Privacy policy

UPDATED 13 JULY 2026

tasky (“we”) is a team task manager, on the web at app.tasky.bot and as an iOS app. This page says exactly what we keep, why, and how you get it back or delete it.

1. What we collect

What you give us

• Account: email, name, avatar (if you upload one), password (stored hashed — we can't read it).
• Sign in with Google or Discord: we receive the email, display name and avatar from that provider. We don't read anything else in your Google or Discord account.
• Your work: tasks, projects, comments, chat messages, documents, file attachments, daily reports, leave requests.

What using it produces

• Activity log: who created, changed or completed what, and when — so your team can retrace a decision.
• Push token: your device's APNs token, if you turn on iOS notifications.
• Technical: request IP and timestamp, used for rate limiting and to stop password-guessing. We don't build behavioural profiles from it.
• Discord: if your workspace connects Discord, we store the server/channel IDs and members' Discord IDs so the bot posts in the right place.

We do not collect: location, contacts, photos (beyond what you upload), or browsing history — and nothing at all for advertising.

2. What we use it for

• Running the product: showing your work, sending notifications, syncing across devices in real time.
• Security: sign-in, rate limiting, and email two-factor codes if you enable them.
• Operational email: password resets, workspace invites, security notices. We don't send marketing email.

3. Who can see your data

• People in your workspace, according to their role. Someone who isn't in a project cannot read that project's work — that's enforced on the server, not by hiding a button.
• Our processors: Cloudflare (hosting, database, file storage). Amazon SES (email). Apple (iOS push). Discord (only if you enable the integration). Anthropic (only when you use the AI daily-report draft, which sends that day's completed tasks).
• Nobody else. We don't sell, rent or trade your data.

4. Where it lives, and for how long

Your data sits on Cloudflare's infrastructure. We keep it while your account and workspace are active. When you delete your account, your personal information (email, name, avatar, password) is deleted immediately. Work you created stays with your team's workspace — if it vanished, your colleagues' projects would be full of holes — but it is no longer tied to your identity.

5. Your rights

• See and edit your details in Settings → Profile.
• Delete your account yourself in Settings → Danger zone → Delete account, on both web and iOS. No email to anyone, no waiting for approval.
• Ask for a copy of your data, or ask us anything else — see section 7.

6. Children

tasky is a work tool and is not intended for anyone under 16.

7. Contact

Questions about your data: vniteam@gmail.com. We reply within three working days.

---

Tóm tắt tiếng Việt

tasky thu thập: thông tin tài khoản (email, tên, ảnh đại diện, mật khẩu đã băm — hoặc email/tên/ảnh mà Google hay Discord cung cấp khi bạn đăng nhập bằng nút đó), nội dung công việc bạn tạo (nhiệm vụ, dự án, bình luận, tin nhắn, tài liệu, tệp, nhật báo, đơn nghỉ phép), nhật ký hoạt động, mã thiết bị để đẩy thông báo iOS, ID Discord nếu workspace của bạn nối Discord, và địa chỉ IP để giới hạn tần suất và chống dò mật khẩu.

Chúng tôi không thu thập vị trí, danh bạ, ảnh trong máy, hay lịch sử duyệt web; không có SDK quảng cáo; không theo dõi bạn qua các app khác; và không bán dữ liệu cho ai. Hạ tầng: Cloudflare. Gửi email: Amazon SES. Đẩy thông báo: Apple. Discord (nếu bạn bật tích hợp). Anthropic (chỉ khi bạn dùng gợi ý nhật báo bằng AI).

Bạn tự xoá tài khoản trong Cài đặt → Vùng nguy hiểm → Xoá tài khoản, trên cả web và iOS. Thông tin cá nhân bị xoá; nội dung công việc vẫn ở lại workspace của team nhưng không còn gắn với danh tính của bạn. Hỏi gì thêm: vniteam@gmail.com.