Privacy Policy

This Privacy Policy explains how TaskToss ("we", "us", "our") collects, uses, and protects your personal data when you visit tasktoss.com, join our waitlist, or use the TaskToss app. We are the "data controller" for this information under the UK General Data Protection Regulation (UK GDPR) and the EU GDPR where applicable.

This document is a starting template prepared in good faith. Before launch, replace the bracketed placeholders and have it reviewed by a qualified legal professional to ensure it reflects your registered legal entity and final data practices.

1. Who we are

TaskToss is operated by [Your registered company name], [registered address], [country of registration]. For any privacy question, contact us at privacy@tasktoss.com.

2. The data we collect

When you join the waitlist: your email address, and basic technical information your browser sends automatically (such as approximate region and device type, where analytics is enabled).

When you use the TaskToss app (after launch):

• Your phone number, used to create and secure your account via a one-time passcode.
• Your chosen username and display name.
• The content you create: tasks, notes, lists, due dates, and comments.
• Tasks you send to or receive from other people ("tosses"), including their status.
• If you choose to sync contacts, we match phone numbers to find people you know. We do this using a secure, hashed process and do not store your address book in readable form.
• Device tokens needed to deliver push notifications.
• If you subscribe to TaskToss Plus, our payment provider processes your purchase; we receive confirmation of your subscription status but not your full card details.

3. How and why we use it (legal bases)

• To run the waitlist and tell you about launch — based on your consent, which you give by submitting the form. You can withdraw it at any time.
• To provide the app and its core features — to perform our contract with you.
• To keep the service secure and prevent abuse — based on our legitimate interests.
• To process subscriptions — to perform our contract with you.
• To send service messages (such as a notification that a task you sent was completed) — to perform our contract with you.

We will only send you marketing emails where you have consented, and every such email includes an easy way to unsubscribe.

4. Who we share it with

We do not sell your personal data. We share it only with service providers who help us run TaskToss, under contracts that require them to protect it:

• Google Firebase (Google Cloud) — hosting, database, authentication, and push notifications.
• Our email provider — to send waitlist and service emails.
• RevenueCat and the app stores (Apple, Google) — to process and manage subscriptions.
• Analytics provider, where enabled — to understand site and app usage in aggregate.

Other TaskToss users see only what you choose to share with them — for example, your display name and the content of a task you toss to them.

5. International transfers

Some providers process data outside the UK/EU. Where they do, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or the EU Standard Contractual Clauses.

6. How long we keep it

We keep waitlist emails until TaskToss launches and you have had the chance to create an account, or until you ask us to delete the email, whichever is sooner. Account data is kept while your account is active; if you delete your account, we delete or anonymise your data, subject to any legal retention obligations.

7. Your rights

Under UK and EU data protection law you have the right to access, correct, delete, restrict, or object to our use of your personal data, and the right to data portability. To exercise any of these, email privacy@tasktoss.com. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk, or your local supervisory authority in the EU.

8. Cookies and analytics

The waitlist site uses minimal storage in your browser to remember that you have signed up. If we enable analytics, we will use a privacy-conscious provider and update this policy and any cookie notice accordingly.

9. Children

TaskToss is not directed at children under 13 (or the minimum age in your country), and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.

10. Changes to this policy

We may update this policy as TaskToss grows. We will post the new version here with a revised "last updated" date, and notify you of significant changes where appropriate.

11. Contact

Questions about your privacy? Email privacy@tasktoss.com and we'll help.