Privacy Policy

Last updated: 8 March 2026

1. Introduction

TaskTrap ("we", "our", "us") is committed to protecting your privacy. This policy explains how we collect, use, store, and protect your personal data when you use our task management service. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

We collect the following types of information:

  • Account information: your name, email address, and password (hashed)
  • Task data: tasks, lists, priorities, due dates, and workspace content you create
  • Billing information: payment details are processed and stored by Stripe; we store only your Stripe customer ID and the last four digits of your payment method
  • Usage data: basic information about how you interact with the Service, such as login timestamps
  • Device information: browser type, operating system, and IP address for security purposes

3. How We Use Your Information

We use your information to:

  • Provide, maintain, and improve the Service
  • Process payments and manage subscriptions
  • Send important account notifications (e.g. password resets, billing confirmations)
  • Protect against fraud and unauthorised access
  • Comply with legal obligations

We do not sell your personal data. We do not use your task data for advertising or marketing purposes. We do not share your data with third parties except as described in this policy.

4. Legal Basis for Processing

We process your data under the following legal bases:

  • Contract: processing necessary to provide the Service you've signed up for
  • Legitimate interest: improving our Service, preventing fraud, and ensuring security
  • Legal obligation: complying with applicable laws and regulations

5. Data Sharing

We share your data only with the following third parties:

  • Stripe: for payment processing (see Stripe's Privacy Policy)
  • Hosting providers: our infrastructure providers who store and process data on our behalf, under strict data processing agreements

Within a workspace, task data is visible to workspace members according to the permissions set by the workspace owner.

6. Shared Status Pages

When you enable sharing for a task list, a public status page is created that displays task names, their current status, and progress. This page is accessible to anyone with the link without authentication. No personal information (such as user names or email addresses) is displayed on shared status pages. You can disable sharing at any time.

7. Data Retention

Your account data is retained for as long as your account is active. Completed tasks are automatically removed after 14 days. Archived tasks are removed after 90 days. If you delete your account, all your personal data and task content will be permanently deleted. Billing records may be retained as required by law.

8. Data Security

We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS), hashed passwords, and access controls. While we take reasonable steps to protect your data, no method of electronic storage or transmission is completely secure.

9. Cookies

We use essential cookies required for the Service to function (e.g. session management, CSRF protection, theme preference). We do not use advertising or tracking cookies. We do not use any third-party analytics services.

10. Your Rights

Under UK GDPR, you have the right to:

  • Access: request a copy of the personal data we hold about you
  • Rectification: request correction of inaccurate data
  • Erasure: request deletion of your data ("right to be forgotten")
  • Portability: request your data in a portable format
  • Object: object to processing based on legitimate interest
  • Restriction: request restriction of processing in certain circumstances

To exercise any of these rights, contact us at hello@tasktrap.app. We will respond within 30 days.

11. Children's Privacy

TaskTrap is not intended for children under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this policy from time to time. If we make material changes, we will notify you by email or through the Service. The "last updated" date at the top of this page indicates when the policy was last revised.

13. Contact

If you have any questions about this privacy policy or how we handle your data, contact us at hello@tasktrap.app.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data has been handled unlawfully.