touch ID.
• Secure authentication: Google sign-in uses industry-standard OAuth 2.0 with PKCE (Proof Key for Code Exchange). We do not collect or store your Google account password.
• No developer-operated backend: Google user data is not routed through or stored on servers we operate. Sync requests go directly from your device to Google’s APIs, reducing exposure of your data to additional parties.
• Access controls: Google user data is accessible in the app only after you sign in and grant the Tasks scope. You can revoke ETasks’s access at any time in your Google Account settings or by signing out in the app, which clears local tokens and cached task data as described under Retention and deletion.
• Limited human access: We do not allow personnel to read your Google Tasks content except where strictly necessary for security or legal compliance, or with your explicit agreement (see Google API Limited Use Disclosure above).

Your role in keeping data secure

You are responsible for keeping your iPhone and your Apple and Google accounts secure (for example, using a device passcode, Face ID, or Touch ID, and protecting your account credentials). If you believe your device or Google account has been compromised, revoke ETasks’s access and sign out in the app promptly.

Children

ETasks is not directed at children under 13, and we do not knowingly collect personal information from children.

International users

Google, Apple, and Hostinger may process data in countries where they operate data centers. By using the app, you understand that sync involves these providers’ global infrastructure.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on this page with an updated “Last updated” date. Continued use of the app after changes means you accept the updated policy.

Contact

Email: support@etasks.app

Note for Google OAuth verification: This page is the privacy policy URL for the ETasks iOS app at https://etasks.app/privacy.html. The app requests only the Google Tasks API scope listed above.